Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa
File:                     8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa (raw, json)
Hash identifier:          9AP0PQqnryY9jtX5s0VJhf88fkZiz/iuCbulKOjWM8I=
Subject key identifier:   50:0B:E1:E4:E7:19:68:B2:36:65:ED:08:36:54:2D:5C:0B:6D:E6:FE
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584F71ED888424E81F431ABC2300
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        205.220.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:88:84:24:e8:1f:43:1a:bc:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=d2304272-2a88-4f8b-b9fb-b95558acafb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:45:fc:83:58:ec:ce:96:e1:4d:49:0b:0e:3f:
                    ba:79:16:68:58:f3:55:ec:2f:a5:f1:dc:5e:83:ac:
                    6d:98:1c:ee:19:fe:4b:c2:b2:0e:2b:5e:1e:4f:5d:
                    c7:7a:8b:d3:dd:66:47:48:84:7d:16:48:78:9d:78:
                    c0:31:7c:ee:9e:76:3c:b9:b6:c6:0e:9a:05:fc:86:
                    88:14:5e:66:f7:46:49:fc:d5:f1:37:16:9d:69:40:
                    eb:84:25:e2:25:f0:f2:df:b5:46:f7:41:84:e0:34:
                    6a:f7:cb:0e:f3:8b:fa:24:b0:2b:58:f3:72:31:39:
                    47:2d:6d:b2:bd:8a:37:d0:aa:99:a5:a8:18:35:67:
                    9c:c0:cf:0b:19:6b:7d:cc:0c:f7:18:96:77:a7:30:
                    14:c9:6c:bd:fa:48:0a:92:67:b5:c9:33:6e:e6:17:
                    e8:1d:83:f4:c0:ea:5f:49:cb:c7:6b:5e:a1:a3:e9:
                    8a:3d:99:97:c2:56:37:05:35:5e:1e:07:76:cb:99:
                    a7:f5:88:69:cf:67:bf:da:78:5c:de:4b:50:77:c5:
                    46:3c:f6:02:66:f9:89:37:b9:40:0b:b6:f4:e2:ca:
                    43:35:8e:45:7f:1c:ca:4f:c9:01:39:8d:29:d9:f2:
                    94:50:90:a2:54:4f:d1:a3:25:25:56:85:15:b3:f3:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0B:E1:E4:E7:19:68:B2:36:65:ED:08:36:54:2D:5C:0B:6D:E6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ea:2a:a9:78:8d:eb:80:1e:8a:c4:b4:ce:0c:3b:e4:ab:d7:
         f2:26:17:1f:bc:c6:1e:74:c8:90:24:32:9b:33:a6:86:cb:35:
         4c:f1:58:bf:a6:e5:84:65:47:aa:25:33:b4:55:e7:7d:c8:ce:
         5f:ac:aa:54:65:5b:d7:f0:28:e2:b9:67:70:77:56:33:2a:9a:
         36:9c:1e:64:04:4d:73:dd:ac:73:e2:15:88:01:7c:07:f5:23:
         46:5b:df:9f:35:1e:c9:6e:dd:0c:d6:5e:e2:52:ca:c0:c9:85:
         33:b7:ed:dd:d0:36:dc:f3:66:53:b0:81:14:e3:0d:77:4f:46:
         f1:45:69:a1:8f:7f:9a:16:df:f5:e1:80:7e:14:61:33:dc:3c:
         5a:13:48:c6:19:a2:eb:9d:26:7c:75:70:58:ac:8a:fd:e7:e1:
         e6:39:54:51:91:37:11:ab:6e:bb:fa:0c:76:58:ef:d0:5d:12:
         82:f2:7d:01:9a:98:4a:f1:8e:ac:9f:6e:54:a2:fd:9d:de:9c:
         40:70:d5:21:2b:f9:f4:14:47:bc:ae:7b:af:c0:cd:ae:32:34:
         5d:b5:cd:b7:85:de:a9:7c:e5:aa:a2:14:36:4c:8b:ca:6c:f7:
         49:04:d0:f3:ea:cf:7d:b8:88:3b:ac:f4:c9:57:8d:8b:de:2c:
         02:db:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:29:12 2026 by rpki-client