Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/dd150e0c-376e-306c-acb5-77c430ed3ae9.roa
File:                     dd150e0c-376e-306c-acb5-77c430ed3ae9.roa (raw, json)
Hash identifier:          xG8JImPhpNAwYP4q8PhlTwMSJxh+Ir5GtIVd/S8G6Hk=
Subject key identifier:   B3:AA:92:D4:1E:E6:F0:FF:41:3E:7C:03:CB:79:38:6A:28:C7:E5:61
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584F506D40CD447E965725F6D880
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/dd150e0c-376e-306c-acb5-77c430ed3ae9.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        173.195.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:40:cd:44:7e:96:57:25:f6:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=9df21734-9215-4b81-94bc-555f1aad0d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:18:e1:4f:c9:ff:d4:e6:cb:80:6c:76:21:
                    6d:55:3e:b1:59:b0:18:6c:2f:96:11:e0:d4:06:da:
                    d3:31:bf:2e:41:a0:a0:a9:92:cb:7c:9e:c7:b4:d7:
                    b3:4b:a6:f2:1a:3b:b6:f8:65:de:84:44:3b:6f:c5:
                    28:3e:0c:83:46:fd:54:40:3d:c4:fb:21:05:24:6d:
                    4f:c1:26:0e:4b:0f:f5:3e:88:05:8f:3a:25:30:6d:
                    a7:aa:7a:26:8a:f9:42:06:5b:ad:e4:e8:39:c5:b6:
                    ea:2b:70:71:d5:a0:ae:cc:d4:8f:2b:7a:1a:58:83:
                    f3:05:28:a5:8e:43:8d:f0:22:c2:47:eb:06:d3:fa:
                    84:60:c8:71:db:38:e9:49:03:9c:d4:67:9c:5f:e1:
                    f6:8d:6c:e6:bd:68:82:b6:bc:d0:37:d5:ed:2f:41:
                    0e:3e:74:7e:4b:a6:22:84:3f:d8:b4:f4:ef:43:1c:
                    64:e0:47:ad:a5:13:49:43:30:24:77:95:9c:d8:b0:
                    59:ff:09:bd:58:02:c6:45:d8:c2:64:77:3a:a5:43:
                    da:4e:2b:db:ea:65:29:ef:a6:ef:4e:60:1a:64:3e:
                    a3:f9:cf:b6:cd:44:8a:56:08:da:cb:ff:72:73:3c:
                    3a:9f:27:6c:65:11:61:84:25:05:e1:e7:1c:9f:51:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:92:D4:1E:E6:F0:FF:41:3E:7C:03:CB:79:38:6A:28:C7:E5:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/dd150e0c-376e-306c-acb5-77c430ed3ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:6a:fb:ed:0c:9a:67:42:a2:ad:93:93:dc:f8:84:67:81:
         11:6f:06:f6:9c:51:49:ac:2f:0e:f8:58:93:f6:67:a0:83:f6:
         01:e8:21:ea:7e:4c:96:9c:a8:6e:0b:17:37:f2:43:0f:ae:8f:
         a9:60:65:7d:1a:a8:bf:e0:6b:db:63:e1:89:99:78:c3:52:c4:
         f7:35:e6:eb:3c:48:f7:1e:bf:d7:00:41:56:8d:4b:d7:31:b1:
         5d:61:55:a0:26:7a:3e:ee:32:d5:7e:83:0a:84:a6:3f:12:72:
         a3:7e:c9:96:d0:50:62:4a:13:26:f5:cd:fc:48:40:c5:c4:fd:
         02:b0:89:64:0c:2d:6b:01:24:ea:3a:c4:ba:cb:91:80:e5:59:
         51:ed:3f:f5:1e:3e:ed:93:f5:cf:08:c2:01:b3:99:31:c8:ba:
         38:83:25:c8:0b:48:ee:82:b4:27:06:27:fc:8b:bf:b5:10:fc:
         20:ef:d4:79:59:b0:a5:b5:36:3a:d8:91:65:2d:53:5b:bc:ea:
         ae:59:d3:65:14:cf:0f:07:d7:2e:b9:c0:54:ed:b9:7f:08:24:
         e0:50:ac:81:56:dc:54:5e:66:b4:b1:b0:4a:02:85:bb:46:d8:
         c5:2f:bb:f0:dd:92:1f:20:5b:a4:ac:f4:10:a2:f8:f5:81:a8:
         0f:1a:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:35:12 2026 by rpki-client