Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/81509404-7b99-3eab-abcc-cbaaf5ae2db5.roa
File:                     81509404-7b99-3eab-abcc-cbaaf5ae2db5.roa (raw, json)
Hash identifier:          SYk3FEFzKWiF9lkOK6HjabQU1hTE3RcCEvJGXle1Ka0=
Subject key identifier:   61:5A:27:32:4B:D7:67:9B:1F:1C:E9:60:A6:A8:01:89:4E:01:1B:BD
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584F7BB2F87E2C519786E61F3AC0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/81509404-7b99-3eab-abcc-cbaaf5ae2db5.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     12129
IP address blocks:        207.91.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f8:7e:2c:51:97:86:e6:1f:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=e13bd6ac-6611-4ae4-bb10-51cb7e05f565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:e6:61:5f:6d:21:10:dd:5b:29:75:07:5e:
                    aa:26:c8:d4:90:0e:2f:96:0d:50:30:26:46:37:fa:
                    55:c6:ad:c3:34:2c:80:bc:c5:6e:dc:99:97:17:a7:
                    fc:3f:d8:4a:06:9d:e8:fc:c2:27:ee:a7:b3:40:ba:
                    44:c1:28:5f:d1:66:e3:d5:10:a0:88:1a:f8:2e:a3:
                    e6:fb:a4:20:c5:48:36:78:5a:72:14:d8:24:d9:14:
                    9a:83:55:92:da:72:b7:10:9f:02:09:c5:e8:d4:3e:
                    0d:cb:f0:83:30:05:57:9b:1d:c1:47:75:23:c6:22:
                    46:dd:54:da:f0:95:8f:51:04:fb:9b:f1:37:90:a1:
                    e3:be:20:7f:73:29:b9:c9:e5:b2:6b:bf:01:78:f8:
                    6f:ec:05:63:69:ff:6e:48:ca:55:24:10:2e:99:ac:
                    ed:a1:50:f1:f0:fe:6d:77:b6:d7:02:09:55:fe:af:
                    3b:29:0c:8e:f6:1c:c2:7d:37:bc:2e:f3:a3:45:01:
                    8a:90:e2:0f:99:46:1f:30:6f:5c:49:0e:44:73:55:
                    b2:da:af:2a:13:81:df:a7:4d:e3:cf:c1:ab:19:7b:
                    0b:59:5a:56:74:27:fd:ce:c8:32:3c:f1:e4:b0:bf:
                    e5:3c:3c:e9:ff:35:ef:41:75:68:64:9c:9a:9b:90:
                    5a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:27:32:4B:D7:67:9B:1F:1C:E9:60:A6:A8:01:89:4E:01:1B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/81509404-7b99-3eab-abcc-cbaaf5ae2db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.91.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:e7:a0:23:fe:4d:91:01:a8:a0:6f:7c:cb:df:fb:66:f6:
         e6:28:cb:f6:fe:7f:96:dd:1a:4d:e2:d2:0a:eb:2e:04:80:18:
         48:cd:04:0e:60:e8:ab:ee:49:fe:18:10:6d:77:95:ef:f1:f7:
         a4:b7:3b:0b:00:83:19:08:42:45:20:55:11:d2:f6:53:bf:de:
         9f:d6:1e:c6:4c:4f:2c:09:2f:bc:db:b9:50:9f:11:6d:43:29:
         ba:3b:91:a7:6c:93:0e:8b:b5:17:da:2e:17:2b:8c:6a:55:ff:
         37:43:72:73:55:a1:79:ab:dd:e0:8c:60:69:b6:97:e2:a7:99:
         24:1e:68:59:bf:cb:6a:a4:4b:fb:eb:f8:fd:cf:f2:e2:6c:32:
         6b:ef:89:cd:5c:f9:29:7c:0c:67:50:f7:88:07:c9:94:9c:04:
         ca:58:64:8a:62:54:98:d1:5b:b7:01:aa:7b:d9:37:05:e8:42:
         0b:17:e7:5e:0b:d1:84:32:f5:55:27:ba:1b:6b:6f:ea:47:2a:
         ad:3d:af:54:97:8b:bd:7a:39:d2:1c:63:5f:6b:9a:50:bf:d1:
         2b:8f:c6:6a:8c:a1:1d:fc:46:6c:62:0d:b8:d1:7f:e6:ff:44:
         6c:2d:a0:d3:b1:88:68:7d:5b:a8:66:bd:aa:5a:fa:b6:92:64:
         03:12:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:42:35 2026 by rpki-client