Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
File:                     942ec425-2259-3cd4-97f1-f7efbcb4f829.roa (raw, json)
Hash identifier:          ffeABky4TYQIZAbUdj2XFBzZI/vZ7mvDAOpJGfA3rqw=
Subject key identifier:   DE:F9:5F:1E:84:39:A3:E3:FE:92:00:59:3E:F5:EC:F5:C2:BA:65:29
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F3FAD4051ED0C03ECBA815F40
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     393249
IP address blocks:        128.189.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:40:51:ed:0c:03:ec:ba:81:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=dce398d6-29f8-47d9-9c50-3080d93e4cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:f4:90:34:aa:b3:75:1f:3e:46:8f:dc:11:
                    16:df:e2:39:ab:84:d4:ea:28:37:2a:20:8b:48:f0:
                    a9:47:ec:2a:86:d4:5d:fe:db:d3:0d:5f:7d:e5:ed:
                    52:30:a3:68:5d:46:70:cd:7e:91:70:6c:c8:b5:8f:
                    7a:19:0e:13:ee:1d:3c:25:6a:7b:df:61:a2:c0:a2:
                    89:24:39:66:66:ff:e2:30:36:c6:27:30:9b:49:48:
                    07:0a:d6:77:f5:db:f7:03:39:36:25:5a:3d:1b:13:
                    28:80:fc:4f:74:58:a8:4a:a3:99:d3:cf:3e:41:19:
                    2a:9f:27:41:91:69:b0:b4:42:ee:56:57:8c:a7:82:
                    24:ff:41:a9:b8:24:90:3d:fe:48:b7:3a:53:90:94:
                    7a:90:5e:53:07:29:79:c4:41:50:c6:f8:8e:60:44:
                    18:e6:61:0a:4f:4e:bf:26:e2:e9:45:7c:f0:ef:dd:
                    e0:44:d5:7b:8d:24:15:35:cd:38:2d:81:45:32:2a:
                    31:c0:07:0b:b1:f2:91:a2:7d:b7:13:bf:66:e8:53:
                    c0:a9:40:7d:0c:9d:dc:35:aa:6b:2d:fc:16:a5:ae:
                    e3:f5:12:12:2e:94:5e:60:b6:39:7a:64:95:64:b8:
                    54:c3:ce:d8:fc:31:f0:35:e3:03:c3:fd:36:24:8c:
                    f4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F9:5F:1E:84:39:A3:E3:FE:92:00:59:3E:F5:EC:F5:C2:BA:65:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/942ec425-2259-3cd4-97f1-f7efbcb4f829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:6d:6e:43:b7:90:6e:7a:42:ca:b7:85:eb:c3:62:64:82:
         69:3c:da:da:60:f3:2e:dd:ff:3e:c3:20:32:9b:26:45:c3:f4:
         39:60:19:37:16:0b:85:f3:ac:92:df:2d:42:74:d2:7e:fe:f2:
         f4:b7:34:02:46:14:40:30:d4:fa:b4:6b:76:3d:0e:5c:b3:45:
         39:46:11:e3:c0:71:dc:7d:bc:37:90:ac:11:3e:8f:14:1f:e3:
         1b:d3:8c:45:50:17:60:15:ae:05:9f:16:1a:31:b3:bb:ae:1c:
         ba:6d:d0:e3:fc:68:61:cb:f0:38:9e:37:d3:fa:36:a1:9e:96:
         99:bf:fd:d3:7e:8b:41:46:3d:8d:bc:63:6f:df:ca:fb:ba:7b:
         a5:67:0d:21:f1:a5:86:46:50:f6:92:ec:95:de:6d:df:f0:6a:
         0b:7e:bb:5f:77:54:5a:f2:1f:60:14:48:c3:62:63:d7:98:01:
         eb:cf:a9:95:31:80:11:d7:7b:2e:08:1c:74:10:19:88:0a:d5:
         90:48:34:d3:07:a5:9d:09:dd:8b:5d:c8:b9:f7:73:0e:a6:df:
         3d:37:70:49:2b:6d:ec:8c:02:d9:5a:31:ec:61:49:d2:9f:e9:
         a7:0e:a3:a3:2b:0b:ff:45:ad:22:d0:1c:e2:61:08:0a:b6:cd:
         6a:18:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:29:36 2026 by rpki-client