Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/6df03dd5-101a-316d-a25d-729df96ea718.roa
File:                     6df03dd5-101a-316d-a25d-729df96ea718.roa (raw, json)
Hash identifier:          XKMIdrXBYU6gyWQTWRLr3fYqTlInEVBUkGh3Glrh4mw=
Subject key identifier:   33:32:B4:6D:8A:D8:8E:DB:3C:0D:B6:C9:09:55:DB:79:21:47:EE:12
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584F43DD55F303C8F3ECC9F3E940
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/6df03dd5-101a-316d-a25d-729df96ea718.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     395301
IP address blocks:        27.121.114.0/24 maxlen: 24
                          27.121.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:55:f3:03:c8:f3:ec:c9:f3:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=368fc0ba-fd1d-4674-8158-e0363b1d2643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:bc:da:37:cd:12:eb:82:10:5d:30:9c:b1:
                    d9:54:fd:26:29:cd:e7:a4:01:09:71:12:26:ff:be:
                    98:53:1d:b5:c8:f5:7d:1a:7a:d0:52:0b:05:23:1a:
                    17:5f:05:a5:fc:d6:a2:9e:fd:bf:e6:4e:a3:24:14:
                    2b:23:97:e6:e4:0c:95:75:69:9f:49:37:cc:85:2d:
                    69:a8:16:45:40:e1:d8:70:41:35:ef:04:a8:fc:00:
                    bc:d9:1f:48:93:f9:f2:4b:ac:f6:89:f2:ed:60:1a:
                    62:a1:49:ea:6a:36:7d:54:3c:2c:a8:45:27:37:06:
                    99:20:78:05:14:28:29:30:d5:ff:0d:a4:8b:cb:d0:
                    2b:d1:2b:44:97:56:fc:26:4b:65:70:fd:39:0a:a3:
                    ae:4d:61:e6:c4:b7:98:02:8e:11:77:2e:f4:cc:05:
                    16:88:6a:aa:32:31:7a:6b:c2:92:1d:3f:8d:1e:3a:
                    f3:30:a3:0a:30:54:7a:60:ea:72:e9:e5:f0:7a:fe:
                    74:9c:23:43:8f:69:69:0a:f5:c6:09:86:ee:c0:7a:
                    77:9b:cd:9c:2b:99:08:92:d2:d2:20:dc:bb:f9:a9:
                    98:5d:41:cd:91:78:3a:5d:59:bc:3d:22:bf:90:22:
                    0c:ca:02:8b:04:0a:03:74:31:9a:41:73:30:44:35:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:B4:6D:8A:D8:8E:DB:3C:0D:B6:C9:09:55:DB:79:21:47:EE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/6df03dd5-101a-316d-a25d-729df96ea718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:04:2e:97:2e:db:d9:4d:84:5f:38:7d:c5:22:7e:e6:37:b4:
         62:6e:42:dd:ab:32:ef:5d:5d:90:21:44:64:11:ba:c5:a7:6e:
         f4:c1:04:f9:7c:d2:f7:e9:d4:26:1f:21:4b:f2:82:e5:f7:d5:
         7a:86:60:59:53:10:3d:eb:fe:76:79:b6:ba:85:9f:68:37:3b:
         04:8e:13:21:2b:7c:72:7b:b2:5e:60:9a:b7:69:0f:02:05:88:
         b2:c1:61:c2:85:1d:bd:3d:ad:55:f2:95:bc:8d:8c:f4:80:43:
         06:37:1e:e8:6b:2c:00:8e:1b:e1:61:c2:d3:09:6f:e5:ff:aa:
         37:27:bb:e7:83:93:d1:c6:6a:93:75:22:ea:8b:50:70:64:d2:
         5c:e8:01:f2:26:60:32:d4:39:b0:1e:8d:90:1a:6b:ef:85:6e:
         1f:8d:50:51:88:77:14:4f:10:35:1a:88:0c:21:e7:e9:09:0c:
         84:2f:4c:3c:36:da:df:4b:ff:a0:69:f3:fa:2c:b9:d4:81:b6:
         35:e1:32:7a:2f:a8:aa:6d:3d:3f:4f:59:06:54:e4:1c:f0:d9:
         7b:65:40:38:0c:8a:d4:82:49:5d:eb:bd:cc:87:68:00:b6:c4:
         f6:90:b3:b1:ef:d7:bd:9f:81:7b:2c:90:ce:dd:57:58:85:78:
         50:9f:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:18:03 2026 by rpki-client