Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/9ae705bb-52dc-3e61-928a-3a167af88115.roa
File:                     9ae705bb-52dc-3e61-928a-3a167af88115.roa (raw, json)
Hash identifier:          ulwCMlf+0STmUnUrhzXVA4SCksbW305uS/gNgxGUrTk=
Subject key identifier:   1F:4E:E6:F6:F6:FE:06:6F:59:D3:52:B9:03:04:C8:4F:08:BE:E8:59
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584F3E47E3DF473228E5355DEC00
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/9ae705bb-52dc-3e61-928a-3a167af88115.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     40788
IP address blocks:        184.171.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e3:df:47:32:28:e5:35:5d:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=d60b59f5-e01b-42ad-8f45-7e560290562d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:c7:b4:98:42:aa:6e:28:e1:90:de:12:f4:
                    ca:ef:1a:19:1b:a0:4d:73:1c:e0:03:c5:93:b9:23:
                    e7:c6:15:87:c7:68:a9:ab:e4:e1:51:8f:62:c2:fe:
                    eb:da:bc:9d:c9:48:24:28:dd:2c:42:d3:b2:9e:da:
                    0d:08:71:ec:a2:fe:5e:a8:34:2d:63:f4:16:7b:33:
                    59:15:ac:99:2a:5e:da:f8:8b:4b:6d:76:0b:7b:09:
                    7f:d7:64:32:0a:37:fe:e1:d0:3c:ab:0b:f1:45:54:
                    a1:80:f7:12:30:a3:0f:72:9c:05:92:cb:16:52:e7:
                    c4:09:c9:b8:54:b5:4f:cc:3f:38:2b:cf:ae:8b:e6:
                    b0:2d:9f:92:9c:37:48:98:67:a8:aa:d0:f5:77:da:
                    6f:95:f3:78:3d:53:ff:fc:6e:20:09:1f:18:5b:85:
                    52:c5:41:39:41:2a:ee:a8:ef:cd:ee:40:4d:56:ef:
                    0f:41:7d:38:09:17:c7:5e:4c:04:18:03:c5:f8:bc:
                    ff:66:aa:ab:35:58:02:ce:be:eb:46:db:10:a2:2e:
                    49:8f:18:64:4e:b6:2c:33:79:6e:15:68:c5:83:a8:
                    cd:b2:f6:e9:65:fd:ed:39:ed:43:2c:d5:30:20:cc:
                    7c:7d:14:e3:70:80:a4:00:38:83:6a:66:4f:8e:74:
                    a7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:E6:F6:F6:FE:06:6F:59:D3:52:B9:03:04:C8:4F:08:BE:E8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/9ae705bb-52dc-3e61-928a-3a167af88115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.171.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:8e:dc:ee:ea:c4:bd:86:73:8a:95:37:57:6d:29:75:4e:
         93:46:aa:e1:8e:5f:9f:0b:55:78:15:13:d9:b3:74:5c:4e:1d:
         c6:ae:37:26:78:35:6b:a9:73:4d:91:55:46:e6:88:bf:7b:2b:
         54:7c:0e:fc:0b:29:1b:fe:a8:78:38:83:a2:14:98:72:f2:ab:
         71:e3:99:00:9a:32:ff:9f:fa:5b:47:b0:ba:c7:c4:4c:23:6b:
         c2:ac:38:67:05:ee:41:8e:0a:ca:13:5c:a1:e2:78:ca:51:74:
         7e:0b:0d:21:3c:ca:b7:ea:51:38:ca:9c:d7:e9:b3:c4:67:01:
         59:c6:77:c7:02:76:e0:9a:da:57:70:8a:fa:c0:71:69:a1:3d:
         09:44:cf:31:71:3b:61:97:24:df:5e:c8:95:10:e5:ea:84:4c:
         f7:53:ca:ba:c6:f4:f9:c3:6c:3f:85:1d:d9:55:a8:24:34:26:
         9c:f4:cd:2f:93:0f:dc:57:13:ac:40:ca:47:5d:de:4e:ca:95:
         11:91:2f:33:95:ca:eb:e4:48:b1:ed:c2:b3:cb:21:d6:eb:96:
         ca:8c:4a:f2:34:fa:69:70:26:0c:9c:f9:ab:dc:64:35:9c:16:
         45:7c:bc:7f:24:2c:f1:05:ec:9d:18:6b:2a:fd:4a:90:a3:8b:
         2e:27:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:33:53 2026 by rpki-client