Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa
File:                     27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa (raw, json)
Hash identifier:          u+uJGcZWGCF5x9F+dqq2IAuAt8rQebPzbtgEH1AU7d8=
Subject key identifier:   12:F0:22:98:C9:AB:07:4B:F1:21:DE:E7:67:31:6F:07:AC:E1:40:AC
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584ED001D14E097EA54E77DF5980
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     8781
IP address blocks:        209.58.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d1:4e:09:7e:a5:4e:77:df:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=687b2fcf-81bc-4e23-8778-5877047dce9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:5b:42:9c:6a:12:a0:a5:30:cf:5a:81:16:
                    d0:d6:aa:17:0c:1e:87:76:a7:7b:72:98:4d:47:31:
                    18:59:3b:b1:fc:80:e6:87:41:5f:30:33:f0:81:61:
                    04:c9:0b:48:f3:38:29:d3:17:38:b6:65:32:61:68:
                    8e:43:26:6e:91:f0:80:71:01:00:a0:68:30:93:e1:
                    75:e9:42:6e:bc:b7:a2:38:d2:0f:46:83:f7:5e:6f:
                    cb:c3:04:c6:6b:31:56:bb:c1:1a:e8:26:0d:e6:1b:
                    58:48:ea:41:1e:4b:f4:43:53:81:0e:65:33:84:ca:
                    68:0f:6f:9f:c5:06:65:9d:49:06:e1:bf:19:e4:db:
                    e5:86:cf:93:b3:fa:08:47:e7:9c:dd:e9:6a:f2:37:
                    a1:55:94:64:b9:c8:d3:88:51:64:76:9a:c6:da:92:
                    cf:e4:9b:67:51:83:19:6d:ca:f9:a0:6a:f9:10:dc:
                    c0:1c:6f:02:30:49:f6:c1:83:d0:01:b7:a3:d3:f3:
                    64:aa:12:11:a6:b6:a3:72:c2:80:42:c8:ef:d7:55:
                    f2:9a:9a:eb:4a:e0:4b:d8:4c:8b:5b:dd:7a:06:8d:
                    a5:00:d5:cd:56:fa:26:f0:f6:0f:e8:98:b1:d5:cc:
                    fb:60:6a:7f:ef:82:37:43:bc:5b:05:cf:dd:bc:2c:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F0:22:98:C9:AB:07:4B:F1:21:DE:E7:67:31:6F:07:AC:E1:40:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/27846eec-5acb-3f57-8cfe-2e7e32df0c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.58.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:95:a8:5b:d4:c1:78:8f:32:c9:09:80:13:bc:d4:bc:c4:db:
         24:1d:e1:fc:23:91:24:0a:dd:af:90:68:5b:d8:7c:4c:89:f9:
         a4:58:74:2b:ee:d5:07:1c:39:81:a5:51:8f:22:7d:0b:0f:03:
         0c:04:b8:3a:cb:9f:97:72:4b:3f:56:2e:ed:e2:7c:ba:02:79:
         4c:50:03:6f:f4:84:7f:08:19:d7:5a:4f:1b:c0:94:22:6d:8a:
         d8:ab:2e:5e:24:47:d1:d4:c9:fa:7e:39:86:5d:73:18:30:ad:
         0c:68:72:bf:65:a5:f7:f5:e1:09:1b:46:48:83:a9:66:c5:65:
         4b:23:86:ca:c0:1c:69:3b:b8:a5:30:9e:3e:c3:9e:84:50:a9:
         94:bb:c6:17:b4:e7:dd:d4:67:a9:a4:9a:cb:d8:38:06:54:d7:
         12:c9:06:55:41:23:fd:91:93:6e:ac:c8:c9:93:2a:6f:1e:0b:
         15:6a:cc:1c:0d:7a:24:9d:31:70:67:91:b6:67:78:04:1c:0d:
         24:d4:a6:11:3e:2d:cf:72:06:ce:fa:b1:78:45:6e:d7:f3:21:
         a9:d0:13:fe:db:0d:bb:9a:75:4e:6d:b3:88:8d:40:71:a8:68:
         7b:a8:8a:20:e5:9d:bb:3d:d2:64:fa:81:79:e7:5a:2e:74:66:
         cb:57:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:44:54 2026 by rpki-client