Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d1207a92-3a0f-36a6-a949-6f8bba07fb6a.roa
File:                     d1207a92-3a0f-36a6-a949-6f8bba07fb6a.roa (raw, json)
Hash identifier:          IT291NJRLRj/CrQpFmhNLg0xwIm4MMPbSGQKdrTOMCY=
Subject key identifier:   E1:DC:31:21:A1:17:C9:F5:10:D9:EE:C9:0D:24:FE:3E:D6:2E:D0:88
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584FA85DDE3BBD025FEC26BFB780
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d1207a92-3a0f-36a6-a949-6f8bba07fb6a.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     19901
IP address blocks:        208.161.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5d:de:3b:bd:02:5f:ec:26:bf:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=73a18d62-5617-4150-b698-e294ceb695e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:82:c4:60:1a:1b:55:40:5f:99:56:f4:dc:
                    3b:f2:be:c5:d7:33:1d:a2:05:ae:59:21:aa:d8:e5:
                    42:63:c8:5f:18:48:ab:43:e4:6a:66:03:fa:f0:b6:
                    92:7f:3a:2f:77:8d:5a:fe:1e:8f:77:2e:a4:a7:ca:
                    e0:55:4e:c3:e1:06:3c:41:ca:36:f7:34:b3:7e:a4:
                    bc:b4:9d:f1:21:83:43:19:14:ad:ee:77:f0:a2:aa:
                    3e:8c:b6:c3:33:2e:ba:6d:a4:77:55:83:a9:49:fe:
                    79:87:30:37:7b:22:cf:86:78:a7:9e:fc:2f:86:68:
                    26:c7:b9:58:bd:59:8e:48:09:f8:38:83:ac:f0:3c:
                    d3:4b:7b:c0:3b:30:d7:d0:0e:87:0b:31:17:e9:f6:
                    26:c8:99:d8:6a:3a:8a:10:af:9e:30:03:a9:de:32:
                    18:01:b0:cd:9a:2f:37:53:eb:ed:ef:ed:f7:44:79:
                    d6:06:a3:bd:a3:4a:c5:34:83:05:93:1d:77:b2:41:
                    98:e5:c9:3f:fd:13:5e:50:e2:98:5f:34:11:6b:18:
                    09:3e:ac:56:50:5a:93:56:5e:a6:2d:19:1b:d0:2d:
                    d5:a0:4b:36:4a:59:e5:12:34:33:15:9e:f5:f8:9f:
                    96:27:d7:e3:49:da:3e:95:58:2b:8d:ed:b7:69:8f:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DC:31:21:A1:17:C9:F5:10:D9:EE:C9:0D:24:FE:3E:D6:2E:D0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d1207a92-3a0f-36a6-a949-6f8bba07fb6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.161.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:e0:3d:8d:e3:da:b7:83:e2:6f:2c:39:35:b5:ca:68:53:
         2b:05:9f:63:43:7e:12:d6:9f:13:c3:c4:79:b8:13:c4:7d:34:
         33:d2:5c:bc:ff:90:8e:e9:da:b0:28:74:a3:57:a0:3d:9f:b5:
         51:3c:64:49:40:6d:48:23:df:25:ca:93:18:1b:f4:21:2e:9e:
         01:0c:04:25:0c:a7:5c:c6:9d:6b:38:c6:40:05:43:d8:21:8d:
         0b:96:2c:27:ca:c7:3c:5b:5c:69:ce:bb:9f:65:13:b3:dd:13:
         27:e2:9c:ab:9d:3e:eb:1b:f5:17:c2:43:3b:dd:d1:0e:fd:a3:
         8e:6a:83:04:42:36:43:f9:60:6d:c3:7f:1a:45:4c:89:9a:fd:
         d6:d8:ce:9a:c6:9b:de:eb:7c:71:bd:86:50:1c:0c:8c:12:74:
         f9:43:82:7c:0f:de:ef:36:0c:37:0f:77:f6:76:a4:62:59:24:
         00:54:1d:27:e0:28:08:42:04:6a:d8:e4:14:d8:db:97:f9:83:
         37:1e:52:97:09:0d:0b:44:5a:bc:aa:64:1e:80:bd:43:fd:05:
         b7:25:e2:7d:91:a1:37:08:38:a2:36:3b:36:80:10:09:a3:6e:
         cc:0b:2a:9d:82:67:85:f3:7e:48:b6:60:e0:3a:ef:92:b7:f4:
         b3:1e:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:43:37 2026 by rpki-client