Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/09c13755-3a37-3613-a05e-df0658c655dc.roa
File:                     09c13755-3a37-3613-a05e-df0658c655dc.roa (raw, json)
Hash identifier:          KpneA4egBBxH1nEf/ZB074knObcyNlZEdNAw4UJ3yAg=
Subject key identifier:   D6:8B:60:1D:17:56:5B:69:F2:2A:96:2E:5A:77:E8:9D:CC:29:53:0F
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F15CCFDD4D260252B64822880
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/09c13755-3a37-3613-a05e-df0658c655dc.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        198.183.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:fd:d4:d2:60:25:2b:64:82:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=a61a4852-478d-4562-9af4-f159ff3d6288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:55:44:43:0b:cb:a6:a9:99:cc:22:72:b2:bb:
                    eb:ff:db:25:79:4c:9b:6d:48:a7:88:ad:c5:da:d5:
                    61:cc:6f:1d:6d:a8:f1:48:ae:18:ed:e9:a9:bc:c1:
                    82:c5:c7:f6:77:46:9e:47:11:82:ce:17:12:4f:ae:
                    20:5f:a3:c2:e2:1d:57:db:e0:72:20:ad:5c:5d:cb:
                    34:c1:cb:27:5f:56:f4:dc:13:e1:4a:47:f5:2c:76:
                    b5:e0:30:30:71:4a:f7:c5:5c:2a:34:0f:ad:14:7e:
                    86:43:1b:a1:67:e0:2f:2b:56:8c:64:5f:74:6e:5a:
                    58:9d:34:37:76:87:84:eb:bc:fa:54:d4:84:52:3b:
                    ed:f4:23:f2:30:6c:5d:49:eb:85:e4:e0:31:9b:e9:
                    0e:b4:1c:df:d2:7b:af:93:b2:8a:ea:00:e8:52:18:
                    ab:0d:ee:65:30:d9:dd:f3:b4:b4:de:3f:7e:ac:4b:
                    ac:b7:0d:06:fc:4c:56:4f:fa:9b:f9:ee:3d:d1:16:
                    6b:be:4e:6c:b4:bd:a8:a4:e5:e3:a0:bc:7c:76:00:
                    12:ad:8e:27:18:7c:c1:a8:1e:8f:fe:67:9b:3a:37:
                    4b:31:72:b1:ce:bb:c0:a6:b6:ba:72:a0:b9:d6:db:
                    9b:ab:b6:a5:12:b7:5f:2d:14:49:34:b0:53:4e:6c:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8B:60:1D:17:56:5B:69:F2:2A:96:2E:5A:77:E8:9D:CC:29:53:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/09c13755-3a37-3613-a05e-df0658c655dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.183.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cb:fa:10:51:d0:9a:9d:7c:8e:5f:ca:f5:83:f7:8c:cd:e5:
         53:ef:84:9b:e4:6c:05:c3:6d:ab:10:f3:a1:68:4b:da:4e:e9:
         24:19:53:54:b8:12:50:92:50:a5:53:02:cc:b4:8c:7d:b4:b4:
         7a:8c:4f:dd:33:54:8b:7b:89:d1:74:12:47:b7:0b:de:ec:59:
         2e:82:4d:52:b0:57:56:fa:3c:f0:93:19:9e:4b:ad:6b:a5:14:
         63:8b:47:04:4d:3f:74:e5:b1:a3:44:e5:89:f8:ea:81:12:1d:
         95:1a:57:4f:7c:65:0e:19:f5:6f:99:5e:89:4d:ed:11:86:0f:
         99:c1:28:73:bb:f3:7f:c5:cd:80:53:b1:a0:1f:cf:91:1b:24:
         c3:79:5f:e3:8b:a9:30:c4:e1:a2:49:44:c0:b0:d0:e4:76:e9:
         eb:99:c9:75:d1:69:a0:a6:c9:d7:61:83:27:c0:46:12:68:8b:
         9e:74:d9:75:36:87:1f:58:7e:37:06:0e:74:71:7c:aa:7f:38:
         15:e4:df:46:99:0d:34:3b:a6:e1:d7:ea:3b:49:c8:54:54:c1:
         cb:97:b0:99:81:69:81:88:a2:4b:43:b5:50:68:66:09:5c:60:
         61:67:33:89:6e:e5:5f:c0:7c:23:aa:08:65:ad:6d:82:0f:ae:
         9d:9a:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:36 2026 by rpki-client