Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/28797ea9-bb35-324d-94f4-540f566dee99.roa
File:                     28797ea9-bb35-324d-94f4-540f566dee99.roa (raw, json)
Hash identifier:          HuDMj2mXjv3Py3ZP4s4gAC6CRS1NlC2BS9GNEkIUaQI=
Subject key identifier:   7E:4E:25:83:10:06:9D:DB:17:B6:C2:25:31:6A:04:31:E4:45:1A:BE
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584F4972D17060CBFE7E773DD180
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/28797ea9-bb35-324d-94f4-540f566dee99.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20477
IP address blocks:        137.118.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d1:70:60:cb:fe:7e:77:3d:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3eb533f9-6ff9-474e-8ea4-a86113dfc08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:fe:57:13:05:d8:e2:e5:f5:ae:bb:21:92:
                    d1:8a:55:d5:5c:dd:94:04:9f:72:13:25:75:bc:6f:
                    eb:6d:4f:6b:6e:ea:3b:6d:13:4f:f5:2b:75:28:ad:
                    e1:27:93:eb:4b:74:f5:0f:8f:9d:38:74:e9:d6:6c:
                    42:f4:a0:d7:42:cc:ee:cb:55:4d:b9:28:c2:21:a6:
                    74:18:0d:fe:32:a7:6a:a4:6a:5e:19:5a:d0:c7:99:
                    23:bf:1f:7f:47:9f:83:77:0c:41:7f:85:67:8f:fa:
                    8e:f3:9f:f6:e4:c5:49:3e:88:52:77:49:c5:a8:e4:
                    9b:13:17:41:37:ba:14:02:08:bf:61:b9:7e:03:65:
                    0b:3f:98:16:8a:65:67:26:03:19:e3:6a:e7:5c:99:
                    b9:3d:1a:84:0d:82:20:5b:ef:4d:c3:45:4e:eb:cd:
                    8c:3a:4d:24:5e:27:a1:48:c5:15:73:43:a6:1a:60:
                    90:3f:1f:25:bd:33:66:80:ba:8c:b8:71:35:dd:89:
                    e9:60:dc:18:5e:16:51:4c:ed:2e:24:9a:cf:f6:82:
                    5b:d6:af:93:65:53:5a:1e:5e:b2:95:f5:3b:9a:65:
                    ee:7a:ce:0c:a0:18:56:96:a6:56:db:64:d0:49:b6:
                    68:35:5b:e3:07:bd:2f:8b:6e:08:21:fc:50:d6:7b:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4E:25:83:10:06:9D:DB:17:B6:C2:25:31:6A:04:31:E4:45:1A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/28797ea9-bb35-324d-94f4-540f566dee99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f2:51:20:38:eb:8f:a1:e4:4e:d8:46:92:64:31:5c:9e:9d:
         90:12:f8:54:f2:4c:28:3a:84:c7:3b:0a:c3:b1:66:42:93:8a:
         65:95:d1:28:5f:30:cc:ae:cb:73:89:f9:f2:11:ee:1d:1c:81:
         80:89:bc:18:ec:0f:87:d1:77:a6:56:d2:1a:d0:d3:6f:08:fe:
         0c:e7:47:97:d6:48:cd:7d:b3:b5:ce:ac:3b:eb:2a:81:a3:dd:
         8d:98:4b:a8:5e:c7:8a:42:46:1e:66:54:67:cf:2a:4c:06:4f:
         ae:58:46:f7:e3:0c:74:5a:07:29:fd:ca:d2:b2:83:07:ba:00:
         55:e3:2e:3a:d1:38:b7:4d:7c:28:bf:e4:39:56:7a:07:54:71:
         1a:6a:60:7d:b7:3b:79:0a:37:ee:7d:97:3d:1e:e2:1d:e1:e2:
         47:63:05:b5:18:46:14:c5:5d:c3:7f:9d:af:4e:c7:5f:50:e5:
         99:74:bc:e2:9c:19:cb:f3:57:56:da:f2:1e:08:1c:f1:a3:8e:
         c9:73:01:e2:36:1f:59:6a:2a:1a:19:d6:a6:a6:7c:95:18:10:
         d0:50:b8:b5:e7:21:b5:78:aa:2b:57:e0:29:a3:3e:bf:a6:58:
         78:97:83:c4:e9:38:3c:c8:b8:f9:c9:86:7a:65:34:2a:2a:c0:
         d4:44:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:24:54 2026 by rpki-client