Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa
File:                     48a75400-de9e-393e-923c-1c1c7fa95ef9.roa (raw, json)
Hash identifier:          OJAWc95WS0mBBwZ+jA51w/iuSXFavNPvONjGr7ECv/A=
Subject key identifier:   9F:BC:23:53:37:3D:C3:AA:C9:1D:2A:09:8B:39:0E:EC:74:07:7A:16
Certificate issuer:       /CN=7beaa622-f870-437b-961c-9027fea120aa
Certificate serial:       010D0C9F4328584F03A789591179A692D700E180
Authority key identifier: 18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        209.151.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:89:59:11:79:a6:92:d7:00:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beaa622-f870-437b-961c-9027fea120aa
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=dbca3440-db93-42ee-944b-bd7e8edcbdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:ad:d5:9d:5b:63:98:cb:c6:fd:72:5a:da:
                    88:e5:89:db:15:a5:bd:f5:64:ae:13:c3:02:59:1a:
                    9c:d6:00:cd:f1:6b:27:f4:9e:e5:dd:32:1c:c4:21:
                    59:5a:ac:34:e9:2f:d5:bb:c7:31:41:0c:10:3b:cb:
                    ad:42:22:4c:6d:10:64:fc:12:5e:60:2f:e4:1c:0a:
                    15:5f:3d:2a:7d:f4:78:b9:a4:b6:35:52:3d:eb:ce:
                    77:7b:95:db:fe:95:42:26:fa:22:40:24:26:d4:66:
                    49:67:dd:5e:2b:77:4a:b9:c1:68:d3:9d:9f:f0:ff:
                    6c:a0:c5:55:ff:17:03:87:4c:d5:d1:d6:e5:d8:0f:
                    5c:8d:be:09:25:57:1c:d7:09:ec:e3:5b:0a:75:60:
                    3a:ab:ad:11:ab:fd:31:75:c4:f7:00:7b:58:18:42:
                    ce:b7:67:1f:50:c0:c3:bc:bd:a9:4e:3d:8a:fe:82:
                    5c:58:04:87:b8:31:66:ab:bc:2b:81:86:7a:1d:6e:
                    7e:a0:20:3b:da:cd:8a:62:45:00:63:b2:ae:73:2e:
                    8d:cd:88:50:a1:92:1f:b8:5a:ca:ed:64:07:37:7c:
                    e7:59:4b:33:44:be:d7:8f:cd:81:66:dd:bc:50:c0:
                    03:db:b3:6d:74:93:ac:ea:19:eb:9f:e2:45:58:84:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BC:23:53:37:3D:C3:AA:C9:1D:2A:09:8B:39:0E:EC:74:07:7A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.crl

            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:79:65:86:95:ef:b1:2f:3e:17:56:b1:44:07:5d:f7:a1:f3:
         83:43:2c:2f:8a:a8:22:17:11:72:02:ab:a0:39:c8:ce:f5:1e:
         8d:3c:bd:4d:17:06:09:85:7e:02:d3:50:48:9d:5f:ec:9f:6c:
         6c:45:56:5c:37:6f:63:27:3f:37:d2:46:cd:72:0f:4e:b0:10:
         4d:48:44:e6:19:ec:8e:dd:83:a1:dd:5a:24:54:26:54:7a:f9:
         4b:c1:f8:5f:7a:b9:b7:46:e8:55:c2:79:cd:60:7a:68:c1:b7:
         91:97:ce:a2:e0:35:57:bb:8b:8f:2f:39:b9:a8:d9:7a:15:4f:
         e9:a2:9a:73:7b:ca:1d:f6:6e:7f:c7:3b:26:a1:a5:d6:ab:cc:
         1a:88:36:1d:15:ff:89:3e:96:4d:15:aa:57:67:9f:c3:17:90:
         e0:1a:10:9a:e4:93:42:9a:a0:65:0a:82:d5:66:0a:dc:38:60:
         e5:a9:d0:15:69:bc:ff:89:9f:60:29:f3:1f:17:24:7d:a9:f3:
         a6:79:14:2f:50:a9:7d:4f:13:10:21:85:25:33:c9:5e:05:6b:
         eb:c2:9f:c8:a5:9d:ef:cf:4a:60:be:d6:0b:e0:de:e2:05:9a:
         0f:71:5d:9f:e2:71:9e:9f:17:15:cd:d9:80:6e:71:a3:7e:69:
         3d:6c:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:48:43 2026 by rpki-client