Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa
File:                     c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa (raw, json)
Hash identifier:          mdWR+pp/sTFDXv7Q8cy5OPUWKlP9+Z9e/Gp/gyI8YKE=
Subject key identifier:   D4:FA:BC:90:6A:39:18:0D:F7:90:F0:80:FE:A4:E1:B2:1E:F4:FF:16
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DEC7B2501EF78249949834600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     400031
IP address blocks:        209.101.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:25:01:ef:78:24:99:49:83:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=8fd02f7f-b31b-436a-95c8-bf166b073e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:53:df:2f:5b:5c:12:ae:12:6c:17:0b:2b:
                    5a:e8:bc:b4:01:34:a1:fb:68:0d:74:68:33:b7:08:
                    65:d3:07:03:20:58:d9:44:dd:0a:4f:f6:1c:79:b9:
                    5e:a0:d5:6d:f5:68:87:54:39:9e:80:b8:ad:ea:93:
                    89:d0:b0:88:6e:1f:78:b9:3d:6e:6b:3c:46:ce:21:
                    c8:e8:ab:26:cc:ff:7a:19:1d:5e:38:7e:e5:41:69:
                    22:bd:1b:03:d8:71:73:89:96:75:92:f9:f8:36:c8:
                    03:b7:86:f5:b7:f6:86:9a:71:b0:f0:7c:87:e1:6a:
                    fa:34:9e:e7:33:87:b8:be:26:90:ec:e3:50:4a:ff:
                    a3:f7:0b:a9:f4:c7:32:17:aa:fc:7e:5f:44:c6:83:
                    80:07:b7:7d:c7:78:5f:28:ce:61:c1:d0:e5:04:e3:
                    00:4a:74:d4:30:89:3b:2d:52:bf:60:c3:31:22:c0:
                    50:74:c4:78:04:cb:ed:72:08:d6:c7:00:cd:90:48:
                    ba:cf:63:7f:d4:35:61:d4:13:14:1c:82:0e:74:fd:
                    c8:1a:dc:93:de:8f:83:36:59:ee:7e:20:86:14:78:
                    46:c3:1c:da:50:de:ed:01:6a:43:7a:6e:e8:24:90:
                    e3:7f:26:82:8e:d3:fb:d5:d9:18:57:76:0c:68:bc:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:BC:90:6A:39:18:0D:F7:90:F0:80:FE:A4:E1:B2:1E:F4:FF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9f6ed96-a71f-3a71-99c6-8a7acb45a0fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:af:13:27:1f:cb:b8:3b:15:5d:ce:73:55:5f:42:81:3d:b0:
         7c:ee:7d:bf:2f:1b:7b:32:f8:5b:56:74:35:63:9d:1e:54:1b:
         d9:fd:e2:63:15:6d:ee:20:a4:79:07:04:8c:07:79:63:82:3d:
         20:30:0a:e3:8e:fd:3c:fe:c2:f4:cd:49:04:c8:8c:88:8f:4a:
         eb:a0:d8:63:76:3b:94:50:03:b1:f4:b5:16:4f:66:bb:c1:a8:
         3b:cd:e3:40:e5:08:f9:24:7c:de:f9:72:98:d6:4e:4d:8c:59:
         ea:54:fa:c7:d8:fe:73:26:fb:30:b8:e8:ed:24:4c:0b:73:8c:
         cf:d5:5d:d1:8e:31:0f:b1:c7:5f:03:5d:c6:aa:32:b4:e4:dd:
         00:e2:f2:53:f4:28:14:df:6a:e7:83:d0:e5:c6:cb:9c:be:f3:
         08:8a:77:ef:67:23:ad:81:3f:8e:57:ba:a5:0d:ab:89:48:ac:
         1b:47:56:0a:bb:fc:6d:b2:4c:d2:e2:ce:ac:d9:03:8b:56:3e:
         9d:e0:7a:f2:47:51:1e:85:05:2a:d3:3d:6b:4c:92:7a:53:cb:
         af:c7:c5:41:fc:b8:08:e9:d0:3c:ae:6e:50:68:68:0a:98:84:
         35:9e:45:53:ea:32:c4:1b:06:32:fc:ad:6e:34:78:31:31:67:
         4b:b6:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:10:23 2026 by rpki-client