Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa
File:                     b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa (raw, json)
Hash identifier:          mi9K40PcCfIbvFdw0xBB7TyXyyYKCtX66q6g78hbFbE=
Subject key identifier:   D2:C2:1F:6D:A1:37:44:B8:E7:3E:51:8B:D7:69:E5:A9:D3:80:DA:06
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584F6C584F325222B5D826FA9B40
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     36549
IP address blocks:        207.228.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:4f:32:52:22:b5:d8:26:fa:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=9fcb9e8f-d1a0-4078-8c98-2615c36e10d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:50:58:26:df:59:46:04:33:7e:00:a1:7f:
                    37:76:a9:5b:b4:f4:6f:0d:90:bc:91:cd:50:04:bb:
                    1f:e2:a7:36:0e:21:2b:b9:46:f2:72:84:cb:51:36:
                    3c:04:a5:1b:e0:31:bb:56:d0:0d:b7:8b:8b:32:e7:
                    21:cc:87:74:49:9b:b2:27:b5:fd:2e:e5:2d:0b:75:
                    c8:f8:7f:43:6e:53:fa:d7:28:2f:74:ff:11:30:e5:
                    16:dc:ad:25:77:72:b0:6d:0f:f5:7e:0f:f0:f1:cc:
                    02:b0:34:91:5f:27:d0:55:10:01:37:98:dc:26:49:
                    e2:be:5e:45:7e:c8:9f:bd:0a:49:dc:68:3e:96:b2:
                    44:24:0f:25:62:40:eb:d3:fd:4f:16:0d:b0:1c:1f:
                    58:a1:29:4b:d0:08:de:5d:d1:40:89:77:7e:40:69:
                    62:48:78:db:b9:83:7a:da:1a:79:56:79:7b:5b:21:
                    10:e8:41:50:11:1c:c2:71:30:c3:9e:69:79:b9:05:
                    e6:92:10:10:8c:31:67:3c:22:e3:14:f2:f3:3d:ed:
                    6e:c0:65:10:e4:26:8c:de:ae:01:d5:ee:38:b1:45:
                    19:b9:be:7b:67:06:10:59:ad:b3:b4:75:8d:5c:9a:
                    47:f5:8e:d5:bd:74:a1:e2:6d:4c:7c:06:9b:d8:30:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C2:1F:6D:A1:37:44:B8:E7:3E:51:8B:D7:69:E5:A9:D3:80:DA:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b88280d0-752f-36bc-aafc-c7e4bcba34ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:97:df:24:47:f7:a2:c0:da:7a:09:27:05:b7:e3:64:d1:
         3f:c8:df:06:20:34:ac:2f:cd:1a:46:82:55:96:35:ed:69:3d:
         ae:8d:9d:60:4a:00:9f:f8:78:f2:1c:52:3c:cf:d5:88:60:51:
         0b:ef:78:3e:a6:4d:e5:1c:a0:88:05:d3:d9:c8:f0:9e:08:a1:
         7a:a8:77:81:73:16:f7:9e:32:61:d8:b8:05:c2:d2:8e:1e:10:
         2d:bf:1e:69:01:5f:5d:c9:b6:0c:6c:40:95:1f:71:72:27:18:
         96:14:11:72:09:79:56:05:80:bc:1b:87:bd:50:c0:60:1a:3e:
         f6:6b:b0:2d:b7:c2:e3:d9:62:be:7f:e1:ec:75:0c:c6:b1:31:
         f1:97:4c:e0:bf:b2:ee:06:64:24:04:a2:7f:fe:56:8d:d2:ce:
         c6:86:84:9a:d0:cf:9e:e2:4f:80:46:04:f9:5d:e4:a0:30:1f:
         4c:74:ad:57:68:ed:67:c3:c4:d3:4c:57:16:aa:8a:13:89:17:
         70:00:d8:59:15:7c:5f:51:9f:42:57:ee:9e:d9:d8:ae:31:33:
         8b:95:23:83:ab:c9:df:bf:ed:e0:01:1d:e6:38:06:89:d6:4d:
         41:2b:7f:95:8d:c7:bb:b1:09:ff:64:89:51:6e:82:b3:e3:84:
         fb:cf:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:44:57 2026 by rpki-client