Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73500715-1c49-3d8c-83c0-e2dc20ed121c.roa
File:                     73500715-1c49-3d8c-83c0-e2dc20ed121c.roa (raw, json)
Hash identifier:          Eyf1R75C52URn5xu4HHienIAKmoanrTNfS+OyKAd/4c=
Subject key identifier:   DE:75:06:22:9D:83:FC:80:51:27:65:59:45:A3:05:6A:54:4E:3C:71
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F2F6CC4E7B51DB866A1EE7700
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73500715-1c49-3d8c-83c0-e2dc20ed121c.roa
Signing time:             Tue 15 Sep 2026 17:17:36 +0000
ROA not before:           Tue 15 Sep 2026 17:17:36 +0000
ROA not after:            Mon 14 Dec 2026 18:17:36 +0000
asID:                     271
IP address blocks:        209.87.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:6c:c4:e7:b5:1d:b8:66:a1:ee:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 15 17:17:36 2026 GMT
            Not After : Dec 14 18:17:36 2026 GMT
        Subject: CN=fd6fd44a-a494-4a44-a79b-17360d18eaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:58:54:cb:78:08:4c:ab:d2:1a:d4:65:cc:
                    dd:c8:08:33:8b:60:63:fc:96:0c:36:77:47:68:2b:
                    2c:35:7c:2c:96:ef:12:eb:a9:45:c9:46:40:b9:d8:
                    79:22:22:01:62:95:aa:a4:e5:3f:7b:a8:c3:06:0b:
                    42:b1:40:ea:ca:a8:0e:bc:87:a3:6a:4e:53:7c:e9:
                    2b:99:ac:be:71:b3:a9:5c:f0:74:a9:3e:c3:55:cd:
                    f3:9c:c5:ac:71:80:96:0f:9a:fb:7b:4d:0c:51:3b:
                    13:40:4d:c2:d1:ea:9c:fc:bd:5b:cb:74:8b:99:a0:
                    83:7e:86:c5:bb:8d:75:70:70:13:1d:8b:36:5d:14:
                    a6:38:30:58:b4:9e:4c:ee:8a:e2:70:eb:e0:b3:96:
                    08:13:67:29:e2:25:39:34:43:37:90:a2:c8:38:08:
                    c9:b6:09:9f:21:7c:c9:f6:89:59:97:fb:0f:21:ee:
                    ff:6b:60:8b:57:5b:11:84:58:c3:ea:b3:64:9b:12:
                    fa:39:d4:bd:5f:7c:12:b5:b5:8d:b4:89:52:1e:f0:
                    ad:1e:2f:99:e7:9a:9f:6e:83:70:4e:3e:c9:27:a6:
                    02:fe:a8:e7:79:d2:47:dd:a2:3a:f2:4c:a5:45:f8:
                    fd:3b:da:0a:d4:99:22:25:83:71:77:80:38:43:aa:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:75:06:22:9D:83:FC:80:51:27:65:59:45:A3:05:6A:54:4E:3C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/73500715-1c49-3d8c-83c0-e2dc20ed121c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:fd:17:cb:ba:f9:3d:d1:ae:5c:83:4e:6d:4e:33:dd:ed:
         0d:c7:51:9c:b3:41:53:45:2f:8c:94:7a:48:6a:25:24:4d:35:
         f0:d8:f5:bd:4f:aa:0b:69:3b:ad:5f:b6:2d:a5:2d:af:4e:fa:
         78:e6:71:71:b2:6d:3b:50:31:ef:6a:37:29:71:c7:88:1b:e8:
         33:9a:ca:32:36:11:06:cb:f9:83:4d:f7:c3:6d:56:e5:2c:d0:
         28:de:14:39:bd:49:0b:fe:da:0f:4b:1c:13:9e:e0:59:91:30:
         97:17:23:0e:ca:c1:e3:c4:58:85:ae:7a:87:b7:52:bf:c3:01:
         a0:bb:8b:22:1c:61:ec:8a:14:19:b5:13:dc:55:fb:b0:0a:9f:
         74:b7:7f:31:d3:18:18:49:01:a4:67:1f:fa:8a:76:81:f7:a9:
         58:bf:93:a8:90:dd:b4:6c:fd:81:44:c5:23:6c:2b:d8:3f:fc:
         b4:e6:b2:af:3e:a0:3d:52:4e:2f:d9:9e:09:d7:7d:f7:1c:bc:
         f6:93:ef:9e:0f:3b:95:b4:35:59:05:c0:59:1b:53:67:55:ef:
         2e:89:12:c2:fe:a3:dd:8b:9f:0f:34:b1:41:14:4e:79:7d:70:
         88:1f:69:00:2d:4c:bc:ac:67:48:4a:04:47:90:33:f2:7f:b5:
         c4:7d:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:31:53 2026 by rpki-client