Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa
File:                     69bcf842-176d-3e20-9648-54a62aa8308f.roa (raw, json)
Hash identifier:          itwk+eN8joCusyftZwzm3wcrORMKB9JnnfuJ0kzaGLY=
Subject key identifier:   BB:D9:73:0C:F1:3B:4A:F6:F5:28:6C:8A:71:C5:91:2B:CD:61:25:23
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F498503D1CC5500E10CDBE400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        173.194.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:03:d1:cc:55:00:e1:0c:db:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=60033f66-ccd4-4492-8659-303e0f822102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:d5:2e:7e:1d:83:1c:48:53:06:7b:2b:51:
                    5c:83:7d:24:6e:e0:64:d3:57:32:22:1a:a5:c9:b3:
                    18:bc:cd:da:97:4f:0e:07:59:4e:8d:ea:4c:c3:45:
                    d0:bd:23:3d:ce:e3:5f:9e:5b:1c:68:2f:3e:d1:7a:
                    a3:44:03:31:88:7d:af:ef:98:47:b6:8b:57:d8:1d:
                    06:04:77:3f:81:5c:82:22:1f:2d:3b:f4:ab:da:cc:
                    34:ce:cc:15:43:47:18:f6:87:5c:d2:97:c0:ac:59:
                    cd:9f:76:4f:df:4f:df:98:3a:26:71:1e:c0:52:af:
                    c5:ed:6a:31:14:c2:69:bb:b2:0c:f5:8b:59:11:93:
                    47:86:81:f9:3d:46:8f:c3:9d:cb:06:d5:1a:ab:ca:
                    85:04:33:a2:2d:59:20:5b:58:bb:ee:e0:02:72:da:
                    fc:26:16:56:e0:a6:a4:56:62:5e:58:05:eb:5e:cd:
                    d1:b2:6b:23:f4:24:a9:0b:2b:b1:09:17:b7:39:b3:
                    e4:18:63:07:51:ac:6f:e2:79:54:4f:9b:0b:0e:2d:
                    27:a8:44:8a:26:cb:f7:8e:5a:49:c7:1c:df:9f:46:
                    30:ff:d5:d0:4b:10:c5:c9:b0:4f:cf:86:57:0e:8a:
                    e0:9e:79:5b:df:94:80:8b:07:d2:ba:2f:eb:de:02:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:73:0C:F1:3B:4A:F6:F5:28:6C:8A:71:C5:91:2B:CD:61:25:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69bcf842-176d-3e20-9648-54a62aa8308f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f9:a8:35:09:61:5b:83:39:b6:80:68:3b:76:30:13:bd:35:
         94:2b:05:74:45:72:23:c1:be:c4:02:90:ff:97:a6:01:95:9f:
         03:8f:71:c1:70:86:d3:1a:99:47:ed:fd:fe:cf:07:96:40:aa:
         ee:7c:85:a7:4f:03:99:59:95:86:17:33:80:eb:28:5d:fd:d4:
         9c:7a:b5:7d:70:55:43:2c:bc:ee:3f:ce:4b:02:70:3e:91:a2:
         33:7d:70:03:8d:d0:00:52:59:68:09:ec:b8:97:fd:05:ef:fd:
         66:28:42:6e:1d:a5:7e:db:9b:c5:03:c9:e6:f7:56:fe:58:32:
         fe:16:ef:82:65:e1:97:a5:56:cf:51:20:14:00:9b:ee:ec:45:
         e8:c2:b1:12:ea:77:c3:9a:0f:e0:23:ab:c2:c9:60:15:67:a8:
         58:83:6b:6b:1a:d8:93:3d:dc:1b:ed:fd:5b:d2:60:2e:72:e9:
         a7:60:a4:8f:98:a0:31:3e:97:b6:a2:c2:49:d3:33:66:1d:3b:
         4a:96:cd:6e:a9:74:b7:d0:02:41:32:ac:3a:9f:ae:19:16:13:
         4a:3e:1b:1b:25:26:8b:b0:94:aa:1d:6d:18:3d:5f:0e:0f:93:
         27:d8:e2:97:28:b1:19:bc:e2:c8:5b:30:7b:2f:12:17:01:f6:
         85:74:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:51 2026 by rpki-client