Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46f71593-8d16-34d8-83d8-05930fa200d6.roa
File:                     46f71593-8d16-34d8-83d8-05930fa200d6.roa (raw, json)
Hash identifier:          2hwjcsaiqIFR9nMN+adQMXwbxO025wjmVfb9/YDRpHw=
Subject key identifier:   F6:11:35:7F:5B:F9:8E:A7:D7:AE:48:09:71:27:63:CF:D3:AD:9A:FC
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584C7D7C556E9848603B837B3F38
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46f71593-8d16-34d8-83d8-05930fa200d6.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     327738
IP address blocks:        209.9.1.0/24 maxlen: 24
                          209.9.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:55:6e:98:48:60:3b:83:7b:3f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=8692353a-1e22-4b32-80b4-6d57ed8a6d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:26:a1:48:1e:75:d8:59:03:00:ce:9b:0f:
                    8c:62:1a:31:12:70:29:9f:d3:58:be:38:13:b8:96:
                    81:b6:a3:a3:bb:21:f2:7f:f9:39:57:e9:20:c4:d8:
                    9b:89:9c:10:61:cb:79:fd:b6:36:94:e6:da:54:86:
                    3e:a3:01:ca:d5:c2:31:72:62:53:7e:69:df:b8:39:
                    ab:d9:bc:3d:67:b9:2f:d3:33:4b:60:f9:31:22:9f:
                    9f:eb:f0:bb:ca:43:0b:1c:35:0f:6e:51:34:9a:53:
                    33:eb:4e:10:ce:ec:86:33:a1:db:9c:26:41:53:43:
                    6c:e9:19:ce:1f:7f:e5:3d:51:69:a3:aa:1c:17:b8:
                    1f:68:99:64:df:f4:56:82:5c:3f:cb:3b:38:45:7f:
                    e6:4d:3d:1a:1f:f0:6e:05:16:32:12:76:87:76:d8:
                    e1:9c:3e:7a:bc:de:ac:bd:e9:ce:bf:83:f2:8d:1e:
                    32:85:6f:b5:79:54:5c:df:39:ff:c7:9c:15:e2:85:
                    58:48:a9:03:02:78:6b:fa:0d:8b:97:b3:ba:cd:06:
                    ca:b3:57:ec:b4:9e:fe:e3:e0:41:66:c8:0f:ee:a4:
                    d5:71:99:7c:4d:e8:2a:f6:a7:1d:98:6c:a9:99:28:
                    b0:ad:9f:3a:5c:6a:1b:99:f5:24:d3:8b:9b:03:26:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:11:35:7F:5B:F9:8E:A7:D7:AE:48:09:71:27:63:CF:D3:AD:9A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46f71593-8d16-34d8-83d8-05930fa200d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.1.0/24
                  209.9.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d5:e0:8a:ed:b8:14:d2:bc:dc:d8:19:60:1f:fb:dd:b8:80:
         9c:db:cf:0e:15:d5:f4:ad:a0:27:54:0b:56:e9:d5:de:90:df:
         86:06:7c:12:4c:a1:a1:2d:d5:e4:ec:00:01:a4:c6:55:cc:c9:
         f4:6e:fd:dc:96:a2:4e:c2:8d:e6:0f:8b:46:4f:aa:69:3b:8c:
         81:67:2e:3a:68:4d:2b:7b:25:cd:bd:a8:12:33:70:49:19:e2:
         66:52:cc:1f:84:21:61:d6:b4:3c:b2:0b:c0:6a:ac:fe:b5:c9:
         13:60:b5:3d:56:e5:25:cc:56:b7:b2:42:d2:00:3e:a1:d6:47:
         fa:fb:da:7b:89:8d:97:2e:a9:d5:7e:d6:0d:8a:cc:b7:3f:e8:
         0c:11:cd:05:4c:71:86:08:51:57:a3:0a:45:be:10:0b:a2:0c:
         70:3d:0b:93:3a:57:60:5c:9a:d6:78:ed:18:7b:cc:30:8f:d0:
         6d:e6:b6:7a:13:73:10:f2:f4:66:4a:b9:dc:2a:ef:ff:57:89:
         7d:7d:db:20:5a:e8:ee:75:82:9c:58:b0:72:99:04:76:43:0f:
         26:ae:7b:f1:0d:26:a0:f0:d5:79:8b:59:ae:2e:53:5c:64:72:
         1a:cc:56:61:c5:f2:df:bd:4a:ae:5f:c2:fa:b4:2c:f8:ea:2f:
         03:97:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:35:26 2026 by rpki-client