Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/e5e58046-4ac8-3711-b53f-a1dd50c5e798.roa
File:                     e5e58046-4ac8-3711-b53f-a1dd50c5e798.roa (raw, json)
Hash identifier:          vBQZqxHnLZFGtHDOBwaFbFWLCmPo6VaNU3xMfLhK79w=
Subject key identifier:   0D:6B:7D:C9:D0:1A:9A:F1:09:44:1E:B7:25:15:CE:36:2B:70:0F:15
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584EDF5C8A5FF6953B04DAAF5D00
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/e5e58046-4ac8-3711-b53f-a1dd50c5e798.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     19901
IP address blocks:        9.245.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8a:5f:f6:95:3b:04:da:af:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=28eb940e-12ba-4968-89d6-80bf23fefce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:17:eb:58:a5:88:d0:43:93:10:c2:07:3d:
                    a2:b3:74:45:95:c4:9c:36:be:19:49:55:b8:11:76:
                    3f:1b:45:cf:89:41:05:4b:49:2c:b1:0d:f1:64:f4:
                    34:ec:4b:a7:77:fe:7d:53:8b:77:48:b6:86:63:ff:
                    f1:96:42:8b:fd:14:0d:a8:86:f6:e5:4e:c8:9e:c9:
                    77:8f:38:3b:6d:34:f8:7c:4f:01:1b:07:9e:60:e3:
                    25:e8:70:49:f7:3d:d8:77:7b:81:65:eb:a1:84:cc:
                    82:ba:ca:8f:29:83:0e:ed:9f:c1:29:17:0b:b4:b5:
                    93:54:4c:d6:df:75:8a:48:ae:59:1e:65:e6:5a:8c:
                    0d:b3:67:ce:1f:7c:d2:ee:64:30:69:05:dd:e0:ed:
                    ec:70:73:49:36:21:aa:b5:b8:ac:07:fa:03:48:b7:
                    5c:61:11:fa:3a:3f:4a:22:fe:4d:b2:f0:5d:89:c3:
                    90:12:7b:8a:87:ad:03:0b:f0:41:df:0e:6f:e7:3d:
                    6e:20:7f:33:fc:a2:84:c8:83:1d:6c:e5:e0:14:81:
                    27:c3:48:ce:bd:c8:8a:1d:23:51:71:7b:33:cf:08:
                    7c:dc:a7:d5:c0:0d:18:52:ae:42:09:27:c8:24:cb:
                    ef:cf:ca:f2:87:0e:7e:27:62:c5:08:da:28:b0:a5:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:7D:C9:D0:1A:9A:F1:09:44:1E:B7:25:15:CE:36:2B:70:0F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/e5e58046-4ac8-3711-b53f-a1dd50c5e798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.245.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0a:ff:68:0e:e6:ed:8c:13:ce:37:dd:6d:81:bc:b0:a3:a0:
         d3:16:b2:6c:ac:bc:68:9b:87:fe:1e:e2:8e:f9:53:ae:7f:0c:
         d5:a7:01:98:ac:25:b5:f8:34:33:72:c4:e7:11:ab:c5:b5:dc:
         d5:19:ad:43:48:60:5f:7e:39:36:d2:52:8c:23:82:a7:07:5f:
         1f:1c:30:28:d9:b1:a2:2b:d2:92:f5:92:1a:dc:83:74:23:65:
         78:06:d9:44:93:d3:89:e1:3f:71:df:e2:63:25:d5:45:78:2d:
         19:18:b7:4f:2f:ed:3e:1f:48:37:a0:e5:4f:7f:dd:0b:dc:35:
         1e:53:84:97:cc:a6:25:79:5b:9e:8b:a1:39:5e:a2:4c:8d:75:
         42:a8:94:6a:c9:b7:f2:2b:4e:69:66:80:3d:3e:7c:33:ce:e5:
         e0:42:cf:34:cc:c1:70:f8:8d:fe:96:be:8c:ca:8c:a8:94:8e:
         3b:97:a5:d8:50:cb:e8:1c:64:61:aa:d9:c5:bb:8e:85:3d:55:
         10:4b:10:76:82:a7:6d:10:a5:59:f8:ea:b0:e3:4d:5d:db:3c:
         bb:ce:48:79:15:38:8c:e3:ed:a8:45:43:ee:ce:60:47:20:a8:
         68:fe:50:2c:65:ae:f6:8c:30:0c:6e:bb:38:52:f9:fe:83:48:
         66:aa:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 11:43:36 2026 by rpki-client