Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa
File:                     137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa (raw, json)
Hash identifier:          tL/xhLxXRMHGyk4usrH9gMJPaI6e9Y7lRBecDlYquf8=
Subject key identifier:   FE:92:B0:C3:8A:D1:E9:14:37:1D:08:02:9A:8F:F1:62:0A:AB:5B:EC
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584F497D17ACE796AD8ABDC4B880
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        209.107.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:17:ac:e7:96:ad:8a:bd:c4:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2e57eed1-ff67-40e3-832d-ef6707a05534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:1e:40:e9:35:61:2e:95:be:29:dd:b0:cc:
                    1f:98:51:7e:16:a9:80:ee:c4:3e:2b:f6:4f:68:01:
                    59:a5:b1:4d:f0:b7:9b:e3:c0:cc:a3:1d:c5:0a:12:
                    a7:58:e0:9b:c4:9b:3b:5e:f8:9c:76:6b:e6:ca:1c:
                    58:6b:1d:a4:ca:41:c5:62:a7:af:a6:cc:ff:25:69:
                    bb:34:5a:c4:d9:bd:8b:68:5f:2b:55:09:33:f3:66:
                    6a:b2:09:d9:16:75:bf:7f:22:2b:c6:ed:27:d2:84:
                    aa:6f:5a:a7:42:70:6d:d1:cc:67:5a:e8:f4:2f:77:
                    64:3d:b9:f2:3d:ca:34:c8:db:a2:22:44:36:cb:72:
                    19:d5:66:0a:3c:df:e7:ad:29:54:08:f6:5b:af:20:
                    c3:b9:e5:d7:3d:af:8c:2d:6a:2c:59:32:1b:8a:c3:
                    c7:61:f4:69:2d:39:86:97:e5:d0:f5:f0:3a:17:21:
                    79:5b:c4:0a:06:f3:08:ad:1e:b6:a8:2c:0f:c6:74:
                    1f:26:f3:59:a2:c0:8c:5b:fb:58:67:5f:a8:2f:6d:
                    10:89:7e:c8:26:0b:0c:d9:89:c7:35:f8:49:c5:ee:
                    56:6b:62:2d:ab:6b:d0:d1:cf:29:58:0b:66:84:1a:
                    3e:a0:f8:38:aa:51:d0:c1:f1:0b:67:fe:a0:25:5b:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:B0:C3:8A:D1:E9:14:37:1D:08:02:9A:8F:F1:62:0A:AB:5B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/137d0bfa-2e2c-3707-9fde-3fc4ed63543f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:98:b0:84:83:00:ee:06:1e:8e:51:74:44:7b:5d:fd:11:de:
         a3:1e:66:eb:49:53:67:3b:d7:03:cd:ae:88:e8:8e:82:ee:94:
         08:51:65:6d:42:f8:1d:6b:8a:2f:33:08:01:77:a9:52:6a:ec:
         bc:ea:09:90:2f:96:b1:16:88:17:a0:c2:17:c3:c7:f2:5f:88:
         98:8d:62:e8:11:5a:47:bd:f0:eb:d5:1c:f5:59:ee:66:d6:4e:
         99:02:6d:ca:8a:29:51:5c:e6:19:52:8f:97:2e:55:47:97:7d:
         f1:ad:a4:3b:84:6a:3e:99:4e:7e:ac:c3:18:a5:f8:ac:f7:b1:
         e2:5d:a1:4b:75:5b:87:62:d2:05:cb:db:93:e0:dc:d9:2d:d0:
         aa:c8:d9:9d:a0:65:ac:a8:b0:85:dd:41:46:f0:b3:1d:d6:12:
         e2:19:91:e8:3b:12:ab:18:28:4c:fd:66:31:76:59:9d:24:bd:
         fd:01:70:7d:22:5c:2a:70:59:fc:76:87:1c:43:dc:f9:56:b5:
         9b:2b:ce:cc:8e:77:63:05:42:79:ab:13:2d:2b:7e:bd:62:94:
         d8:4e:26:6a:ed:dd:97:e4:7c:6c:d1:76:25:09:6a:86:60:5b:
         d5:8d:c5:d1:11:11:73:ba:03:e4:3f:d6:cb:d7:50:6d:16:26:
         49:25:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:56:59 2026 by rpki-client