Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa
File:                     f9798137-b618-3b75-a215-c6897b42d2ee.roa (raw, json)
Hash identifier:          w9AnpjTENsOp1v0bhNuvbZX140ye7zs9+Clw+tuXCh0=
Subject key identifier:   10:CF:D6:00:96:89:64:3F:DA:FF:18:83:B7:86:CC:91:92:1A:08:EE
Certificate issuer:       /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial:       010D0C9F4328584F1897A56F54487F0FAB749B80
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     26677
IP address blocks:        199.212.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a5:6f:54:48:7f:0f:ab:74:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=76977ecd-ce02-469e-8af5-bb38132e7714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:07:21:14:3e:92:19:c6:30:3c:c0:63:13:c4:
                    ca:b9:33:db:4f:7c:67:b8:7e:ea:f2:6d:82:36:1e:
                    2d:25:c6:d8:fd:6b:18:a9:18:61:a6:5b:70:21:b8:
                    24:2a:0a:ff:39:96:35:ba:5b:ee:55:1a:c5:5f:85:
                    f7:2b:fb:61:9b:2c:a8:33:39:8b:19:ab:72:21:62:
                    de:7c:28:a6:e4:43:34:46:0f:cb:b3:0c:1f:67:73:
                    cf:95:21:da:97:a5:5b:8e:1c:ce:16:b3:56:26:54:
                    a4:8b:00:3b:8c:9b:d1:80:88:76:da:9c:ba:36:08:
                    11:ca:ad:31:0b:43:62:7a:25:2d:0f:19:71:06:49:
                    70:09:eb:1a:04:dd:36:84:ba:24:bf:af:94:2d:a1:
                    ad:6e:31:c2:9e:5b:2b:24:e6:be:fe:24:fb:2d:35:
                    42:78:80:5f:ec:e6:b3:a4:f0:49:15:1f:32:b4:e9:
                    d7:49:81:8e:dd:5b:0d:95:55:06:41:f6:36:11:3c:
                    d3:f4:8e:ab:8a:fb:e2:01:7d:4c:6e:ac:9f:81:fa:
                    22:63:b2:dc:67:aa:5b:ca:b6:57:ea:d9:1a:6b:36:
                    67:aa:d3:c9:e3:f7:37:84:d4:06:f5:7b:9e:bb:d5:
                    26:48:ef:92:51:b8:1e:2b:33:9f:d4:fb:d1:4d:ee:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CF:D6:00:96:89:64:3F:DA:FF:18:83:B7:86:CC:91:92:1A:08:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/f9798137-b618-3b75-a215-c6897b42d2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl

            X509v3 Authority Key Identifier:
                keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:72:03:b5:e6:66:25:05:91:ad:f4:4b:9f:c9:23:59:d9:59:
         93:0d:0f:12:0e:14:95:89:f9:0f:32:a7:de:36:a3:b4:77:62:
         6a:02:cd:dd:b5:2a:e5:a2:5a:f2:c7:8a:ea:3c:d4:7e:ef:0e:
         a4:28:bc:8e:52:6c:68:66:b2:a8:e2:6a:c6:bf:e7:b1:a4:e7:
         cf:4c:60:b6:4a:9f:ae:72:98:95:e2:9e:d4:54:d4:17:a9:84:
         bc:89:55:e4:10:e3:fb:76:72:64:2e:94:b7:6f:0a:5e:e2:55:
         f9:e3:47:86:c5:15:3b:3e:b7:bc:63:7c:2f:d9:23:1e:44:a5:
         c3:0e:49:8e:3c:53:d8:01:4b:17:a5:dd:e6:14:03:92:ca:3f:
         11:31:f0:ee:f8:3d:32:1b:13:38:9e:86:82:52:55:66:a7:e4:
         68:13:51:61:56:35:67:74:cd:9b:41:27:d9:5d:08:b3:44:2f:
         80:93:ca:3a:25:6c:5d:97:8d:69:e5:47:e6:78:23:f5:ba:37:
         9c:75:fe:d1:86:40:69:20:10:ad:e0:dc:92:bd:a3:8a:1d:56:
         a9:b2:5c:bd:49:e9:41:3c:55:0f:d7:0e:57:ff:f0:95:e0:ef:
         5b:13:13:37:bc:c8:3c:eb:e8:58:c8:7c:a0:d6:95:b0:d5:06:
         1b:53:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:55:58 2026 by rpki-client