Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa
File:                     3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa (raw, json)
Hash identifier:          Cjh6zPyQqMzVAjSCACyqyThk4Z0mjDgqgCEg919XPhY=
Subject key identifier:   05:CD:40:DB:57:F1:79:41:71:76:19:56:EC:81:CD:40:A0:20:30:C7
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F4328584F498C2BBCE4637B09ADBF3F40
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26037
IP address blocks:        204.209.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:2b:bc:e4:63:7b:09:ad:bf:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=105d0e60-3f31-469b-b83f-8514833a319c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:57:d8:7f:01:00:9f:05:2c:f3:ee:e9:9d:
                    48:31:75:74:32:f5:84:ee:6a:03:cb:2f:19:60:fc:
                    f0:2d:a2:ab:06:a0:41:ef:1e:33:be:4a:bb:a8:70:
                    9b:a0:c4:d5:be:f7:fd:c3:a8:66:69:69:bc:5d:dd:
                    70:eb:4b:4c:fd:6c:fc:0b:7e:b4:c8:2c:bc:f4:60:
                    7f:58:0c:c4:40:29:bf:8b:4a:c8:f9:56:cd:43:ae:
                    0d:06:47:8b:e5:96:ac:80:0c:4a:4e:15:0c:d8:07:
                    da:b6:fe:7d:e4:e9:bb:ed:c7:02:a5:40:d6:e4:e0:
                    85:97:2b:02:58:7a:03:41:6f:82:86:dc:45:e8:11:
                    2d:06:02:1c:e4:0e:27:30:32:a6:90:df:23:42:81:
                    db:2f:43:43:07:f2:d7:89:10:05:4c:f8:78:59:21:
                    20:14:fc:ad:a2:6b:dd:8d:50:bd:33:67:72:f7:cc:
                    33:b6:41:57:76:7b:de:c4:90:e9:ee:60:9e:d6:01:
                    9c:5b:a6:b0:f3:98:99:b3:c1:4a:c8:c9:f8:26:bb:
                    ad:73:e2:e6:10:9b:80:34:bb:c5:5a:53:75:e3:50:
                    9d:dd:85:b9:d3:3b:e3:35:fe:55:de:40:28:98:c5:
                    d5:5a:9a:ce:33:5d:7f:b9:cc:cd:64:a9:0f:59:dd:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:40:DB:57:F1:79:41:71:76:19:56:EC:81:CD:40:A0:20:30:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/3b1e0ad8-48af-3fc5-82e6-c0c7fdba72a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:a5:5e:83:aa:01:ac:68:de:81:55:02:c4:80:c2:71:7d:
         7b:7c:7a:0b:1b:2c:79:ff:8f:eb:17:b7:ff:4f:8a:13:da:e9:
         a8:07:36:01:ab:9a:88:47:40:29:4e:84:83:eb:91:25:25:19:
         c1:20:6a:ca:a2:e2:48:16:c4:91:ca:37:c6:a5:6c:e2:bb:5c:
         ed:bd:2c:c5:9a:ad:60:3f:5a:1f:ac:b3:d2:ad:7b:00:46:26:
         b6:9f:c7:0e:a2:b8:06:ef:01:53:cd:da:d7:fa:0b:92:a8:81:
         6e:18:36:38:97:55:42:3e:de:4f:a8:68:b9:21:d6:39:a5:04:
         fc:73:49:7a:b8:8c:4e:42:a0:8a:12:54:08:a1:3c:71:b8:2e:
         21:89:4d:70:29:c4:30:d4:da:db:fb:bb:37:86:01:d7:8e:39:
         b6:5f:f4:0d:68:b2:91:97:e4:30:d2:73:65:cd:5e:30:78:30:
         09:fa:a9:7a:39:0f:da:77:2a:01:2b:df:6d:21:3b:53:62:1b:
         25:bb:1e:9e:fd:ec:21:d9:bb:c5:e7:31:5b:e8:5d:c9:8a:fc:
         a9:a2:b9:c6:e4:a1:61:d8:4c:de:00:fd:8b:7e:7e:c1:65:00:
         22:31:d5:e4:49:07:d7:ec:a5:99:3d:29:d3:a1:58:38:29:9b:
         0f:7d:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 06:17:05 2026 by rpki-client