Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/9c45aaa4-fd9d-32f5-8571-9e46077ecebd.roa
File:                     9c45aaa4-fd9d-32f5-8571-9e46077ecebd.roa (raw, json)
Hash identifier:          Oo9Yk95FgQYB3kQeYhWnfFBig7iHQggeivtxcSD0jKM=
Subject key identifier:   27:E7:B5:C8:F7:DE:B9:49:34:30:E1:DB:DD:BF:4F:CC:78:E6:4F:E3
Certificate issuer:       /CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
Certificate serial:       010D0C9F4328584F3FAD2FBEEC92409A78739900
Authority key identifier: C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/9c45aaa4-fd9d-32f5-8571-9e46077ecebd.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     54053
IP address blocks:        198.151.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:2f:be:ec:92:40:9a:78:73:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dc8163-abd2-4d81-9ad2-1adb867f4b33
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=671bfa99-fed1-47d6-8cf8-14a547cfaed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:7c:12:7c:04:29:70:6b:71:cb:b5:2b:b7:
                    6d:6c:a1:27:d0:db:c4:b8:84:ab:24:91:48:34:a3:
                    6a:ec:e0:3c:06:4c:d5:db:6a:09:4e:07:42:e8:80:
                    74:16:7e:14:19:a8:a7:3e:49:7e:c1:2f:72:79:c4:
                    8b:c8:ee:a6:25:16:c5:e6:65:b3:b9:18:dc:b3:be:
                    0c:77:95:f3:5c:6b:99:10:39:1b:c0:99:68:4e:ff:
                    12:79:f4:51:84:99:fc:ab:f1:61:48:8e:39:20:47:
                    4c:25:ef:d1:2e:e1:8a:c0:ac:cc:d1:63:c4:ac:d8:
                    39:b0:54:3b:0f:06:eb:12:c3:4e:70:db:c0:ce:4b:
                    70:82:7c:30:18:c3:d2:8e:67:78:bb:3b:d5:ce:eb:
                    4d:01:da:66:5b:ea:7d:87:a7:5d:58:60:09:5b:ee:
                    bf:60:dd:94:7a:fb:de:70:ea:c9:85:b8:c5:fd:61:
                    40:4f:c0:98:09:2e:2a:89:01:07:2f:4d:65:25:93:
                    68:58:9c:e9:d8:1b:4e:f1:8a:92:95:9a:84:29:6c:
                    6e:f1:82:19:35:12:e0:26:4b:b1:21:ed:0e:09:90:
                    2c:b5:2c:e1:f9:3d:53:a7:b6:4e:56:d9:87:e0:6b:
                    c9:ca:5a:f0:e2:99:87:f0:7c:59:95:5d:b1:13:22:
                    61:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:B5:C8:F7:DE:B9:49:34:30:E1:DB:DD:BF:4F:CC:78:E6:4F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/9c45aaa4-fd9d-32f5-8571-9e46077ecebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33/63dc8163-abd2-4d81-9ad2-1adb867f4b33.crl

            X509v3 Authority Key Identifier:
                keyid:C5:CC:7F:57:B0:B1:95:65:22:A9:18:2A:E1:F2:67:7C:11:24:41:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/63dc8163-abd2-4d81-9ad2-1adb867f4b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:12:dc:12:48:aa:6f:bf:37:89:a3:8a:07:75:aa:09:51:
         99:4d:4e:c8:80:d3:bb:6d:f8:26:27:7c:bb:05:60:ae:29:d6:
         14:dc:8e:19:99:48:75:4b:90:3a:fe:62:11:43:fe:b8:07:72:
         9b:16:12:14:49:b3:af:43:a3:84:18:9a:fe:22:27:f8:27:81:
         14:b3:2c:86:d2:a9:a4:15:6f:75:ac:86:11:91:4e:4e:c1:99:
         6e:58:3e:2c:0d:77:bb:81:f0:d7:b0:4c:d2:1f:32:88:28:ce:
         a6:db:5e:53:e2:1e:73:e0:81:98:74:de:5f:5d:1b:17:ab:3d:
         38:69:2c:05:ec:54:4c:08:69:98:8e:bc:b0:08:f9:4e:46:92:
         60:c8:6e:38:56:ad:75:6b:6f:82:66:e8:5a:37:8e:66:43:0c:
         66:a4:0e:af:05:ac:37:f0:a4:7e:05:b3:9d:c6:90:97:7e:58:
         5c:5d:9e:cd:2f:dc:89:cb:34:69:fd:99:b4:13:f5:4d:5a:89:
         05:30:b3:a8:cb:ce:26:1e:b9:ee:17:0a:e9:99:88:a4:a9:9f:
         07:f7:07:81:0d:e6:26:84:86:f8:c8:6a:68:23:49:a9:da:1c:
         d8:e5:61:54:0e:ec:a6:f4:78:13:52:39:dd:c2:f0:e0:2b:b8:
         f8:cc:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:52:04 2026 by rpki-client