Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c09881b-27f4-3a0b-8a97-19081d46648e.roa
File:                     7c09881b-27f4-3a0b-8a97-19081d46648e.roa (raw, json)
Hash identifier:          SCvSRiY3Asbxs/AJDAISz0vRfXVVR5qPyVRJLdZFnSc=
Subject key identifier:   40:5F:6C:3D:1D:C6:D3:2E:E1:5D:4D:E3:D0:21:E6:FD:0A:0B:54:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F51D2A742F89DCAB3C62FDBC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c09881b-27f4-3a0b-8a97-19081d46648e.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     32787
IP address blocks:        209.200.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a7:42:f8:9d:ca:b3:c6:2f:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=445fbfb8-4c5b-4f23-bc65-e4c0aa426754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:8c:a1:b8:95:76:80:31:c4:a7:b2:cd:a0:
                    6a:dc:26:ae:ae:f0:ea:e0:7a:6a:1a:76:cc:79:2d:
                    9c:63:7c:83:8a:2c:96:80:55:7c:12:e0:57:12:0a:
                    b1:2b:62:30:94:10:b8:65:cf:90:75:4a:67:e7:e6:
                    fa:76:50:57:4a:e9:37:5a:d8:ee:21:7f:cd:62:ab:
                    a0:c8:2f:9e:5e:de:5c:6a:db:c2:88:6a:cd:67:ce:
                    c0:99:fb:27:15:b0:c8:61:3e:48:14:24:19:65:d8:
                    fc:0a:3a:db:c5:f8:29:16:43:df:28:de:c1:bc:1b:
                    76:c5:d5:26:a1:24:af:4a:d8:b4:f3:b0:1c:62:ba:
                    1a:58:4a:ec:e2:5e:d8:23:a5:d3:29:19:e5:67:84:
                    ac:cd:a3:d7:ce:34:46:8f:1b:3f:85:0f:6d:95:96:
                    13:b1:89:f9:e7:23:7a:3e:be:a9:59:47:24:2b:e1:
                    a4:c8:5d:67:22:47:5a:a0:3e:2a:13:56:75:fa:35:
                    3c:12:c6:21:df:a3:d5:69:dd:71:d0:fc:69:1b:13:
                    f8:28:5d:a5:d9:da:15:8e:ed:49:76:83:5e:e2:29:
                    4a:78:a4:dd:ca:f9:02:2d:f7:a7:cb:de:6c:43:c7:
                    d5:00:a1:b0:6d:12:84:e1:9c:4f:b6:ba:49:0e:a9:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5F:6C:3D:1D:C6:D3:2E:E1:5D:4D:E3:D0:21:E6:FD:0A:0B:54:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c09881b-27f4-3a0b-8a97-19081d46648e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:8b:18:4c:bc:15:63:eb:51:97:e3:94:30:e3:fa:2f:44:
         b6:ba:9d:d8:1f:d3:f4:54:12:55:68:0e:bc:ce:d9:76:99:db:
         50:98:7e:cc:62:c8:cd:66:2d:e4:87:18:02:28:f9:77:66:d2:
         9b:23:18:56:c2:4e:ac:5e:34:01:87:59:6f:cf:06:8b:b0:04:
         a9:a6:88:d3:e1:c0:5b:6d:a2:b4:78:b6:2f:31:ed:59:fe:8f:
         87:88:07:31:7e:32:52:78:16:df:f4:a2:52:cd:a7:ea:d5:8b:
         3e:30:10:45:df:5a:53:66:63:b3:89:95:7b:83:49:c9:da:c0:
         c8:b2:f4:7c:73:48:28:77:7d:15:eb:c8:62:d2:a6:03:b8:01:
         c5:b9:2e:c3:96:b9:cd:68:43:24:0b:cc:04:72:84:d4:8c:a7:
         00:18:3d:4c:a6:a2:5b:d4:e7:0d:c8:5e:8d:3d:69:a9:c4:c5:
         2d:31:de:a2:33:90:44:0b:25:aa:36:97:6a:1c:f9:45:4d:4a:
         dd:fe:37:1c:83:e8:16:74:b7:8d:13:56:9c:45:be:70:4f:ad:
         14:6f:d7:20:a9:d4:ff:22:c2:82:f1:18:9e:e1:12:e5:57:82:
         9c:58:9b:34:4a:0d:d3:6f:46:8f:c9:45:e6:e6:85:73:73:b8:
         e9:58:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:01:55 2026 by rpki-client