Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/145fbd6a-08fc-3ca1-b982-5e5fab47bad4.roa
File:                     145fbd6a-08fc-3ca1-b982-5e5fab47bad4.roa (raw, json)
Hash identifier:          2+zKyMxJlLmV0HCaW03j7zYqDC2TA/DGaPvXkwzzREo=
Subject key identifier:   B2:4B:87:DE:FB:14:03:D2:24:6D:AD:6F:AC:3C:2E:7B:41:45:3D:4A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F57681036C80ADD7500E5FB40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/145fbd6a-08fc-3ca1-b982-5e5fab47bad4.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        209.16.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:10:36:c8:0a:dd:75:00:e5:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=43ef4722-73d9-4af4-977a-04b8d585192c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:ce:27:88:34:c2:f7:2f:eb:24:da:3b:cb:
                    19:46:cb:02:f5:63:16:8a:49:eb:2c:9f:49:b5:30:
                    97:9d:06:09:e3:46:24:ef:2f:80:78:56:e5:21:86:
                    31:85:4b:28:7f:cc:95:93:e5:17:26:14:33:e2:29:
                    31:16:af:83:dc:51:fe:47:f1:4c:53:fd:37:24:78:
                    c7:a6:43:39:7a:4a:bc:0e:97:d3:31:eb:d1:1e:c8:
                    23:40:05:5f:e3:ea:fe:aa:c2:3d:8a:47:58:c3:aa:
                    cd:ef:86:a7:f8:d4:bc:fe:2b:89:cb:4d:51:42:18:
                    69:d6:9b:23:2e:98:96:24:27:12:57:80:65:f9:3f:
                    77:7d:a6:60:7d:de:df:1f:9b:82:dc:7e:3d:2a:ac:
                    3c:71:1b:6f:3b:54:0a:d3:4c:c7:58:79:99:07:97:
                    c2:cb:18:54:41:a7:3d:57:b8:ea:6f:a4:09:aa:b7:
                    ea:d3:94:19:14:b9:9f:77:17:cc:dd:ab:d6:3c:b5:
                    10:60:11:e6:2d:08:41:76:d6:ca:00:fb:c5:5b:62:
                    88:32:f3:86:d1:46:a5:6d:9d:94:e7:e6:b2:f9:80:
                    f4:ba:b1:cc:1a:26:66:86:93:0c:0b:77:10:9d:f6:
                    f0:4b:6c:cc:e9:f9:67:5e:37:7a:ac:af:60:1a:b3:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:87:DE:FB:14:03:D2:24:6D:AD:6F:AC:3C:2E:7B:41:45:3D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/145fbd6a-08fc-3ca1-b982-5e5fab47bad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.16.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:a1:50:ef:08:31:76:fd:08:78:ca:c0:dc:13:11:1d:64:
         8d:ec:fa:e4:64:90:23:22:0b:de:36:c6:ad:91:5c:57:d6:aa:
         d1:ca:19:37:e2:f6:13:9a:f1:92:a6:94:0e:5d:b5:6e:5a:2c:
         57:96:87:6d:ae:89:31:6a:c2:27:d8:2c:30:10:2f:af:fb:73:
         0f:2f:8e:57:c3:7b:48:76:0e:3d:e0:54:eb:7e:16:d0:16:60:
         78:ee:1a:93:6a:ba:6e:1c:e9:5e:e3:fb:eb:09:90:85:44:7d:
         44:a6:e0:28:32:09:42:f9:a4:5d:75:7c:03:39:62:f7:a4:ed:
         a8:5f:be:a1:26:d0:e6:02:0f:f8:5d:63:7d:dd:77:47:86:7a:
         37:e0:54:46:a6:69:9e:c3:4d:7a:b9:63:af:37:6a:55:96:a8:
         32:2d:bf:0f:5f:2f:fd:52:1a:2d:47:08:e6:5e:58:f6:fd:3f:
         ff:eb:40:a7:2f:21:e5:bd:fe:60:d8:be:c7:c6:a7:09:5d:4c:
         13:ee:ba:a1:6e:fc:c7:d7:3a:33:64:49:37:0e:2a:29:44:a9:
         4c:56:f4:a6:55:08:27:b5:e6:55:2e:7b:48:cb:7c:c9:77:e7:
         df:b5:3e:b7:64:49:1b:8c:31:36:04:a8:dd:99:15:9f:72:80:
         60:3b:da:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:13:01 2026 by rpki-client