Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa
File:                     b84609ff-6d72-31a6-be19-12752acfbdb9.roa (raw, json)
Hash identifier:          +Bi9mh2Ncb5JvWCu8epTFWUSL1jepBovFt6lB4ZSGwA=
Subject key identifier:   CB:1F:BD:10:81:ED:78:39:01:21:DE:02:BF:E8:58:3D:B5:F2:69:65
Certificate issuer:       /CN=829d195a-d541-4371-970d-5be56cd489a8
Certificate serial:       010D0C9F4328584F4973A7EFFEBE114565D44E00
Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46892
IP address blocks:        209.35.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a7:ef:fe:be:11:45:65:d4:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b340e3e6-74da-4993-91d9-ab29c4ea63ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:06:c6:c1:6a:80:08:15:6f:b5:50:01:6f:
                    5b:d1:b0:7a:d3:94:f4:ac:ef:49:44:a6:d7:63:e9:
                    da:8f:bf:97:4e:9e:3b:ac:dc:25:2d:23:70:fe:16:
                    80:6e:a5:39:cb:57:b0:2d:a3:f3:fc:e4:15:c9:0d:
                    09:16:99:f8:cf:8a:5c:48:71:7c:dd:bd:3b:aa:0a:
                    cf:5a:69:62:74:81:b9:4a:97:f9:b0:9c:44:31:3d:
                    78:53:fa:d6:d2:3d:d7:08:e4:51:43:49:3d:28:f3:
                    d9:79:2c:8d:16:1e:95:fa:0b:00:ea:e4:39:8c:f3:
                    2f:a1:cc:5c:4b:1d:28:6c:9b:73:f9:56:ff:86:e3:
                    7c:7c:c9:0d:1e:c8:b3:d4:8a:f9:53:48:2e:3c:ae:
                    05:bb:3e:7c:b6:3e:97:e8:6c:a2:91:ba:f3:11:72:
                    53:7d:bd:cd:24:b6:72:52:eb:9e:06:73:49:0e:79:
                    68:51:57:60:ed:25:e3:ec:15:e6:29:cc:70:36:17:
                    08:50:46:c2:f6:d5:81:cf:f7:87:2f:2b:e9:6b:7e:
                    b6:d9:7d:31:33:04:d5:05:45:df:b0:ef:9d:73:b6:
                    a1:d9:11:f9:e7:64:eb:89:20:50:b0:b4:ed:2b:0e:
                    76:08:e5:bd:f0:e6:66:5e:97:3e:2d:2a:b5:f3:55:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:BD:10:81:ED:78:39:01:21:DE:02:BF:E8:58:3D:B5:F2:69:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b84609ff-6d72-31a6-be19-12752acfbdb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl

            X509v3 Authority Key Identifier:
                keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:f2:cc:ce:28:a9:37:9e:e9:a2:c8:38:f0:1e:8f:94:85:
         b3:47:9a:1d:d0:36:df:91:ba:5f:27:1f:a7:ee:8e:aa:c0:63:
         f1:96:30:eb:8b:5a:16:d0:3f:73:0b:83:7d:42:61:ae:d2:ff:
         e0:f1:39:32:06:60:4e:7b:0c:54:95:66:ab:78:5c:5c:be:e4:
         5c:25:6c:12:ad:28:72:e7:99:d0:43:7a:a4:05:93:b7:9b:02:
         1f:03:be:24:6f:87:f3:ae:c7:52:f4:bb:35:85:7a:6e:7f:54:
         70:24:e4:5b:8c:81:66:63:0a:91:3f:6a:6c:fe:fb:cf:da:89:
         fa:0f:c3:69:d3:93:56:4c:70:b7:8c:d0:ab:a8:10:08:63:87:
         57:eb:b9:03:fa:ae:84:19:95:a2:b0:ee:2b:6f:58:28:51:c3:
         10:a2:02:52:75:09:3e:9c:20:3e:89:d7:b1:cb:99:09:08:55:
         9d:4a:79:07:57:7e:2a:5f:05:9c:52:9e:fe:70:d7:99:01:48:
         27:2d:72:a9:89:c6:97:c1:b7:74:65:18:f0:3a:f3:39:71:8d:
         2e:62:fb:02:c7:10:af:8d:bc:9d:da:10:f3:ef:79:86:fe:a7:
         26:64:78:9d:b7:6b:fe:8d:d4:8d:8a:02:79:1f:dc:64:51:2b:
         02:25:3b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:11:19 2026 by rpki-client