Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/75adb036-659f-3de8-81a8-f535058652b6.roa
File:                     75adb036-659f-3de8-81a8-f535058652b6.roa (raw, json)
Hash identifier:          JWyovbicCLoUugbaxYPXPtHCmMCAcsxXVGEZt1SknXE=
Subject key identifier:   FD:20:7B:08:B3:A7:70:13:E7:5D:2C:A6:0B:57:1B:1D:49:5E:1B:6B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F30528F2F369E6986AB1EE640
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/75adb036-659f-3de8-81a8-f535058652b6.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     399955
IP address blocks:        209.101.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8f:2f:36:9e:69:86:ab:1e:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=c7bb9405-dca3-4389-93a7-d583500b6501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:ea:a9:f4:a7:34:6a:7c:e1:fb:9c:93:62:
                    c5:df:60:e5:8b:ad:d7:c2:af:aa:97:ac:45:19:cb:
                    f0:62:34:3a:5d:23:b6:b6:63:e0:59:db:b0:bc:af:
                    dd:6f:d8:16:f9:17:75:94:21:c9:45:76:50:75:9e:
                    a1:2c:db:f0:95:9a:89:39:de:e7:30:f1:cb:b8:22:
                    94:c6:8a:e1:75:42:a8:4b:48:c6:26:f9:5d:85:bb:
                    89:76:a6:34:d7:e4:36:5f:5f:71:4b:9c:f9:45:48:
                    bc:93:8e:93:81:0b:d8:8e:fb:ec:b2:00:6e:f9:93:
                    26:4c:3a:7b:84:ce:a7:66:cc:6a:78:0a:82:b4:66:
                    6f:bd:57:d3:52:73:e3:5c:5f:9c:31:b2:e5:1b:c9:
                    ec:8d:ab:1a:4e:22:37:05:c6:4e:b9:68:a9:e8:1c:
                    2d:5e:c6:c1:20:7c:01:82:20:04:06:12:2d:58:27:
                    7d:6d:d2:53:eb:07:db:3e:e7:a7:a2:a5:4b:ad:4e:
                    60:53:a2:33:f8:34:d5:1f:6f:7e:bd:32:13:5b:67:
                    c3:77:a2:83:c0:d5:0e:e5:91:4f:ed:f1:d2:2d:6d:
                    5f:d5:a7:68:1f:b8:96:ee:62:27:6f:2d:f8:99:9e:
                    e9:55:f7:18:0d:22:97:bc:48:c8:6a:2f:f4:9a:4d:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:20:7B:08:B3:A7:70:13:E7:5D:2C:A6:0B:57:1B:1D:49:5E:1B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/75adb036-659f-3de8-81a8-f535058652b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:29:a4:e2:54:9a:8a:1e:6b:ff:46:ae:b9:45:d0:25:bb:
         9f:b0:2c:f1:ea:1c:5b:1f:f7:c8:08:10:41:dc:e4:8c:4d:fd:
         df:9b:f2:62:42:65:f7:33:3c:f6:2e:04:72:0a:d8:f1:a1:96:
         de:84:34:7e:28:b6:09:f4:56:07:41:9a:9c:15:1d:83:70:2f:
         97:4f:1c:9a:96:c3:80:7e:c1:5a:26:11:cf:d4:d2:b4:24:cd:
         16:98:68:cf:5f:91:ce:2d:e8:75:1f:4a:83:b5:69:b3:a1:ce:
         21:ef:ea:19:80:c9:20:8b:8a:86:17:05:34:3e:32:19:9a:67:
         df:47:50:39:bb:6c:2c:12:7a:a9:9e:56:e9:25:55:0e:47:69:
         2f:85:0c:7c:27:98:b9:b0:b8:c3:ce:5e:d7:24:f2:86:35:ce:
         05:a9:8a:8b:1d:04:53:9e:4d:ed:81:c0:52:fc:7f:9a:a0:71:
         9a:b3:eb:6c:ab:0b:4c:4f:4c:a1:ad:84:27:82:b3:a1:d1:96:
         3d:44:18:ed:c2:3b:86:33:c2:9f:79:c8:25:c1:d8:17:c9:ca:
         0b:ec:2b:d5:46:74:2e:51:2c:33:55:65:93:90:b9:3c:4b:74:
         f7:2b:b9:ce:65:68:29:a3:af:78:43:a4:2b:2f:c2:db:68:8b:
         d9:48:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:11:14 2026 by rpki-client