Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa
File:                     0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa (raw, json)
Hash identifier:          S/xugqMTzGangVfz83hUFEMu6Wi8wOZ2wKfCglBH6Wo=
Subject key identifier:   C2:70:8D:E8:FC:D5:8B:64:67:19:2F:1F:B8:26:71:0B:EC:77:42:C0
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584EA793FEF4C9E995577B8BF000
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        209.51.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:fe:f4:c9:e9:95:57:7b:8b:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=51c581dc-c804-4112-937d-13ff93cdf90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:b6:9b:9a:8e:bf:ca:02:e6:be:12:35:18:
                    59:ce:a6:8d:a0:65:8f:4d:8a:27:80:d7:02:64:84:
                    e6:3a:31:19:56:cc:a9:5d:05:40:14:85:0f:12:8b:
                    b1:8a:ac:33:9e:87:0d:8f:23:22:ad:97:e4:db:65:
                    e7:52:f8:d5:14:a1:90:7a:af:21:3e:d3:da:68:58:
                    56:ce:56:5c:63:b5:d6:f7:17:bb:24:69:45:00:f5:
                    e6:47:71:2a:d0:0b:70:67:88:58:cf:bc:d5:e3:59:
                    88:72:bc:c3:f5:e8:c6:5b:f9:85:18:43:02:16:24:
                    43:c6:3a:dd:99:06:eb:98:ce:90:e9:16:55:22:48:
                    c7:65:10:1f:45:ce:91:92:c3:83:0e:21:90:f4:ca:
                    e9:13:fc:8d:45:a9:f1:0a:bc:2f:2b:34:c4:08:be:
                    65:c4:38:5c:d2:0e:2b:04:a4:77:a1:da:88:39:cb:
                    f7:2c:2a:56:8d:65:24:77:4e:16:84:40:12:db:1a:
                    91:ee:25:c1:f3:25:76:bc:cf:98:7e:80:d9:56:96:
                    59:6b:ca:0e:ad:c1:44:14:8d:86:37:bf:b4:19:94:
                    25:5b:53:41:38:c9:d0:13:de:14:48:9c:9d:8f:92:
                    4b:34:a3:5f:14:f3:47:24:40:18:77:44:f3:0c:52:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:70:8D:E8:FC:D5:8B:64:67:19:2F:1F:B8:26:71:0B:EC:77:42:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:90:b8:b5:c1:64:e8:64:85:77:de:e1:14:e0:46:6b:7a:
         b5:db:c1:13:84:8a:32:71:77:65:fe:5b:4d:94:af:68:21:9b:
         93:15:a1:30:54:7e:24:46:69:fd:67:a4:dc:22:29:46:03:30:
         37:61:9e:77:d1:de:8f:f2:6c:c6:83:e1:5c:a3:c0:aa:c9:31:
         46:be:ec:fd:46:e2:67:75:7d:a5:4f:67:9b:6b:98:c0:f4:56:
         db:c8:6b:9c:43:4d:9b:d3:6f:88:6c:eb:18:24:fa:00:d9:d7:
         d7:66:85:fc:46:a9:32:59:1d:ad:d8:48:6d:20:35:7a:a6:03:
         4e:6a:a7:fe:af:98:11:12:41:d4:3f:4c:4d:13:d7:b3:b2:b2:
         42:2a:56:02:35:8d:ac:1d:1c:bf:06:7d:22:a3:9a:02:ef:aa:
         d3:e2:ce:b5:c2:64:00:e5:9f:2e:70:4a:64:d8:54:9b:5a:64:
         cc:07:5a:06:2d:af:be:c6:d7:c6:89:7e:ad:ff:84:7e:c5:33:
         4b:74:7e:be:88:b4:dd:b6:96:b3:e2:1e:2a:64:d8:79:d9:71:
         2c:d8:2b:2e:6f:25:a5:df:a1:1c:24:50:99:0c:a9:3e:a8:f9:
         76:06:5d:5c:b9:d7:df:3b:40:56:64:f7:55:0f:10:1c:7d:ee:
         ac:91:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:28:20 2026 by rpki-client