Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f2b0ef4-3509-3abb-a444-b097c382b386.roa
File:                     9f2b0ef4-3509-3abb-a444-b097c382b386.roa (raw, json)
Hash identifier:          090NBOLqNfTpWDvLFPLsTqtD1+72uxKKXruN/5QqAUY=
Subject key identifier:   C2:66:45:2C:D3:BA:84:C4:67:07:F8:E8:4B:4B:42:00:6C:B0:73:FD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4985385330966ABBFB9CEB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f2b0ef4-3509-3abb-a444-b097c382b386.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        173.194.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:38:53:30:96:6a:bb:fb:9c:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=09fc5d3c-0459-4388-98f0-5ccd232849b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:dd:9c:26:58:8d:18:fc:84:fc:55:88:b6:
                    89:48:6f:f8:f1:2d:66:2c:8e:ec:b4:b4:48:c3:60:
                    ff:a1:e4:12:93:d0:f6:ad:52:a1:0f:7a:b6:98:99:
                    dd:de:09:e2:a8:ae:45:03:d4:ce:74:12:d6:c0:92:
                    3f:75:f6:36:97:06:29:2c:97:d3:97:94:5c:9f:0c:
                    a8:2b:65:0a:5b:4a:c5:cf:7b:65:86:f2:ba:4c:7e:
                    02:30:45:0f:6a:43:3e:a4:be:4d:31:9c:fd:d0:30:
                    97:20:3c:f2:09:c0:83:28:a9:90:3e:0a:bf:df:97:
                    68:94:d6:a1:23:1c:1d:1c:9b:78:d8:86:c0:7c:b7:
                    7f:89:8f:e7:5f:15:fb:d4:97:3c:7c:2c:d3:5a:ec:
                    55:5a:2c:5c:7a:4e:aa:f6:e6:ff:f0:75:1d:cb:92:
                    c6:0c:2e:7d:4c:a5:9a:a2:e8:3a:47:c2:79:24:93:
                    a2:4b:91:ab:1d:03:3f:a1:96:19:60:8c:ea:9b:9c:
                    0f:80:e7:a7:50:b3:39:d4:61:8c:6c:62:95:1b:dc:
                    fe:24:50:25:84:b3:a4:37:78:10:f8:ca:34:b3:74:
                    e4:fc:fd:f5:9f:8c:f7:22:65:40:e2:85:94:9a:12:
                    ac:d8:08:6a:60:a0:1e:fd:5e:01:fa:d4:43:38:b2:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:66:45:2C:D3:BA:84:C4:67:07:F8:E8:4B:4B:42:00:6C:B0:73:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f2b0ef4-3509-3abb-a444-b097c382b386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:6f:52:19:e2:33:d7:1a:22:19:ef:9b:90:a0:a8:1b:6f:
         78:98:31:3f:86:e7:6f:54:f0:9f:4b:ba:d9:d1:24:5b:b3:9c:
         78:fb:85:e2:82:22:94:9c:ae:08:1d:09:66:4d:f4:87:f7:f8:
         c1:7a:18:46:42:7a:c1:10:31:0f:10:5c:2b:ea:83:69:60:b7:
         a5:10:2a:65:1b:8b:17:64:66:b4:4b:63:80:be:e6:d7:c8:c5:
         34:a7:47:c4:61:c5:7a:23:b6:e5:1a:23:ad:ed:9e:11:14:ed:
         62:8e:76:1d:09:de:04:e1:e8:20:12:83:77:f9:d1:36:83:bb:
         92:7c:14:51:fa:2e:f3:86:bb:f3:e6:13:1d:97:25:0b:16:fd:
         4e:00:77:b8:90:3a:a1:82:43:0d:6d:6f:b7:b7:43:70:38:b9:
         4d:41:f3:57:1b:13:bd:6c:63:69:42:88:70:43:e3:27:df:dd:
         38:68:ad:8f:d0:f8:c2:f0:84:d1:2f:68:e8:eb:62:9f:1f:b1:
         24:1d:d9:be:30:82:13:e2:5f:49:96:c5:65:a0:c1:57:4d:08:
         92:50:a1:59:d1:3e:11:ac:d0:1b:06:55:ef:c4:01:76:87:77:
         8e:35:1b:0f:7b:e7:ae:42:f4:a0:6d:0b:fb:78:90:d6:bd:1f:
         bd:21:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:25:58 2026 by rpki-client