Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa
File:                     9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa (raw, json)
Hash identifier:          rmVpXPc2Hxb8a2Ss7ID9G0BH0JO6TUZ6XI2fmM15KME=
Subject key identifier:   38:2D:58:C3:C1:F3:3C:7D:36:BF:31:64:DE:94:7D:A1:6D:91:44:0A
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584EA78871DAAD5C2C0DBDBCE200
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21669
IP address blocks:        209.212.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:71:da:ad:5c:2c:0d:bd:bc:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=52c58329-304d-4aa0-9316-2d69b4229786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:ed:d8:4d:cb:a4:6b:52:65:35:2e:8d:35:
                    d3:98:35:ee:3c:01:cd:ee:cd:fa:4b:5c:0d:70:5d:
                    98:a7:f0:d6:87:a5:45:6a:17:47:ba:06:72:a7:47:
                    e9:41:06:7a:66:85:ff:12:fd:74:4f:c3:ec:50:76:
                    5e:29:b2:92:00:2b:7a:19:e2:30:2d:12:f4:c6:d3:
                    c8:f8:29:fd:4d:2a:63:99:60:dc:d0:c8:7d:9f:2e:
                    e1:67:2a:af:dd:6e:8e:78:22:26:f9:8e:a5:3f:17:
                    03:93:39:b5:bb:1c:8d:e8:5a:24:a9:ce:bb:b8:73:
                    ff:4f:e7:0f:2e:34:78:48:8d:47:0c:47:e6:72:c6:
                    7b:80:5f:43:72:f0:66:82:50:c5:d4:36:2e:6d:4a:
                    2c:f0:cd:cb:90:fe:b3:75:2e:e2:64:47:c9:2f:99:
                    85:78:37:2f:9d:73:46:a2:2e:06:fc:12:93:5c:71:
                    c6:fd:53:85:22:bd:b2:0b:2b:d2:89:4b:49:36:7d:
                    51:4a:92:c2:1b:36:7f:48:b9:27:19:05:78:a5:ea:
                    ce:73:5a:08:1c:bc:92:f1:6a:83:f2:7a:8b:34:09:
                    97:48:55:be:9e:8d:86:da:e2:96:c7:28:4c:4c:a0:
                    15:bd:1c:70:b1:1c:7d:1e:0c:d4:26:c1:74:45:36:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2D:58:C3:C1:F3:3C:7D:36:BF:31:64:DE:94:7D:A1:6D:91:44:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:bd:c8:b1:96:38:9f:5c:8e:9e:63:36:13:db:d1:48:e6:
         bc:76:44:de:c0:71:b3:64:d6:f1:06:ad:5e:ce:7c:09:7b:d7:
         9d:43:45:ea:d8:21:35:00:19:1a:87:55:5a:83:41:cb:b2:b7:
         88:04:cb:9d:f5:42:a5:9d:a2:6a:71:65:e6:c4:2c:d0:0b:7b:
         a9:6b:5f:5e:2b:68:26:19:ee:85:56:5e:c6:10:6d:fc:bd:be:
         39:d7:40:1d:87:31:f6:9c:c3:e0:ce:c7:5f:6d:ba:e8:70:1f:
         70:6f:6a:f5:f8:6d:7f:58:b5:1c:4e:c3:45:bd:e8:14:6c:c8:
         3c:8a:04:94:89:32:1c:75:45:0d:e2:95:c6:b9:38:7d:bb:11:
         94:de:00:e0:ed:19:b5:58:dc:cd:41:e3:ac:61:43:96:1e:36:
         a5:49:17:14:87:73:a2:72:d6:0a:94:d6:62:0b:cd:38:78:ae:
         7e:f9:f3:8f:8b:14:37:2d:c9:0c:2e:b3:d6:82:81:95:76:ed:
         9c:d3:f8:5f:c0:74:9e:2f:73:ee:7b:cf:57:66:c8:70:c5:2d:
         ff:7e:51:13:6e:71:38:48:aa:c4:46:41:b3:10:50:1b:c8:7a:
         c5:2e:fe:54:78:c0:5b:b3:bc:b0:2e:21:b4:ce:5d:a8:34:52:
         b6:8b:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:04 2026 by rpki-client