Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a042e6f-c547-3776-92a8-d4dcc2041ace.roa
File:                     6a042e6f-c547-3776-92a8-d4dcc2041ace.roa (raw, json)
Hash identifier:          Sqww6t7YKYFSIXBaOeg9acfExco6puQyzC/H9CDF7ic=
Subject key identifier:   14:D0:4E:3A:CF:1A:A7:49:6C:9E:5D:8D:DD:10:00:92:2E:7B:BD:99
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584F4F0814E170D61478D13C4C00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a042e6f-c547-3776-92a8-d4dcc2041ace.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     55293
IP address blocks:        209.124.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:14:e1:70:d6:14:78:d1:3c:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=b6af7959-f1b2-4ca3-8783-30553fb1aae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:d1:0b:fa:a0:24:02:31:96:a4:09:46:24:
                    45:0c:19:66:e0:a5:08:fe:cc:96:59:3d:98:62:04:
                    ed:ef:97:78:1b:18:cd:24:c0:02:f6:86:9a:74:19:
                    df:7a:79:73:7b:5f:51:46:ec:29:9c:b2:7e:d9:f1:
                    61:1f:53:b3:10:61:3b:1c:1f:5e:df:40:69:e3:8b:
                    46:69:bd:80:0a:ee:3e:7a:6f:bd:74:9d:53:e0:9f:
                    d8:7e:65:4d:ba:e2:96:bb:a7:08:76:57:12:a8:51:
                    d5:f4:cf:26:b6:55:de:e1:e9:68:b2:b7:8a:1f:24:
                    b0:10:ec:a7:8a:d1:e0:07:ac:c2:51:46:32:83:55:
                    8b:7c:5b:81:fc:25:96:35:62:12:6a:65:bb:b7:fc:
                    8b:13:90:04:c5:c1:5d:e7:3c:41:40:2a:d8:3a:b2:
                    95:28:c9:47:2c:25:0a:4a:2f:74:e0:42:db:90:04:
                    8b:7c:38:c7:22:8b:f5:08:b2:7b:7e:0b:68:59:a9:
                    fd:81:10:60:ce:16:57:8a:cc:6b:92:56:29:fd:a1:
                    be:e2:0f:be:af:95:d0:09:14:1f:03:dd:51:d6:88:
                    98:ea:b9:d2:5b:aa:79:cb:6a:a7:16:a7:86:92:9b:
                    9b:27:de:13:9e:b9:92:cf:49:b1:dc:25:46:64:d4:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D0:4E:3A:CF:1A:A7:49:6C:9E:5D:8D:DD:10:00:92:2E:7B:BD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6a042e6f-c547-3776-92a8-d4dcc2041ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:94:01:7b:8d:e9:a9:c2:dd:ec:f1:de:53:45:7b:85:48:55:
         66:a0:cb:ab:45:64:dc:62:f3:6e:e4:a8:c4:26:fc:56:d5:cd:
         4d:f2:99:15:67:63:92:74:dc:de:37:85:e3:77:4c:79:54:dd:
         76:75:77:38:69:5c:e2:92:de:f7:5a:71:59:66:58:a0:df:1f:
         83:96:3e:18:41:16:2d:2e:f7:22:0f:30:3d:bd:89:b2:a4:16:
         67:6f:ea:44:7f:a1:9d:ec:c2:69:28:a5:9e:7f:42:8c:ef:74:
         2e:3f:78:c8:2e:51:e1:cc:78:a6:55:4b:dd:69:e7:3e:0c:68:
         4e:74:60:4e:d4:ae:c1:b3:b7:23:05:98:e3:bb:a0:0c:71:ee:
         ea:f6:57:35:37:6b:51:73:e1:20:8d:c1:53:de:dc:80:5c:42:
         01:2b:c3:0b:91:0d:c3:ef:12:de:6a:d5:7b:0a:52:34:b0:05:
         0b:a6:4b:0e:c4:f8:04:78:76:22:a7:2b:91:40:0c:99:83:86:
         99:11:86:6e:e6:07:8c:61:c5:7c:b0:df:cd:bf:a3:ec:da:f5:
         d6:b1:d7:e9:75:4b:2b:51:be:2d:53:bf:63:3e:08:37:04:55:
         3d:5a:69:3b:5d:50:d3:cf:0e:25:fa:19:02:db:ce:71:96:fc:
         d9:49:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:05:28 2026 by rpki-client