Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa
File:                     8b836509-70a5-3781-a36d-d60531590d29.roa (raw, json)
Hash identifier:          j7nsV3cP9nMhS5c1Sn56zx7WMzNMcimQtqub3G2uWzQ=
Subject key identifier:   A4:D3:0E:30:8C:10:4D:FF:04:01:5E:7F:F5:F1:3D:CD:2E:46:D6:F7
Certificate issuer:       /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Certificate serial:       010D0C9F4328584F4976EA6EA16C811B1D3A8180
Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394968
IP address blocks:        204.128.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:ea:6e:a1:6c:81:1b:1d:3a:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a9ce19f9-3e9f-40f1-bf7c-d78033d142d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:dc:e2:09:3f:71:71:ad:55:9d:76:86:4b:
                    66:d6:6c:90:4e:7c:07:f7:1f:97:ef:d1:1f:5a:fd:
                    1a:3b:86:b5:f8:93:a2:fe:6d:9d:59:8b:70:c6:91:
                    b5:69:f6:b3:03:49:57:e4:1d:f8:d5:02:38:2a:f4:
                    42:e8:df:48:fe:48:bb:91:4c:ac:6a:ac:31:8c:04:
                    a7:b5:ae:a4:df:b0:26:0b:dd:49:f5:03:43:a9:6f:
                    79:31:50:65:45:0b:2a:db:bd:62:97:81:ea:dc:33:
                    0e:7b:02:20:c5:17:f7:43:2b:06:6c:d1:f3:5d:e6:
                    0f:60:2d:b7:76:84:a6:30:d6:84:da:2d:ca:4c:15:
                    5f:61:0f:62:c3:d1:e1:5d:6c:ec:8a:6a:4b:c1:be:
                    e0:97:50:70:7d:a6:52:a3:8c:11:99:4b:c1:c8:72:
                    b4:0e:42:5f:af:b0:1c:b2:a4:07:37:57:b7:fa:f6:
                    2e:0b:2d:f7:b2:22:2d:2b:02:44:b4:94:1d:77:16:
                    94:5a:f6:b8:96:aa:85:c8:fb:61:c8:f2:09:72:86:
                    4f:a0:4c:42:b6:dc:e0:18:22:da:27:94:af:e2:55:
                    9c:09:c0:54:9d:2e:26:fa:45:01:61:6d:18:be:db:
                    1a:a0:e6:22:a0:2a:25:1d:33:31:da:c3:31:a8:dd:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D3:0E:30:8C:10:4D:FF:04:01:5E:7F:F5:F1:3D:CD:2E:46:D6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl

            X509v3 Authority Key Identifier:
                keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9b:82:70:ab:13:45:0d:a7:32:b2:b2:bb:67:2c:2d:e6:16:
         3f:71:d1:6f:b7:b4:24:ab:dd:b4:1f:c5:9e:4d:2b:7f:ed:67:
         59:9f:07:14:63:be:2b:11:22:7d:98:a4:7b:a7:33:b8:ce:d9:
         73:b6:e1:6d:9f:69:97:00:ad:5f:72:56:6f:dd:f6:08:f1:ce:
         21:8a:b0:60:6c:b2:27:1f:4c:90:fd:6d:36:e0:65:b2:a1:a4:
         4c:3d:8a:c0:8c:48:50:cc:9b:3b:ba:ea:40:f2:f4:6d:e0:07:
         65:51:be:f6:c8:29:6b:09:9d:a7:b9:44:e7:cf:f2:2b:b8:d5:
         0c:be:7a:6b:30:9e:29:bb:36:79:78:8d:aa:d2:63:7e:c2:04:
         2b:71:e9:4a:4d:9e:03:a1:58:9c:f7:ec:ff:71:fe:36:e4:c8:
         68:1f:59:6c:a2:53:39:2e:9e:8f:4a:98:8f:aa:97:88:44:f5:
         0a:61:8c:ed:00:d6:d5:e5:d5:78:74:c2:b1:9b:cf:2b:67:ac:
         d9:a3:0e:62:1e:24:55:cc:ae:85:ff:da:b4:ba:bb:fc:e1:df:
         8c:5a:db:25:0d:a0:43:d6:60:bc:40:2b:e0:c6:ef:60:e8:ca:
         96:0e:9e:f3:3b:98:a8:9b:68:13:7c:82:8f:ec:98:c2:84:78:
         b1:03:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:09:07 2026 by rpki-client