Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8223732-91f4-3c6e-b6a0-4766b37a68d0.roa
File:                     c8223732-91f4-3c6e-b6a0-4766b37a68d0.roa (raw, json)
Hash identifier:          Mn7tE2lDpPP7XcW40w+ygZ58a9zjFvtsVDAyLw03SeQ=
Subject key identifier:   EC:10:CB:8E:93:DE:D1:83:12:AF:B6:28:69:CD:AC:E0:2F:F7:AB:1B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F4277F8DDBC8374A15CFA7560
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8223732-91f4-3c6e-b6a0-4766b37a68d0.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     53813
IP address blocks:        209.55.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:f8:dd:bc:83:74:a1:5c:fa:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ad9cb385-8c27-47e4-aa69-18bb32572fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:82:be:62:b0:de:73:bb:71:11:3a:41:44:
                    5a:0d:f3:aa:9f:c3:a7:c8:e4:89:4d:c4:ab:73:30:
                    0d:a0:ad:7a:d4:7b:0d:2a:6c:4e:13:0b:eb:d4:ec:
                    6a:7d:8c:ca:eb:f8:17:1b:69:d6:16:00:96:6a:f5:
                    38:b9:b7:2b:91:38:c3:23:25:9e:8b:aa:95:22:81:
                    96:fb:db:3e:7e:41:f9:d4:8a:d8:d4:17:0e:83:95:
                    6b:be:67:00:e5:09:ef:63:8f:6b:a6:18:c9:c6:b2:
                    1f:f4:41:45:49:53:1f:ab:6e:cb:1e:29:ea:7b:c5:
                    1d:9d:f5:6d:dc:39:d6:15:6a:86:81:5d:f1:a2:1d:
                    23:fa:23:04:bb:34:13:1e:b5:07:16:ce:9f:79:2f:
                    27:7f:e3:09:27:95:0a:53:df:82:42:1b:fb:1f:56:
                    e9:17:8a:1b:3d:51:38:e7:71:37:ee:23:f3:32:04:
                    b2:1b:72:71:e3:43:a8:a7:89:29:1e:04:e1:e1:00:
                    31:ea:bc:32:47:c1:88:2a:f6:61:60:34:6a:11:b7:
                    e1:41:51:9b:fa:cd:6b:e1:f2:22:6f:95:00:43:d0:
                    ea:5a:0b:3e:cf:11:e6:75:1d:87:7e:0d:cc:7a:2c:
                    9f:bf:d3:bf:60:47:cb:2e:85:0e:51:68:d8:23:af:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:10:CB:8E:93:DE:D1:83:12:AF:B6:28:69:CD:AC:E0:2F:F7:AB:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c8223732-91f4-3c6e-b6a0-4766b37a68d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:53:37:c9:98:7e:03:34:ab:09:6d:b7:62:26:35:41:30:
         cd:e2:84:0f:c6:20:18:0c:a7:9f:4a:56:92:2c:05:0e:c2:f7:
         16:ca:ee:01:93:81:ad:c0:ce:ee:ae:40:cf:2b:74:46:0f:59:
         b7:3d:af:58:fb:a1:1a:a8:54:1f:1c:52:56:9c:b5:3c:30:ba:
         a5:69:55:c4:8a:c7:5b:58:88:26:c6:6b:bf:b9:86:07:58:b8:
         d2:3f:ce:f1:5b:6b:03:f9:40:f7:af:43:bd:a3:79:b0:d1:d4:
         a8:f2:2d:b3:fc:7d:41:f8:00:b5:95:c5:3b:a7:ff:34:a1:e2:
         cb:cc:ec:33:ec:d2:ff:e2:2d:07:bc:af:de:38:50:d9:08:fa:
         42:8a:46:b1:06:27:4f:ad:22:6c:44:86:35:a1:3a:00:3e:08:
         9d:64:af:6a:62:a7:ba:d5:12:bb:68:fe:11:fc:4e:37:59:ea:
         c1:9a:c4:c0:9f:30:e4:58:e9:6a:4f:b6:f3:0a:26:2a:de:75:
         5a:8a:d7:7a:a4:3d:17:85:9e:28:b6:b8:c4:24:2e:0f:4a:c2:
         51:7e:b0:81:e7:a3:f6:dc:2d:01:8c:fd:3a:58:af:25:42:53:
         49:8e:08:d4:4d:8a:0c:33:3d:74:05:70:21:19:4a:2f:29:5f:
         70:79:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:25:01 2026 by rpki-client