Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9afe6e40-b8cd-3dea-9b92-357621d2c0ce.roa
File:                     9afe6e40-b8cd-3dea-9b92-357621d2c0ce.roa (raw, json)
Hash identifier:          rvSgrC0v8OvRHE8TuH2ARzKrhBjZFptolAccLFAHB40=
Subject key identifier:   F9:85:6D:78:7E:2B:56:42:E8:EC:A1:BB:13:C7:8A:9E:4C:B6:EC:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A80AFEA9E3FED6949A4C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9afe6e40-b8cd-3dea-9b92-357621d2c0ce.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        71.199.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:0a:fe:a9:e3:fe:d6:94:9a:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=a9ce3b94-fea3-44be-b73b-9b0652d3e19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:00:4e:23:41:70:5f:c8:25:09:c9:e3:8a:
                    09:e9:c1:cf:c9:cc:fb:28:0d:84:29:c2:22:7e:79:
                    7d:72:69:e7:04:5f:ba:b9:43:1f:5f:8d:30:66:4d:
                    9f:9a:cc:19:ae:bb:d4:5c:18:a5:e3:8c:c7:6c:eb:
                    6b:19:45:44:96:48:6b:17:71:43:47:f9:63:5b:d1:
                    2b:db:9f:41:5c:2b:3e:43:7d:7c:9a:85:de:6d:80:
                    82:4e:a4:92:21:7c:7d:95:8c:1c:ff:84:b6:47:dc:
                    e3:af:b6:f0:f1:e3:cb:a5:01:46:58:c4:ea:c2:fd:
                    28:a7:fb:ac:f1:e5:0c:e5:a6:3e:94:73:7b:e2:23:
                    7a:08:d2:a7:45:12:6a:d4:28:87:b7:98:db:5f:ad:
                    6a:4b:cd:f8:42:60:2c:cd:75:41:79:c4:1a:23:5e:
                    61:28:d9:14:3b:9b:fd:bf:9c:42:47:d4:3a:de:09:
                    0e:1c:42:b6:db:cf:12:42:0e:c4:df:8a:1f:9f:11:
                    e7:4c:84:95:a7:3e:de:32:8f:69:1b:e3:f6:6b:66:
                    29:a6:d1:d7:3b:30:3e:5e:8f:e0:f6:23:e6:3f:37:
                    f8:b8:07:ec:ff:d8:c6:b0:da:ef:12:65:e8:37:0b:
                    14:8c:b6:2f:f1:af:9f:2c:9d:17:5c:e8:e9:ae:68:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:85:6D:78:7E:2B:56:42:E8:EC:A1:BB:13:C7:8A:9E:4C:B6:EC:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9afe6e40-b8cd-3dea-9b92-357621d2c0ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.199.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f4:38:66:d7:fb:ac:58:87:0e:b6:53:d9:ea:85:16:cc:cc:
         40:eb:b1:f1:75:a2:45:a3:72:1d:3a:3f:0e:56:59:b4:b6:71:
         82:52:79:88:eb:5a:b2:31:1c:f4:08:48:6c:a2:ab:cd:6a:24:
         29:c2:fc:02:e3:fe:45:84:51:28:ed:92:b8:76:19:80:fb:27:
         ce:bb:9d:fd:5d:78:1d:49:bd:11:56:78:1b:eb:ce:f7:8a:6b:
         52:1f:53:c0:ef:9c:21:1c:c5:63:8e:6c:c7:6e:cd:3b:a6:4d:
         6a:6c:c8:54:d7:bd:1f:17:41:8e:c1:47:68:a4:d9:90:d6:19:
         a1:d9:1a:b8:2e:f8:a0:8e:5c:40:56:a0:56:f5:0d:dc:27:50:
         48:10:4b:29:33:77:84:32:b2:78:72:1d:ea:49:ad:9a:aa:a4:
         0e:10:d4:53:c6:48:fb:fe:37:93:9a:fb:11:86:db:1b:6b:2b:
         ec:f6:d2:bb:d5:4d:24:8d:83:c6:6a:c0:50:2b:ec:c8:90:b6:
         0a:1b:78:45:04:0a:00:28:ab:3c:eb:d5:8d:7b:ec:9a:61:e9:
         91:a8:97:f4:1c:78:7b:28:c1:8e:c0:38:dd:eb:67:69:f0:e4:
         59:37:88:2c:a3:1a:12:90:37:38:bd:30:7b:c7:f8:98:48:61:
         fa:a3:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:43:36 2026 by rpki-client