Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa
File:                     509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json)
Hash identifier:          RfaqwW71KHrkRgM+kC0GGDNoSnVLtKCbqlZVn41lPL0=
Subject key identifier:   5D:97:BA:EB:A6:C3:D7:17:CA:A3:58:70:FA:DD:79:00:2C:37:1D:42
Certificate issuer:       /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Certificate serial:       010D0C9F4328584F2EED13941923396651512100
Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     16575
IP address blocks:        192.200.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:13:94:19:23:39:66:51:51:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=6b013858-3150-405f-9291-4b4adf8fc2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:d5:73:9c:23:ce:c8:51:c7:0e:bb:ca:7f:
                    57:5c:63:ef:90:0d:48:f2:28:c4:13:6d:39:a8:32:
                    cb:7a:c0:e5:43:57:cc:31:b3:bc:93:9e:5c:2c:8a:
                    19:c2:93:a6:75:74:86:fd:4e:42:ba:2e:25:99:3c:
                    42:b1:65:84:60:28:00:4d:91:d0:b3:96:e4:1b:0f:
                    f8:51:55:d9:f2:70:0f:98:26:e0:9f:ec:45:97:e9:
                    8a:01:08:9d:a5:ca:21:68:f1:37:40:71:9d:ae:6e:
                    cc:a7:9e:09:64:71:1d:86:57:b6:72:c1:81:0d:b1:
                    23:63:7a:8c:9b:f0:bf:81:d5:06:f4:b4:34:48:44:
                    e2:14:9e:ed:01:74:69:f2:d8:8f:84:19:7d:86:1b:
                    2d:c9:51:e2:47:ec:07:1b:a4:46:7c:2e:7f:a8:ca:
                    2e:6c:7c:1d:d7:4f:f6:65:b9:85:89:b7:ae:ef:bf:
                    36:48:e1:cd:c2:b9:af:34:4f:66:ce:b0:af:11:f8:
                    20:25:97:3f:9b:d3:02:44:6f:70:9a:f0:b0:fa:95:
                    bb:43:b3:ba:64:bc:7d:d6:1a:8e:c9:aa:50:05:90:
                    a2:14:36:68:33:78:57:78:ff:93:7f:13:16:88:9f:
                    f1:ee:f2:22:5e:6e:8d:15:84:2e:20:81:08:9c:36:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:97:BA:EB:A6:C3:D7:17:CA:A3:58:70:FA:DD:79:00:2C:37:1D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl

            X509v3 Authority Key Identifier:
                keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:75:15:06:1e:7f:d8:01:77:a9:cd:dd:75:c7:6e:a1:cf:6f:
         ec:5b:ab:2a:a5:d3:ab:cc:de:d0:80:ed:b4:54:45:27:77:4f:
         db:0a:e0:71:fc:28:a3:77:a9:9c:00:7a:aa:4f:7c:da:39:bc:
         73:4e:3a:38:21:68:88:35:40:f6:65:74:2b:22:79:54:1d:7f:
         8c:6b:78:e0:e1:a7:b9:a2:65:8f:2c:fd:97:83:61:32:f6:74:
         00:6e:02:5f:9f:92:9d:d9:5b:57:38:71:b2:3b:2c:56:32:93:
         0f:80:2b:ab:e2:ea:15:81:05:a2:b9:9a:50:c0:64:15:26:94:
         ee:55:4e:50:48:60:2e:06:a8:f6:5c:86:24:d2:a4:99:c4:9f:
         16:13:fe:8c:cb:53:66:98:06:07:5c:90:f4:2f:50:d8:ad:84:
         9b:32:f2:06:81:de:bc:34:f2:5d:54:43:60:b6:d1:88:f9:11:
         4b:fe:6c:3a:05:35:dc:d9:31:ac:56:3a:29:c0:de:46:07:51:
         79:e0:e3:ea:6e:bf:b5:60:7f:c1:dc:ec:73:fe:64:4f:67:47:
         b1:33:3c:9a:64:52:f9:a9:b8:6c:67:7f:92:9b:f8:d6:2d:f9:
         22:e6:d7:6f:37:5a:7a:7e:28:70:2e:ab:a9:4b:64:65:0f:fd:
         0f:ad:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:05:18 2026 by rpki-client