Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d29d24d2-d7d8-395c-b8e6-4b25f704ef68.roa
File:                     d29d24d2-d7d8-395c-b8e6-4b25f704ef68.roa (raw, json)
Hash identifier:          cp62isLJp2tHwGkgrJzZGdRaqpfI+aL3K4RyfIo7H8s=
Subject key identifier:   32:6C:5E:6B:7F:4C:65:FF:80:12:1F:4E:C0:F2:F5:11:C7:56:C2:EC
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584F5C8DB379FD3104A181333340
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d29d24d2-d7d8-395c-b8e6-4b25f704ef68.roa
Signing time:             Thu 01 Oct 2026 21:15:20 +0000
ROA not before:           Thu 01 Oct 2026 21:15:20 +0000
ROA not after:            Wed 30 Dec 2026 22:15:20 +0000
asID:                     20477
IP address blocks:        137.118.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:8d:b3:79:fd:31:04:a1:81:33:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Oct  1 21:15:20 2026 GMT
            Not After : Dec 30 22:15:20 2026 GMT
        Subject: CN=72d91b4b-1f45-4927-9188-905cac018712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:55:72:22:60:d8:77:5a:43:75:a2:02:ac:
                    84:91:02:57:b8:98:8b:1f:29:bf:55:8d:51:57:3c:
                    a4:d4:cf:82:17:42:5a:dc:81:51:43:7d:39:51:d0:
                    e2:40:ad:a6:40:72:b1:0e:80:f2:1d:51:1c:a2:2b:
                    9f:e0:7a:80:cc:6a:47:9d:38:8c:d7:02:b6:43:17:
                    a1:b0:ef:46:b1:37:9f:67:f2:65:3d:58:25:f6:2f:
                    f6:42:8c:2a:76:43:49:0d:aa:3a:c4:74:30:fb:7a:
                    c1:e0:ef:97:91:d5:73:86:27:07:52:04:a8:47:41:
                    0f:9a:73:99:d0:32:47:ea:5f:c2:c0:0c:85:8b:05:
                    15:fa:34:bd:8a:69:ff:54:a6:bf:85:51:08:7d:14:
                    e8:b5:69:66:dc:b2:f9:4f:a8:13:ce:7c:6e:db:8a:
                    f4:a3:f3:84:a9:b2:c7:40:1b:76:90:39:98:83:d2:
                    d3:ff:4f:93:1c:d0:02:e6:46:6d:21:bc:de:81:01:
                    ad:6f:9b:c7:5e:5d:be:67:6d:dc:29:18:fa:bf:54:
                    b6:c2:aa:14:5f:a2:1f:ef:8a:52:a2:a8:a8:0f:0c:
                    45:44:b9:e5:15:e7:0e:20:33:83:d9:78:46:e9:39:
                    19:dd:94:5c:d4:4f:03:1d:29:d7:59:de:5f:de:4a:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6C:5E:6B:7F:4C:65:FF:80:12:1F:4E:C0:F2:F5:11:C7:56:C2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d29d24d2-d7d8-395c-b8e6-4b25f704ef68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:2a:1f:12:6a:98:69:52:83:23:d1:9e:cc:68:85:3a:4b:
         f4:20:3a:1e:49:f2:d2:2e:89:c8:73:3f:1b:72:9d:ff:4a:be:
         33:5a:fd:ef:db:dd:b3:d5:a0:e2:fc:84:1c:2f:af:d7:00:ff:
         96:da:81:01:92:bb:68:13:1f:e0:4e:de:de:50:2b:90:4b:b7:
         bd:ad:11:1b:54:c4:14:5c:eb:c0:23:9f:fb:09:ac:7d:eb:3e:
         c0:cb:01:94:85:c2:06:72:b7:2b:58:be:ee:fd:75:4a:58:7b:
         bf:30:53:4a:2f:17:2f:47:0a:dd:c3:e3:ab:5e:a8:f8:52:09:
         54:8b:e3:9d:60:9e:16:7d:31:8b:fc:72:4e:48:21:1e:a7:ae:
         80:2a:76:44:49:37:6c:db:21:d6:c4:3c:50:7e:e9:4c:41:d3:
         9d:6b:12:89:6e:14:58:dd:8b:bf:af:9d:b6:fe:05:53:f4:1e:
         49:00:85:30:e7:40:8d:9a:16:3a:d7:65:47:92:1f:89:2b:c6:
         94:62:19:aa:67:65:1a:b0:fa:b0:ad:8b:c0:2b:8e:5e:a4:58:
         bb:e9:3f:59:a0:f7:c6:c9:25:5d:c4:2b:e2:e4:02:a0:9f:05:
         4b:e8:99:a3:57:12:90:ba:43:0b:e3:96:f2:6c:4e:37:ea:1a:
         e2:1d:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:16:19 2026 by rpki-client