Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa
File:                     913ccad0-9f81-3143-b72c-4473dba1b1d3.roa (raw, json)
Hash identifier:          MZW5rZb5DU1baDTy0GfF9SdHe6JVs+NiZYIsWTYvAa8=
Subject key identifier:   9A:23:84:90:84:73:9A:EB:E4:AB:28:1B:B7:4C:B9:67:34:80:20:42
Certificate issuer:       /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial:       010D0C9F4328584F497602CE8C91894EE4182D80
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398446
IP address blocks:        72.251.128.0/19 maxlen: 24
                          158.62.224.0/19 maxlen: 24
                          167.254.96.0/20 maxlen: 24
                          209.25.224.0/21 maxlen: 24
                          2605:d2c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:02:ce:8c:91:89:4e:e4:18:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7549c4de-a724-45e0-af6e-4a706972235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:7e:3b:d7:c9:1e:e7:f8:09:63:11:18:e2:
                    5e:48:b9:80:1f:b5:a0:82:be:25:b7:13:67:c7:86:
                    d1:c9:52:20:33:d8:60:2f:37:1c:66:8a:45:33:59:
                    b4:66:6a:a0:c4:96:c0:84:e2:83:3f:76:8b:56:f7:
                    09:84:c1:25:b0:4f:b5:eb:78:99:c0:d8:92:41:17:
                    90:15:32:b9:ac:e9:fb:e9:5b:69:cc:d1:55:2b:0e:
                    9c:6e:d4:e6:42:69:c1:54:9e:18:b4:d3:38:1d:59:
                    ff:64:68:89:45:92:00:58:84:00:e5:f8:df:de:8b:
                    27:f3:08:68:8d:d5:8b:06:c9:46:c2:99:10:8d:c2:
                    75:a4:24:98:ab:b2:bb:5b:4b:a7:c7:0e:c3:9c:ee:
                    d7:bd:ea:1e:5a:e7:71:52:5f:37:e7:b4:6f:38:a3:
                    54:4f:5b:26:b3:e1:1c:fb:c8:75:8d:78:11:8a:8a:
                    a7:02:70:fa:44:c1:48:6c:9e:11:31:47:de:d1:f6:
                    91:ef:d2:c2:cd:fe:ea:d6:7f:ef:3a:04:f5:8b:75:
                    04:07:15:34:e2:ec:66:f5:92:19:64:14:90:c3:72:
                    ea:cb:de:57:01:a4:7a:bf:27:2d:b1:2c:49:52:5e:
                    c2:63:ab:ed:35:49:e8:62:b0:6c:e8:0f:3d:40:a9:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:23:84:90:84:73:9A:EB:E4:AB:28:1B:B7:4C:B9:67:34:80:20:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/913ccad0-9f81-3143-b72c-4473dba1b1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl

            X509v3 Authority Key Identifier:
                keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.251.128.0/19
                  158.62.224.0/19
                  167.254.96.0/20
                  209.25.224.0/21
                IPv6:
                  2605:d2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:60:a0:0f:54:bd:44:1e:30:9e:83:1b:ec:c1:92:22:39:e4:
         9a:97:cb:af:3d:34:28:c0:8e:00:1d:11:c3:b7:90:9e:01:71:
         ec:bb:0b:a6:5e:15:15:48:8d:9c:6b:2f:05:7c:31:09:41:89:
         03:ad:c3:16:34:1b:bd:47:36:cd:bb:57:cf:86:81:f9:33:54:
         e7:24:32:db:60:97:4b:4f:d1:e4:02:bc:d9:ea:3c:a5:b8:ee:
         bf:d7:de:1e:59:6b:a9:f4:90:64:e0:de:5c:61:de:94:a1:f5:
         fe:61:d3:2f:de:78:a7:45:6d:89:5b:ed:fe:17:0d:19:c6:94:
         c8:4b:1b:b4:70:87:3b:07:2d:f1:5a:91:0a:4c:eb:3d:58:38:
         70:24:39:44:bc:26:10:64:38:91:1c:c2:9b:d8:50:f2:b6:70:
         6f:ac:dc:a6:77:64:23:09:ef:a4:19:a0:a8:cb:a9:da:b3:9e:
         e4:95:ba:8e:db:2c:7e:39:0b:3c:22:bf:3d:e0:fd:50:00:20:
         48:b0:17:68:72:a8:af:51:23:89:c8:2d:12:6c:52:ac:39:1e:
         d3:e6:94:88:65:71:77:51:de:6f:85:85:bc:0c:cc:f8:88:70:
         d7:8a:40:4d:78:78:b5:ac:3e:ff:b1:f4:9a:8c:0d:2c:c3:fc:
         b8:b1:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:50:37 2026 by rpki-client