Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/1bf687e7-3d21-3c16-88f0-8067d34124cc.roa
File:                     1bf687e7-3d21-3c16-88f0-8067d34124cc.roa (raw, json)
Hash identifier:          3SR2U7c4FBHcBGiRZ5BWdrBqsg+6oibCtO/Tafb5ArU=
Subject key identifier:   77:61:E2:75:DC:14:7B:1A:4F:D1:3F:94:57:33:ED:25:9A:31:C4:55
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584F70881EC25ED04BE795748660
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/1bf687e7-3d21-3c16-88f0-8067d34124cc.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     46450
IP address blocks:        209.104.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:1e:c2:5e:d0:4b:e7:95:74:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=8546cd03-9314-4c25-be29-fa30b602187f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:20:aa:d3:10:77:f5:36:88:40:a5:e7:87:
                    9f:b4:f5:88:f3:7a:b6:2e:f8:94:1c:e9:81:fe:75:
                    4d:a1:04:09:48:e6:9e:82:9c:b4:0b:6e:4c:da:25:
                    d5:62:dc:53:53:d6:22:78:6e:1e:8b:4d:4e:f0:52:
                    e1:25:0c:38:8e:95:e6:7f:66:1a:00:35:d5:21:20:
                    70:af:ac:c6:b8:16:53:d3:e5:24:79:51:7a:83:c6:
                    18:1f:52:2d:52:f8:42:25:3e:9f:1d:23:48:36:c7:
                    09:dd:dc:db:5c:8f:a5:09:83:4a:3c:63:42:b2:2a:
                    22:dd:fa:d0:3f:2a:3b:94:47:f7:c4:98:79:d3:4b:
                    cc:f6:f5:9e:cf:2a:f6:10:2c:28:f0:4a:29:e2:d2:
                    5f:00:e5:36:c3:e0:87:88:39:a1:6c:cf:ea:1a:4f:
                    24:45:af:3e:8f:c9:e7:63:2b:28:73:06:bd:31:55:
                    1b:1c:7d:68:fe:80:dc:48:ae:7d:19:5f:99:9e:0d:
                    7d:8e:c8:ef:a1:cc:b8:6f:25:4c:8c:41:1e:70:fc:
                    30:c8:8c:14:2f:eb:87:c2:2f:56:ba:15:8a:e7:81:
                    88:66:2a:b3:ef:c9:cf:c8:ca:40:c7:38:cf:dc:50:
                    9c:02:b5:3a:f9:d7:98:d6:d5:09:af:4b:da:66:a0:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:61:E2:75:DC:14:7B:1A:4F:D1:3F:94:57:33:ED:25:9A:31:C4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/1bf687e7-3d21-3c16-88f0-8067d34124cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:47:60:9e:f2:17:ee:ad:bd:f5:51:ad:94:21:9a:22:8d:
         01:ec:2f:ef:26:b3:ef:cc:08:c2:60:7f:89:ef:36:6f:c1:1d:
         da:b3:30:f9:54:dd:02:61:32:76:19:05:37:ba:55:eb:2c:18:
         57:b4:4e:20:5f:00:ad:39:ff:f8:b3:1b:34:a3:f0:a0:79:7d:
         43:54:c5:63:8a:5b:3c:de:52:ce:b8:3d:b8:bc:0a:16:8d:5e:
         a9:67:08:2c:63:00:07:44:79:e3:8f:33:51:58:d1:b8:d1:b7:
         fc:65:62:8e:49:6b:4d:68:1d:32:fa:66:dd:2a:1a:d1:f6:a0:
         00:5b:de:f1:49:51:49:39:83:15:d4:21:6c:7f:c1:8c:fc:c4:
         f5:3b:68:3c:77:3d:bf:20:ae:a2:09:36:c1:e9:16:cc:a3:fd:
         27:dd:d7:de:59:d4:cf:44:fc:30:5a:c3:73:63:88:ff:33:0f:
         82:8b:91:d6:30:4f:ca:4d:a9:33:42:b5:88:a3:ac:09:7a:e5:
         80:65:32:da:25:ea:cd:5f:eb:cc:8a:7b:06:9f:95:76:cc:b0:
         06:5e:d8:1b:e3:52:cf:8e:4b:2a:f0:10:0a:01:7b:7b:8a:88:
         60:19:7a:5e:3d:9b:3e:2e:2b:90:72:fe:31:49:af:97:43:4a:
         51:5e:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:50:29 2026 by rpki-client