Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa
File:                     939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa (raw, json)
Hash identifier:          KcmeZ5kQQfja44WBqzmATYVZDfsCpryuYXQuhV7Y6OA=
Subject key identifier:   5D:F9:EF:E0:0F:AE:1E:82:D0:7B:B1:B8:56:B1:E0:EE:6E:86:87:57
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584F7A50252424FB7CC4B987E380
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     14114
IP address blocks:        169.145.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:25:24:24:fb:7c:c4:b9:87:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=90f048c8-702e-4ff4-a9b0-96eebffd0563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:74:a1:02:5f:2e:1c:44:f2:6f:a0:63:18:2c:
                    ae:28:4a:97:7b:c1:69:cb:c5:99:fa:43:fe:34:73:
                    4f:1c:77:89:8d:2d:a1:d2:b8:db:7b:99:0d:30:a2:
                    be:6f:64:e4:b2:77:03:63:73:23:cc:8f:2a:53:c0:
                    5e:53:1b:4e:79:fb:d9:1a:b0:d3:f2:50:35:47:87:
                    af:01:f1:74:50:50:ef:56:69:e1:7c:aa:8f:89:a4:
                    8f:75:d4:1d:b0:48:e6:fb:4a:5f:26:20:45:8d:87:
                    e7:47:d2:d3:42:b5:8a:09:9d:85:3d:8c:69:b7:22:
                    b1:b6:65:ba:46:b6:8e:09:e5:e0:79:69:25:1d:aa:
                    e5:9d:0e:e8:25:46:17:28:aa:38:56:37:6d:b7:76:
                    86:b0:97:04:4b:31:49:e1:64:54:67:e1:b7:9f:df:
                    df:54:78:58:bd:86:e3:12:77:3e:5e:4f:ba:2e:ca:
                    ab:4e:37:f3:26:bd:18:6e:d7:42:ab:9e:91:99:0e:
                    5f:13:12:42:ea:f8:bf:54:3c:b9:ed:15:5a:f0:ff:
                    a7:8d:ce:5f:65:81:41:e8:a2:03:e1:ff:70:bb:49:
                    b7:78:f4:0e:bf:f1:3c:a4:cc:d9:be:4b:e1:99:cb:
                    21:c5:cc:98:99:15:55:22:06:ce:d9:12:4f:6a:da:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F9:EF:E0:0F:AE:1E:82:D0:7B:B1:B8:56:B1:E0:EE:6E:86:87:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/939ee8ff-a406-358e-bee9-c0b0f7d6c65d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:75:33:17:fc:3a:39:85:d1:79:92:4a:63:cf:07:4f:33:
         b2:5c:b6:7e:e9:6c:83:4d:83:07:b8:42:57:08:b5:e6:11:0d:
         5c:8b:9b:55:24:05:4a:11:12:6e:22:ec:8a:54:de:7b:81:ac:
         3d:d0:0e:70:01:00:8f:36:97:82:73:51:e3:4f:a1:ff:aa:80:
         48:d4:55:82:86:b3:ad:36:15:fc:15:44:81:d8:d4:ab:56:0d:
         f7:9d:d4:5d:38:fe:25:7d:4a:7a:6f:36:49:bb:89:16:d6:e1:
         46:a6:4a:c1:5a:94:92:bc:bc:29:6e:0f:38:c5:c8:8e:9d:b8:
         69:0b:18:2a:96:ad:70:be:2a:4b:b9:48:61:c9:16:97:38:16:
         d0:1e:f9:d4:2e:28:18:0c:c8:47:84:de:d1:6c:53:0b:ec:4d:
         cd:d2:ed:79:20:da:d3:dc:cb:f0:7a:dd:79:b2:aa:c2:9f:a9:
         2b:39:5b:f4:ed:92:56:3e:a5:a2:31:5f:3d:38:99:e9:ee:4c:
         17:3f:49:d6:79:8d:48:36:d1:62:47:a9:09:af:2b:b9:08:70:
         03:4d:14:f6:65:8d:2e:8f:90:81:17:36:2d:25:8b:21:0e:0c:
         14:6d:67:8a:c7:ed:b2:29:7c:87:64:ed:7c:b9:b5:68:7f:07:
         c2:22:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:13 2026 by rpki-client