Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
File:                     b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa (raw, json)
Hash identifier:          5TC2yrrXUH3OPcYf2iHd89u4zMsEERWdBvUeeLGBkAE=
Subject key identifier:   15:E7:F2:E0:BD:BD:3C:0E:47:5C:4B:F7:9F:A7:23:FE:02:FA:EF:BE
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584F374D2831A0C469735EEF3400
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     395301
IP address blocks:        209.172.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:28:31:a0:c4:69:73:5e:ef:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=ac74906c-7b54-4d9a-9e4b-45149d478f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:6f:2d:f2:07:8d:e5:09:27:88:9c:99:9a:
                    40:80:f5:7e:31:ff:e7:b2:97:4a:ee:23:64:b2:8b:
                    27:cb:da:00:7a:65:78:6d:18:05:10:ee:7f:f7:56:
                    83:c4:f9:51:57:44:f9:c4:c9:a7:c8:4f:9d:63:c9:
                    e5:5e:da:35:5e:14:af:2e:1c:13:ad:82:7c:73:69:
                    c9:cd:75:5e:5a:e7:d5:df:1a:72:c2:af:45:a5:d8:
                    99:03:32:e8:ff:d6:99:8b:e1:01:ee:3a:a7:9b:68:
                    7f:bd:2f:83:3b:be:20:d6:ce:35:5a:85:8c:d0:a3:
                    c7:73:1b:e8:3c:c0:a1:b2:92:d1:74:ec:fe:74:9b:
                    e1:df:54:83:39:55:9c:f3:9e:57:79:6e:16:d9:0b:
                    5b:03:90:be:eb:ca:00:75:35:8b:23:1d:af:fe:9b:
                    bf:fb:b5:f8:63:a8:45:5c:7c:59:ff:4a:20:b0:f7:
                    6c:e0:93:d1:a0:3f:98:44:6f:62:9a:a7:bd:30:90:
                    ef:cf:63:ad:8d:27:b1:7a:80:19:42:d1:52:de:10:
                    10:67:b7:41:01:9a:40:be:97:5e:42:6b:42:f1:89:
                    7a:e9:ef:e8:f4:45:29:94:79:b1:3f:ad:30:d9:c1:
                    b0:60:8e:b9:ea:2d:86:26:3e:0d:33:3f:86:f2:63:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E7:F2:E0:BD:BD:3C:0E:47:5C:4B:F7:9F:A7:23:FE:02:FA:EF:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.172.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:86:26:44:1c:18:3d:5b:64:1c:3f:3b:66:7e:3e:45:94:84:
         70:73:84:04:45:53:0d:59:45:d9:49:15:d3:49:b0:b8:f8:b7:
         dc:b3:89:4f:5b:a1:1e:49:b7:59:f6:01:28:13:de:47:04:fd:
         42:e5:90:1e:02:fd:75:b1:cf:38:4a:3b:39:01:26:fb:57:2a:
         a2:70:8c:a3:62:40:61:f8:ca:fe:ff:07:c9:5a:49:73:c6:11:
         a7:62:1c:42:a7:7e:ea:b7:8c:d8:de:5e:33:3b:ae:e8:5c:a7:
         99:54:e0:71:be:c5:78:4f:ae:73:28:8a:ee:66:b6:17:03:ab:
         7a:b2:2b:54:a0:29:ac:6e:4e:97:8e:f7:f5:71:02:6f:46:07:
         1e:6a:15:3d:53:2d:fd:f4:b5:b3:4e:8c:fa:9c:7e:42:bb:74:
         60:69:46:84:c2:ed:0a:69:10:df:22:8d:60:83:14:79:54:9e:
         2b:50:32:b2:2d:1a:b2:d5:a2:d4:1a:c9:7d:2a:a1:68:b2:91:
         9f:36:ce:cf:0d:a7:7d:b4:27:84:2a:fe:84:98:ae:5a:d8:76:
         e6:76:52:64:41:b5:5c:bf:22:53:68:d0:f7:31:d5:24:cf:99:
         de:34:d0:60:ba:10:8d:75:20:c7:0d:d6:c4:4b:32:4e:34:35:
         aa:23:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:10:42 2026 by rpki-client