Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa
File:                     9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa (raw, json)
Hash identifier:          4TEWFV+OP2p4eI15v4C2TDlk1qyNDwZ6mg4eYAAW+ek=
Subject key identifier:   4A:78:66:4C:24:52:B4:4C:4B:D4:13:EB:8A:91:D2:5E:96:E6:F1:72
Certificate issuer:       /CN=dcccaaf2-6f73-4480-9c37-cb464a4369b1
Certificate serial:       010D0C9F4328584F49737AC46CEBA2F09315C100
Authority key identifier: 0A:6D:BB:48:A3:ED:05:1B:2A:6D:55:CB:76:10:0D:57:50:CF:75:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396984
IP address blocks:        216.120.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7a:c4:6c:eb:a2:f0:93:15:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcccaaf2-6f73-4480-9c37-cb464a4369b1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d0ff238e-c609-474d-8ac5-66f9e1eed079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:a6:49:77:ee:43:e6:da:65:1d:0f:41:20:
                    99:20:13:e9:6e:38:14:1c:f3:80:ec:2f:32:b6:33:
                    7f:eb:6c:09:34:6d:9d:34:cb:f1:f6:51:6c:c6:f8:
                    d9:27:98:e5:7a:a1:cf:54:ef:25:ad:bf:b0:8a:59:
                    f6:08:f9:8b:a5:89:f7:ef:e7:bf:a2:c5:85:6b:2c:
                    79:3e:db:f7:e3:d6:b6:09:bc:19:83:88:30:9f:26:
                    5e:05:f0:d1:77:0d:1f:1d:2b:b3:fd:88:9e:eb:48:
                    0b:d9:53:c9:24:e6:8a:23:61:20:8f:ec:c3:a2:f9:
                    2e:4f:eb:5e:7d:b9:ab:9d:70:d2:ad:51:68:0b:6a:
                    c3:80:89:d1:2a:d4:55:61:d9:1f:95:ae:1a:88:20:
                    d9:66:96:74:cc:f8:6e:d1:9b:df:3b:c5:e6:f8:53:
                    f0:b3:24:da:50:f3:a4:8b:01:54:af:65:90:f0:aa:
                    7c:4b:51:e6:f4:b7:31:a0:7a:c5:42:f6:2c:cd:b5:
                    a0:f2:02:67:19:e8:0a:f8:71:89:65:9c:b1:01:cd:
                    89:44:ad:3f:e2:fc:ce:39:59:40:a8:ed:95:a5:aa:
                    d9:72:83:3d:e4:bd:b5:0d:08:e6:d0:7a:f7:b3:7a:
                    ec:ab:df:46:fc:12:8d:59:be:f8:bb:68:cc:29:28:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:66:4C:24:52:B4:4C:4B:D4:13:EB:8A:91:D2:5E:96:E6:F1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/9d11d288-98e6-3e33-982f-0fbedd1e45d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1/dcccaaf2-6f73-4480-9c37-cb464a4369b1.crl

            X509v3 Authority Key Identifier:
                keyid:0A:6D:BB:48:A3:ED:05:1B:2A:6D:55:CB:76:10:0D:57:50:CF:75:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dcccaaf2-6f73-4480-9c37-cb464a4369b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:24:15:e3:0c:60:50:44:a5:fc:f2:01:9b:47:bd:b0:28:
         d4:9b:31:ea:0f:99:7f:79:bc:32:16:e6:64:98:0b:38:29:b8:
         32:00:61:bc:0b:b5:8c:4b:a0:d8:3f:9f:9b:63:76:00:fc:5f:
         25:67:c2:32:3d:84:59:da:39:b2:de:96:fe:f5:5f:bd:8e:ae:
         1f:a7:3c:1d:fe:2f:c9:b8:e6:31:a7:d7:e4:42:59:eb:c1:0c:
         d3:e4:d1:e1:84:8d:6a:06:1a:4e:47:00:13:44:03:c4:95:b2:
         b7:0f:e6:ab:17:ad:59:2a:b4:c4:98:6f:6a:c7:ec:8e:a5:5c:
         5e:db:b0:d3:7f:9a:ec:f0:22:cf:18:c4:ba:d0:04:c7:9a:51:
         48:4c:62:ef:35:98:0c:00:51:90:12:d9:71:6f:ff:f9:75:52:
         98:9c:a9:ec:b6:f8:f0:9c:0e:b8:72:45:c5:5e:51:e4:35:7e:
         ae:9d:ee:f3:fe:5c:33:4a:6b:43:f6:8b:6b:b9:d1:ce:7b:c1:
         d5:c3:ea:f9:9c:e3:5d:d4:25:a1:85:1e:66:a8:2a:60:bd:e6:
         a3:73:be:a2:2b:c2:5a:45:88:2f:fa:ea:d5:d2:01:f1:0f:e5:
         f4:84:42:16:89:81:ea:32:80:ee:c8:64:be:79:5f:fc:3e:b6:
         d4:2b:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:07 2026 by rpki-client