Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a07e069c-74be-3b2c-ad63-7961d870a945.roa
File:                     a07e069c-74be-3b2c-ad63-7961d870a945.roa (raw, json)
Hash identifier:          pcrmQHfiWpr4pYKAGoMCi1ZP2hwrkRvaokfy9MzK2Qg=
Subject key identifier:   05:D0:06:DC:65:D1:F7:B3:29:29:48:4B:71:BD:0C:15:08:EF:17:80
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1037A6092049CDBFAC0D9580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a07e069c-74be-3b2c-ad63-7961d870a945.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     271868
IP address blocks:        209.61.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a6:09:20:49:cd:bf:ac:0d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=2613b4d8-1a5a-4a1a-89cb-1bb037754a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:21:ce:3c:79:ff:9e:1f:1e:c2:e7:79:4d:
                    6e:56:4b:2c:6b:e6:63:66:10:18:7f:82:02:d6:cd:
                    bb:c8:06:56:10:4e:2c:51:ef:82:e5:4a:dd:f7:e8:
                    9f:7e:b9:d7:bd:c2:23:0e:3a:fe:bf:ef:ea:cb:74:
                    fb:f6:a5:e7:ee:02:bc:00:6b:06:31:a1:5e:48:d1:
                    38:d1:67:7e:9e:05:a6:74:a4:4e:a0:c0:d8:3f:e7:
                    24:4f:bb:4d:14:06:2a:14:9d:65:56:c9:20:1c:6e:
                    ba:ac:cd:e8:94:77:2f:a5:a0:cc:7a:65:ea:75:75:
                    23:91:0c:22:bb:96:21:b0:f7:70:a5:3d:2f:c4:f5:
                    a8:c5:9c:e8:2d:dd:c7:e1:33:8e:32:e6:91:d4:00:
                    6d:2e:c1:58:1d:82:cf:55:ef:00:a3:f5:1c:11:fc:
                    f6:84:34:88:64:f2:8e:72:d3:73:a5:37:73:ee:8c:
                    f6:05:dd:58:15:e2:a4:18:bf:b6:83:dd:4e:86:0f:
                    ff:a1:dc:fc:2e:49:aa:08:5d:b5:fb:b8:ca:a4:8a:
                    8c:0a:9c:a0:b6:6c:73:ce:ec:bf:37:8d:c7:c4:31:
                    c2:9a:e3:da:a5:54:e3:32:65:68:cc:86:b0:8a:05:
                    a2:93:f4:a0:bf:30:45:04:3f:21:da:ff:44:55:54:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D0:06:DC:65:D1:F7:B3:29:29:48:4B:71:BD:0C:15:08:EF:17:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a07e069c-74be-3b2c-ad63-7961d870a945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.61.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:a7:0a:7a:25:ae:e5:d4:56:af:bf:11:c4:09:49:d0:d7:
         ae:d0:d6:7a:0e:5b:5f:2c:77:45:89:1d:bd:c5:e8:07:db:9e:
         2c:7b:fd:69:db:12:80:74:26:e8:dd:26:9c:df:5c:f4:fe:8d:
         73:81:48:45:ec:db:a4:88:ee:8e:4f:ca:e7:b9:94:ef:ed:1e:
         fc:28:59:f9:e3:e7:4b:08:cf:7a:ca:c1:05:e9:f5:ca:50:73:
         0e:f4:58:c0:c9:28:d8:38:32:be:e4:6a:df:dc:6d:96:d8:90:
         78:84:93:c6:36:25:df:2b:70:84:a4:3b:86:bb:de:9e:ee:b3:
         b3:9e:dc:cf:fd:db:b8:ef:77:b4:c8:17:f5:61:c1:ff:a0:a1:
         c2:8b:f3:5a:df:bf:10:cc:85:ee:c6:b4:c4:c5:cf:34:23:d6:
         f9:12:86:75:4e:24:1e:05:b1:63:29:c5:12:3b:8a:4f:82:cf:
         60:c8:94:4c:55:2a:0c:7c:17:a2:4d:cb:aa:3d:63:76:4b:0c:
         12:9b:6d:ff:7d:5e:59:ff:c8:b5:0e:f7:70:1d:a2:2e:53:be:
         31:93:fb:24:1e:25:2d:cd:e5:18:6c:ef:77:7e:5c:fe:3b:83:
         30:9e:2a:19:f0:75:ca:c7:32:39:a0:f9:e9:86:96:6c:55:3c:
         c9:58:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:32:18 2026 by rpki-client