Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa
File:                     4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa (raw, json)
Hash identifier:          M+D/Cv6dgQ2uiLT52GAu/kk9EKEHjoqnYbXgHY85ot0=
Subject key identifier:   E0:FA:CD:67:3E:20:84:8F:87:C6:30:2F:C4:22:1B:32:F1:83:6B:B3
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F497546DF941FB5FF58877CF0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     271
IP address blocks:        207.23.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:46:df:94:1f:b5:ff:58:87:7c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=77620a0b-26bd-4628-a73d-0833ab968df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1e:c6:a2:d8:43:7e:16:18:44:49:f2:2d:8a:
                    ae:89:44:af:b0:e7:ef:bd:d9:f6:86:fa:07:09:c0:
                    c3:ba:54:34:d0:6e:b0:e9:b2:01:9d:ae:3f:67:d6:
                    69:4c:29:31:b1:4e:e3:a8:4b:98:d5:49:03:08:2a:
                    b3:2a:e9:32:e5:f4:04:f0:9e:9c:6a:a4:1b:9e:95:
                    e2:21:8d:1e:f2:f2:d0:e0:84:f1:77:6b:2d:db:5f:
                    b0:0b:ee:2e:01:cb:e5:3d:0b:4b:61:82:00:e6:e1:
                    7d:9f:22:a3:b8:3f:a3:f0:9d:4b:75:a6:19:13:ff:
                    d9:5a:dc:9c:89:0f:30:e3:e4:53:85:7f:73:f7:1b:
                    46:28:a5:86:85:b0:ce:d0:eb:eb:9b:31:2d:a0:e7:
                    ba:21:8c:89:50:fd:30:cf:2b:42:ac:28:f5:7d:2a:
                    cf:f5:60:ef:97:c1:b0:3b:2a:e7:b6:99:3b:c2:8a:
                    c6:23:55:06:43:73:ac:46:3e:ee:ad:4b:46:21:3c:
                    05:ce:87:a6:e5:86:3d:04:a1:6f:29:27:2e:5f:28:
                    b3:1f:45:4d:63:dc:c4:a6:5a:51:f9:18:30:cc:5b:
                    3f:5c:42:48:c3:60:3e:20:d9:f0:f4:85:21:e4:1d:
                    a3:e1:2e:7d:39:3e:8f:b4:1c:cc:7c:47:91:b3:95:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FA:CD:67:3E:20:84:8F:87:C6:30:2F:C4:22:1B:32:F1:83:6B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/4d2a9ef9-7de3-34a1-a2b7-ac99620aca80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:bb:82:37:b5:f4:f4:4d:bd:87:b6:06:1e:f4:85:c5:ba:
         f3:89:22:05:9d:62:22:d8:31:dc:24:bb:41:cb:d5:0d:a5:87:
         93:19:3c:ec:52:92:74:43:8c:3e:f3:23:56:98:80:b2:29:43:
         db:e6:b1:bd:1d:4b:63:02:09:03:7d:69:23:1b:93:84:a4:c6:
         fe:45:5b:bf:27:42:2f:ce:90:eb:02:30:50:51:85:b0:7c:6b:
         5a:90:f2:ce:96:6f:29:bd:e4:9a:27:41:df:94:80:87:32:0a:
         83:a2:57:92:b3:74:8f:0c:32:81:92:76:22:e1:8d:e9:72:70:
         62:1c:e7:74:ef:1c:f2:01:5d:54:9f:83:3a:83:32:75:73:90:
         5f:09:4e:4a:4b:66:b0:29:1d:0b:0f:9b:12:6a:82:ab:97:55:
         db:b3:2e:4b:02:e6:7a:f9:eb:5e:a6:f3:b2:6b:38:e6:7b:4a:
         ae:1e:28:80:61:74:95:42:d9:38:51:8e:95:93:db:fa:ac:1c:
         4d:2b:0b:3e:8b:d1:de:dc:f0:08:82:1a:b9:e7:c7:6a:75:45:
         30:1e:bb:5d:83:61:86:28:9e:82:b2:b5:66:0c:c0:7a:10:54:
         57:b7:ee:e8:a2:32:b6:16:af:b5:85:2e:fc:f9:86:8d:bd:45:
         6a:ec:ff:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:29:00 2026 by rpki-client