Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d54fa271-7561-3b86-93dc-f6bf5e12cc94.roa
File:                     d54fa271-7561-3b86-93dc-f6bf5e12cc94.roa (raw, json)
Hash identifier:          VRwSU55Ree0XgVx8GTqXYkrEnGx5JIW72XRuKpX7gcE=
Subject key identifier:   1D:F4:D8:8F:79:22:E3:FA:27:8F:09:44:04:2D:05:03:F8:55:4D:26
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F0AC81E3A4D145745078CB780
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d54fa271-7561-3b86-93dc-f6bf5e12cc94.roa
Signing time:             Wed 02 Sep 2026 14:16:45 +0000
ROA not before:           Wed 02 Sep 2026 14:16:45 +0000
ROA not after:            Tue 01 Dec 2026 15:16:45 +0000
asID:                     13335
IP address blocks:        192.120.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:c8:1e:3a:4d:14:57:45:07:8c:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep  2 14:16:45 2026 GMT
            Not After : Dec  1 15:16:45 2026 GMT
        Subject: CN=71f34166-9d8a-416d-9669-0934a6b839dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:95:d8:b1:d0:9c:ae:7e:0a:28:72:d5:dd:
                    a0:ec:01:d4:2f:d4:5a:23:20:94:93:c0:63:76:d9:
                    8f:b8:63:5f:02:d5:a6:bb:9f:a0:1c:a9:d2:c7:ab:
                    14:18:3c:39:9f:65:fe:9a:88:18:82:00:b4:49:2e:
                    13:13:e1:4b:7c:ef:51:ae:11:81:1f:e3:56:19:f2:
                    68:41:46:f6:f3:c8:75:ed:92:25:ef:4c:bc:23:cc:
                    ff:11:4b:8b:4b:5c:fe:56:82:df:82:1f:83:4c:2f:
                    fe:35:fb:86:df:6d:4b:78:0f:b3:e8:56:c3:7b:05:
                    fd:50:61:af:e6:05:56:49:aa:44:4f:96:ea:75:10:
                    96:66:e3:93:d6:db:af:94:d7:cd:d3:e6:44:87:d4:
                    e8:3f:21:32:60:0b:86:cc:ce:a9:70:0b:72:2c:2a:
                    24:44:54:e4:b2:5e:3f:7b:d4:6e:e1:75:0d:d5:26:
                    6e:05:ce:24:4b:73:ea:e9:11:3e:3d:49:dd:69:52:
                    c4:91:66:95:b7:81:a4:b8:65:cf:d4:ae:17:d6:32:
                    d3:d8:18:ee:a4:98:74:53:b8:5f:bb:d2:26:47:36:
                    d2:c7:6d:14:6f:8e:a4:1c:c6:0a:ec:72:10:65:81:
                    23:dd:79:26:19:80:7d:0b:d2:d4:39:72:1e:74:47:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F4:D8:8F:79:22:E3:FA:27:8F:09:44:04:2D:05:03:F8:55:4D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d54fa271-7561-3b86-93dc-f6bf5e12cc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.120.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:e7:cf:53:ea:b0:63:6d:43:f6:07:c0:bc:bf:a9:44:52:
         f6:81:56:03:51:96:25:ba:f0:3e:91:78:e1:fd:ce:b4:2a:15:
         80:2e:66:2c:18:60:a8:3a:dd:d2:f8:b0:2e:63:28:b5:5b:85:
         3e:f9:6b:f9:59:09:ba:6a:1a:31:c8:b8:4e:aa:1a:a1:25:9d:
         59:60:8e:6f:5e:db:ba:cc:98:81:02:ad:08:44:f3:d3:f8:d6:
         da:a6:4e:27:9c:44:98:55:26:f7:15:f1:8a:19:1b:99:b0:88:
         5f:77:68:46:83:75:64:31:3a:cd:c8:51:fd:ce:85:79:30:77:
         66:40:27:33:6e:2c:72:6d:5d:8a:4a:52:49:a4:65:4c:8d:ed:
         34:1b:ee:cb:82:c6:cb:18:f2:27:ff:c3:29:7c:fe:5c:ec:c6:
         2b:43:43:98:0f:bc:ff:94:49:3d:78:55:12:a4:77:23:f1:08:
         1c:f0:9c:b9:76:4e:34:58:3a:47:07:d7:ee:ce:45:d9:bd:30:
         89:71:2a:a0:27:2b:3a:54:2d:30:f5:3d:41:1e:24:80:fc:04:
         ab:55:f1:3b:41:0d:ef:ee:8a:42:92:c7:38:6d:19:6f:a6:8a:
         a6:df:59:95:4f:9e:a1:6c:4c:88:cf:94:23:58:28:3a:68:a9:
         76:61:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:11:38 2026 by rpki-client