Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa
File:                     49212b0f-98c1-33f7-b49b-5bbad34aa488.roa (raw, json)
Hash identifier:          Eb0fgGu+iiKAsfB3gsA4H8G5Jbc7H6XGUs28aSczfLg=
Subject key identifier:   92:18:86:D2:3D:73:AD:92:0B:1A:3A:05:7C:57:8D:52:25:C5:32:B9
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584F2ABD115FB2175902035B1E60
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     14877
IP address blocks:        209.50.137.0/24 maxlen: 32
                          209.50.138.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:11:5f:b2:17:59:02:03:5b:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=17aa4915-1d11-45ab-a17e-eef3a4cbb4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:13:4e:ce:1f:e2:80:15:ce:7e:57:b8:45:
                    9d:77:af:1b:43:23:5a:4a:b4:2f:2b:aa:ca:b6:c4:
                    f1:eb:1e:db:de:a6:3a:f2:ab:1c:38:1b:8e:15:72:
                    67:eb:4d:e0:65:87:65:71:91:5b:1a:e9:3c:c9:59:
                    93:0f:39:93:ac:9e:f6:0c:2f:cc:82:79:89:b2:33:
                    21:98:b5:98:4f:a3:48:b0:e7:fd:24:0c:fb:ff:0e:
                    bf:7c:4a:41:53:9e:9f:d9:f8:4e:ab:b9:2f:f6:f3:
                    3f:7a:01:29:55:f5:35:6a:71:be:5c:6a:7a:e2:16:
                    d8:17:44:36:0b:a3:7e:39:7c:fd:d6:6e:3b:72:20:
                    d7:c4:41:f6:7d:15:08:f5:18:f7:b9:e9:f4:8b:e2:
                    fc:31:e8:51:14:f3:41:ca:08:a4:84:52:dc:fe:67:
                    5c:48:6f:1d:d7:0f:d2:a4:d0:2e:68:18:54:1d:aa:
                    91:19:ba:a5:69:da:41:83:48:5f:de:06:e7:9e:3f:
                    7e:a7:0f:23:56:d9:cb:3d:04:28:ed:0c:c8:7e:5b:
                    90:d6:f9:e8:2d:76:03:6a:5c:7e:44:96:21:90:a0:
                    b3:38:9d:4e:4f:a8:89:30:af:2d:68:b2:dc:15:31:
                    77:bb:74:ad:26:55:f1:8d:b6:ab:f0:d1:2e:d5:1e:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:18:86:D2:3D:73:AD:92:0B:1A:3A:05:7C:57:8D:52:25:C5:32:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/49212b0f-98c1-33f7-b49b-5bbad34aa488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.137.0-209.50.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:58:a2:39:dc:a7:87:64:8f:a8:a0:fb:3d:3f:67:8c:a6:19:
         a5:0a:a7:50:a5:f6:5e:fc:af:e8:d4:8c:dd:cf:86:7e:c7:f8:
         d9:f8:c0:53:54:88:e3:f9:ba:88:29:9f:bb:1b:15:6a:62:96:
         d6:71:44:e9:48:d8:6c:16:28:5e:11:e3:ee:df:f0:82:19:14:
         2d:de:30:0d:b5:4c:03:b6:fc:54:1c:8d:d4:4f:3d:21:3f:9b:
         4c:7c:d2:2d:aa:96:ad:cc:25:6f:14:e5:fc:3d:9b:51:fc:b1:
         98:5f:4c:cc:25:82:66:3b:f3:51:84:f0:96:59:a3:d0:54:55:
         0d:6f:08:69:f8:a4:9e:c8:23:98:01:c2:39:29:39:ae:e7:3a:
         f3:41:73:88:ee:87:90:8e:b9:fd:c7:be:5d:d3:0c:bb:18:50:
         51:5d:c5:db:a1:47:43:60:0b:48:84:9d:45:3f:b9:01:94:6f:
         1e:c0:08:36:a8:ad:65:62:a9:58:e7:58:42:d4:84:be:da:bd:
         db:9e:bb:81:6f:7f:56:1e:0c:0a:23:52:5c:17:fb:dd:31:78:
         9a:6f:3d:86:83:97:8a:c8:61:90:26:de:8c:f1:48:9c:c8:13:
         0d:55:0c:95:9b:90:2e:41:ae:73:99:94:02:2f:c6:36:fa:d3:
         75:fd:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 03:17:20 2026 by rpki-client