Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
File:                     e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa (raw, json)
Hash identifier:          5viemm3avKTJK2igj7/JMcKmsb2DvP0fR1SovtzR6zo=
Subject key identifier:   17:5B:B0:6D:52:6A:EA:8C:6D:D5:6B:98:19:DD:22:27:02:0D:27:1E
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584F374D2792C9AE2737715C7700
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        208.70.136.0/23 maxlen: 23
                          208.70.138.0/24 maxlen: 24
                          208.70.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:27:92:c9:ae:27:37:71:5c:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=0e98f1c7-6ec4-4617-8c23-c551c7c69250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:bd:f9:0a:2f:c3:e0:f5:7e:ba:70:48:3a:
                    f4:e8:de:20:e3:fe:6d:fe:43:c8:d4:c0:3d:b3:e3:
                    a7:89:3d:87:b8:86:43:89:e5:33:1e:06:0d:f4:3b:
                    a0:c9:08:3d:1c:64:07:5d:44:99:7f:1b:97:55:ae:
                    9e:41:27:65:ad:f0:d6:df:41:40:05:95:44:f1:28:
                    ed:61:04:d8:43:63:19:96:a5:29:15:54:14:22:90:
                    ec:bd:87:95:fb:7c:0c:8d:6a:22:f9:79:a6:b9:5f:
                    98:1f:dc:a6:1d:07:18:ba:66:e0:05:ff:ca:87:9b:
                    c6:d2:0b:f1:c2:09:f1:8a:06:a8:b5:31:9e:b5:66:
                    14:c5:aa:b2:8d:c3:75:b4:16:88:d0:04:07:b7:08:
                    39:6d:d7:19:c7:06:c3:eb:f0:fc:ac:79:b8:e0:83:
                    47:7f:a6:36:3b:3d:ed:58:2e:ce:a3:bd:45:1a:73:
                    1c:95:19:54:c9:c6:cf:1a:23:bb:04:bf:6e:97:26:
                    27:f3:cd:a4:9c:51:bb:88:e0:90:e0:ab:63:d1:00:
                    8a:b1:fe:4d:d7:02:7c:3d:c1:9e:d6:25:ae:e8:78:
                    c9:0f:68:2c:fa:9a:ef:ee:f6:5d:3d:db:4b:e6:b7:
                    08:3a:10:57:44:6b:38:5a:34:f2:0e:96:7d:48:b2:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5B:B0:6D:52:6A:EA:8C:6D:D5:6B:98:19:DD:22:27:02:0D:27:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:5c:43:f5:97:2e:cc:bb:7d:74:1f:ea:19:ed:4b:d6:a2:
         f7:9c:e9:a4:bf:5a:0c:96:9b:4f:8d:23:62:e4:d5:e2:2a:d1:
         c5:42:ab:36:a7:cd:fd:3f:37:30:67:a9:d9:bc:c7:dc:e3:f2:
         b7:b1:96:46:89:df:90:7e:16:cf:cb:a7:f6:2a:c2:d4:2d:31:
         a7:5a:47:6e:e3:04:a2:57:a7:6a:b3:b3:6f:d6:58:95:63:af:
         8d:45:66:90:c9:af:45:5a:a5:5e:02:7b:86:e8:b1:6c:d6:ab:
         19:47:5b:56:ee:ca:6c:9a:b2:d5:dc:1a:9c:bf:a7:2e:65:5f:
         bb:a7:27:df:05:7a:ac:be:23:33:39:51:e8:6b:db:b9:ac:cc:
         1f:f3:fd:27:bb:87:e1:b2:12:b7:bf:c5:09:58:20:0e:e6:f2:
         fc:3d:57:90:3d:7e:ee:9a:35:67:a8:45:b5:76:4a:4e:19:ab:
         41:fb:9c:59:34:88:f1:68:52:25:12:a5:88:cc:5d:f1:8b:72:
         99:a0:20:04:b6:e2:e4:26:6d:c4:2e:04:5b:6c:cd:4d:6f:67:
         69:85:b7:73:40:17:8f:40:39:de:33:d8:75:93:dd:3d:df:93:
         c5:f2:d3:2a:fe:6c:dc:e9:a3:ae:c0:41:99:0d:ab:97:c2:0d:
         bc:f0:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:58 2026 by rpki-client