Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa
File:                     f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa (raw, json)
Hash identifier:          +ygEfWvgzFi4q9MTSi75lLOjsTLDtHdsGvEDMKGwdKM=
Subject key identifier:   3B:2D:DF:5B:8F:43:B8:61:48:A6:F1:D5:0B:E6:BB:F4:2B:3E:DD:98
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584F8F3DB176B2F197AE80A8EC40
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     20454
IP address blocks:        209.188.15.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:b1:76:b2:f1:97:ae:80:a8:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=d6ea10ff-47b7-4363-94cd-e874decf9cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:3a:ae:68:9a:7e:18:5b:43:d7:63:7d:19:
                    7a:68:cf:af:fc:1f:b5:8a:13:82:f8:03:cb:3c:12:
                    30:cd:c2:0b:d4:5d:7f:38:c6:ff:0e:37:36:c8:09:
                    1f:89:c5:b6:bd:b0:5d:35:ac:8f:82:71:78:a4:89:
                    92:f9:27:98:1f:22:3d:dd:7c:85:26:db:cf:60:67:
                    d1:cc:3b:aa:87:e2:2e:0b:73:f6:72:d2:34:7d:75:
                    1d:1d:a4:ff:5a:d9:4c:32:c7:1f:16:55:a1:40:8a:
                    da:5f:5f:72:3e:8f:be:31:5e:2d:e9:53:68:0b:2f:
                    d8:d8:53:39:8c:71:cd:9b:f3:82:47:c2:99:e7:cd:
                    24:16:a3:d7:cc:ca:cf:75:b7:fe:a5:04:cf:54:df:
                    fd:2a:7b:42:fb:13:ed:c7:8d:e2:12:ec:27:87:eb:
                    f8:f2:28:ff:25:cd:d0:12:7f:ac:85:d0:b2:fe:f1:
                    ff:86:45:a2:7a:13:6f:85:eb:1a:11:c9:2f:78:d1:
                    15:d8:86:77:05:c5:f3:47:a3:5e:8a:de:fb:17:59:
                    76:e1:29:a6:4a:9f:46:2d:a0:e3:8b:64:18:5f:83:
                    57:ed:33:7b:14:df:09:40:3d:37:f8:cc:6a:16:3f:
                    31:81:f7:8a:88:82:5c:94:4c:1c:0c:6e:d3:96:a7:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2D:DF:5B:8F:43:B8:61:48:A6:F1:D5:0B:E6:BB:F4:2B:3E:DD:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f10d358d-bbb1-3d43-8ce3-017933e45c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:62:ca:fc:ca:d4:4c:7a:76:0e:34:b5:18:c4:57:4c:a4:af:
         28:e9:f5:a2:56:3e:c7:7b:7f:0f:8a:ac:db:07:b6:70:df:a9:
         07:e1:ac:37:71:bc:af:98:df:bd:ad:9a:cb:b6:98:17:ed:0f:
         1e:24:f7:f2:6b:b4:bf:6d:83:6f:ac:63:97:5a:a7:e8:11:4b:
         45:bc:3c:51:42:fd:58:7a:9c:b5:f1:55:89:91:b5:a3:14:ac:
         bd:73:3d:48:17:e6:35:42:eb:7f:f0:04:32:3f:1a:e4:30:8c:
         99:63:d9:56:a7:65:14:bb:cc:f3:7b:7b:11:e9:18:82:53:4c:
         2f:6a:86:8f:42:5a:b1:7c:29:26:d6:68:25:fa:c9:2a:5b:21:
         d1:a9:ed:f6:98:46:d0:df:45:be:fc:e3:e0:8a:32:aa:f0:c1:
         97:07:02:d9:4a:48:c1:f1:02:a9:4a:c3:f6:02:29:54:bd:3c:
         6a:2f:0c:64:db:4f:80:e8:35:1f:76:fc:84:08:5b:49:da:ce:
         f8:52:12:21:00:d6:00:46:ae:ef:1d:04:c9:7e:83:af:ca:ec:
         bc:56:10:fb:34:19:48:8f:6b:7c:d7:46:3a:b8:97:2b:73:33:
         7e:29:80:a7:b5:4b:ef:1e:c8:1c:96:84:ec:d6:5e:63:e3:83:
         0c:f8:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:02:58 2026 by rpki-client