Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75b1cf46-cf83-39bb-aaa6-d1d52fe77814.roa
File:                     75b1cf46-cf83-39bb-aaa6-d1d52fe77814.roa (raw, json)
Hash identifier:          Wr/tvk8FGbBWKgXbRhITFWILXptfO3fcZ30EJ7+gi60=
Subject key identifier:   CD:24:49:BD:CC:A1:87:0C:41:A3:C9:7A:10:45:19:97:27:75:29:BC
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F43DD58FBDFFA725A4B60AC80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75b1cf46-cf83-39bb-aaa6-d1d52fe77814.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        216.227.140.0/23 maxlen: 24
                          2001:49f0:d004::/48 maxlen: 48
                          2001:49f0:d010::/48 maxlen: 48
                          2001:49f0:d026::/48 maxlen: 48
                          2001:49f0:d047::/48 maxlen: 48
                          2001:49f0:d09a::/48 maxlen: 48
                          2001:49f0:d0d0::/48 maxlen: 48
                          2001:49f0:d0e5::/48 maxlen: 48
                          2001:49f0:d0f8::/48 maxlen: 48
                          2001:49f0:d126::/48 maxlen: 48
                          2001:49f0:d127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:58:fb:df:fa:72:5a:4b:60:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=1379bf39-2783-4923-9eaa-11f802201f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:91:ab:3e:bb:e3:c9:ff:56:e2:22:5d:5e:
                    ec:50:7f:f4:37:5a:fc:c3:f0:8e:79:d5:b3:53:23:
                    0d:40:fc:d7:6c:40:1f:58:11:d5:85:50:01:c2:0e:
                    9c:85:e5:25:b7:f9:bc:e5:83:a2:d2:9a:55:cc:74:
                    2b:cb:50:5c:c8:81:39:39:7c:9d:38:6c:af:ce:df:
                    27:82:f0:6c:97:06:b0:ca:bd:fb:31:8f:77:4c:97:
                    2f:3a:01:28:5e:6c:f7:cd:99:13:b7:b8:56:13:15:
                    73:76:40:43:f2:aa:b6:a5:f1:69:0f:6f:23:c1:ee:
                    58:72:b2:d1:c9:70:35:14:8e:24:b4:ac:8d:5d:d8:
                    87:89:7f:57:5d:ab:1b:c8:e0:c6:e9:d7:65:ce:a9:
                    a2:b4:b9:55:4c:46:40:11:a0:7d:b6:5e:db:b1:3d:
                    cc:c2:e2:f6:bb:99:05:6a:6c:a9:2b:a1:ba:78:81:
                    47:05:7b:ea:3c:c3:f2:36:d4:9e:1b:5e:f2:c7:5e:
                    00:d4:98:7b:ef:07:1e:a9:67:31:be:51:40:5a:30:
                    6f:61:ec:4e:1f:63:d7:72:fb:05:e5:14:6c:c1:74:
                    12:05:b0:65:61:30:36:47:68:a6:a2:9c:62:37:c8:
                    a5:43:92:6b:90:07:50:3e:37:d8:ee:96:63:a8:f9:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:49:BD:CC:A1:87:0C:41:A3:C9:7A:10:45:19:97:27:75:29:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75b1cf46-cf83-39bb-aaa6-d1d52fe77814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.140.0/23
                IPv6:
                  2001:49f0:d004::/48
                  2001:49f0:d010::/48
                  2001:49f0:d026::/48
                  2001:49f0:d047::/48
                  2001:49f0:d09a::/48
                  2001:49f0:d0d0::/48
                  2001:49f0:d0e5::/48
                  2001:49f0:d0f8::/48
                  2001:49f0:d126::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:52:c4:89:36:26:c7:7c:3d:34:05:3b:8a:04:62:fb:16:
         26:c4:8f:45:7c:5f:95:5f:ab:73:6b:96:71:f9:ec:45:5b:e4:
         54:7c:e6:4e:81:6e:1d:ac:54:e5:5d:2c:d4:20:0d:56:7c:79:
         d1:17:67:3b:59:24:37:eb:8b:44:b5:a0:c5:ab:1a:8f:57:b9:
         15:87:3f:eb:25:4f:ae:ef:01:d7:c8:a3:0c:f6:54:6d:01:d4:
         b0:2c:d9:fe:96:d0:6b:0d:62:8e:f0:4a:5b:9a:b2:9d:92:ac:
         1d:2f:d6:23:82:e0:8e:20:98:5f:39:86:98:00:31:42:08:52:
         d3:d2:4a:86:47:6a:02:06:ad:45:37:63:c4:86:e7:b6:14:92:
         dc:9f:16:d0:bd:d1:66:a4:d9:57:12:01:09:3d:19:50:86:25:
         37:e8:2b:49:38:c5:3a:83:63:6e:1c:90:a7:12:35:31:eb:55:
         ab:77:33:20:bb:13:ed:92:c6:1d:b3:25:48:a0:9e:83:0c:30:
         01:73:54:e2:e1:f5:94:af:08:a6:14:06:87:47:16:e4:2e:b2:
         13:19:d4:1e:bb:ad:22:b9:1d:f7:5e:9e:67:59:7f:59:ea:44:
         2f:c4:39:66:ca:1b:7c:3f:47:f8:8c:15:69:3e:f2:b4:1d:e0:
         48:68:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:56:58 2026 by rpki-client