Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0e9cadd8-7f25-3bf4-af90-324abc48d32b.roa
File:                     0e9cadd8-7f25-3bf4-af90-324abc48d32b.roa (raw, json)
Hash identifier:          vRZgdr7rkFNVAFQcx0GYE7PNT8Sf2n8z16AGvE05Vk0=
Subject key identifier:   DA:ED:84:39:1E:32:E8:8B:65:AE:A7:49:3A:6A:07:9B:6C:12:87:3D
Certificate issuer:       /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Certificate serial:       010D0C9F4328584ED16728098673368E68195580
Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0e9cadd8-7f25-3bf4-af90-324abc48d32b.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     397050
IP address blocks:        204.144.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:28:09:86:73:36:8e:68:19:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=e1bff60d-3c25-44d4-9196-7643b680e2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:78:75:c7:47:b6:45:f8:22:09:27:bf:ef:
                    fe:f8:a5:33:9b:f3:a5:27:46:2f:60:93:6f:92:c0:
                    10:09:cd:a0:ed:19:a4:5f:20:31:e8:9b:1d:79:57:
                    97:33:8a:23:08:67:ea:9c:87:45:da:f8:ea:2d:eb:
                    f2:00:93:9d:97:b4:6b:07:d4:56:0e:55:60:ea:80:
                    de:9a:cf:2c:7f:72:aa:42:94:94:9f:a1:48:c2:bd:
                    eb:8a:58:1c:08:3a:ab:92:6e:a0:32:00:31:39:78:
                    35:3e:80:1f:a8:81:e2:38:eb:57:17:46:a3:d1:02:
                    f5:64:1a:7a:cf:7f:02:eb:f5:18:0d:2a:51:e7:e0:
                    0a:1b:95:a1:89:99:94:2f:11:b3:57:28:46:c2:93:
                    a4:ce:39:2b:79:fa:ca:34:cf:18:3c:ca:14:7e:ae:
                    b2:fc:11:fc:a5:66:b1:af:52:d4:82:15:87:92:a5:
                    f3:cb:ca:8b:cc:a1:aa:ba:fe:1c:a3:8e:5e:1c:3d:
                    dd:6a:5f:77:d1:62:57:ed:00:21:3c:9d:2d:ef:59:
                    06:9d:56:2d:2d:74:7c:a6:9d:78:58:0b:f3:51:14:
                    85:03:19:81:ba:51:15:08:ea:49:cb:0b:9f:dc:fc:
                    a2:78:6a:8b:90:49:5e:f9:5e:76:3a:bf:1b:09:b9:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:ED:84:39:1E:32:E8:8B:65:AE:A7:49:3A:6A:07:9B:6C:12:87:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0e9cadd8-7f25-3bf4-af90-324abc48d32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl

            X509v3 Authority Key Identifier:
                keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.144.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:36:aa:df:dc:2b:a9:99:60:40:24:3b:39:63:28:04:03:79:
         fd:b2:79:cc:d9:3f:1a:d4:e7:41:c4:1a:e8:8f:ea:e1:99:06:
         4a:7c:1c:96:cf:77:05:ac:18:60:f1:4d:3a:8f:97:a4:cb:dd:
         15:06:85:b6:29:e8:7d:60:4a:23:00:da:b6:ff:ff:59:7b:11:
         5d:d2:3e:15:1a:c0:1b:6e:9c:9e:b4:28:cd:d0:bb:13:5d:ba:
         c0:d4:8e:6b:f1:ad:60:9b:e2:c7:ee:f8:46:e1:bb:fc:36:b9:
         fe:94:5d:51:d8:a2:56:7a:65:3d:ab:1a:13:aa:1c:0e:e5:c1:
         79:49:34:cf:a8:62:5f:8c:92:1b:b8:77:c1:43:79:80:af:96:
         de:cf:f3:85:33:73:33:7f:b3:b0:35:1b:74:25:f9:0e:5c:6f:
         4a:d1:b9:16:45:a6:86:a6:52:6d:40:d1:16:80:de:47:97:5c:
         0d:ab:f7:21:b3:c8:e7:e4:5a:5b:21:7e:6b:da:da:d5:12:94:
         5a:0f:28:b4:7b:9f:92:6a:53:0e:e2:84:18:c9:87:58:c1:9e:
         43:35:0c:df:c6:fa:db:e5:e7:26:4c:dc:64:50:0f:20:05:5d:
         5c:dc:fc:d2:bc:84:5c:49:1b:17:1e:83:f9:a8:24:8e:b1:98:
         f3:b4:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:08:40 2026 by rpki-client