Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
File:                     287ef630-99a2-3d8b-a99f-08d6be573b12.roa (raw, json)
Hash identifier:          cxCOwXr+D91Vm31Zne0dxUCSaZTeZDAVMpJufvP+xiI=
Subject key identifier:   99:0A:1C:C5:FB:52:5C:12:1A:50:E6:4F:B4:4F:86:7E:2C:5C:3D:D4
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584F497D210DDB3CDA2A058A3700
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        209.107.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:21:0d:db:3c:da:2a:05:8a:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=930ac08e-8db6-4fba-8a46-470f8dbb7a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:42:3c:d5:9a:05:08:11:f0:a3:6d:b0:67:8b:
                    6c:31:bc:a8:8d:31:f8:15:a2:4d:ea:e1:45:d4:8b:
                    70:4a:7e:d8:4f:2e:59:c3:0d:54:d5:47:f4:c2:d9:
                    eb:b4:e4:48:f0:91:78:07:10:77:e3:e3:7a:38:14:
                    fd:42:02:69:82:dc:00:a6:02:a8:04:19:60:7e:34:
                    6d:00:3b:84:1d:66:c5:55:85:d3:4a:a0:d5:53:0c:
                    c0:cb:da:03:25:0f:b4:cd:8b:8c:f1:06:42:13:9c:
                    c0:66:66:46:2c:b7:cf:65:00:9d:ed:b2:a9:57:c1:
                    f0:33:e1:cd:93:9d:6e:50:44:d6:1d:d1:22:06:f6:
                    21:32:f9:2b:0a:9f:83:db:43:bd:ce:fa:13:de:9e:
                    b9:e6:0c:f0:d1:fd:17:76:b4:67:8a:5e:e9:39:af:
                    12:9d:3f:60:7d:36:d2:52:c9:11:43:d2:66:57:c1:
                    7e:6a:ae:ca:59:98:4e:3c:a7:d8:c4:db:3c:14:b7:
                    92:1c:0c:6f:c0:56:08:69:ba:88:53:79:7b:fe:14:
                    54:5b:34:91:a1:31:2a:27:b5:32:1e:79:fe:04:23:
                    2d:7f:c1:dd:d1:85:10:4c:01:a9:c6:32:3d:3c:1f:
                    8c:ef:4e:10:25:af:de:9f:93:a6:a4:f0:db:7c:0c:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0A:1C:C5:FB:52:5C:12:1A:50:E6:4F:B4:4F:86:7E:2C:5C:3D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/287ef630-99a2-3d8b-a99f-08d6be573b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:51:cd:fc:da:dd:3e:6e:a8:10:44:1d:fd:0f:44:dd:22:4a:
         16:68:90:76:35:1b:68:24:23:87:d8:6a:be:97:2f:d3:e6:58:
         af:09:85:41:36:f2:5f:17:08:b9:8d:24:cf:e6:67:48:0c:07:
         43:ea:6d:0a:84:b6:14:dd:f9:86:6d:3d:c4:8f:31:2f:95:b4:
         ae:2b:3f:7a:96:be:8e:71:44:05:39:18:6c:5b:8f:32:09:f1:
         0d:5f:d8:3c:70:7b:b4:62:e6:3c:71:91:92:3f:1e:4f:28:13:
         1f:23:ee:45:6d:59:e5:d2:83:d5:d8:bb:ab:84:c7:14:8f:ce:
         22:45:fc:ef:43:da:dc:56:f9:96:9b:f0:ec:26:a8:ab:7a:74:
         c1:8e:b7:e1:9e:8d:32:ee:8c:6a:d8:e0:83:6a:91:a0:84:5b:
         81:02:62:08:a5:8f:80:13:d2:37:c4:bc:fb:4c:fa:20:3a:4c:
         da:16:bf:da:23:ec:c6:c8:26:6e:38:36:5d:46:c0:96:68:a1:
         b3:a8:29:c3:5f:ac:ea:fe:1f:90:a3:21:49:db:8c:ad:6b:89:
         2e:69:0d:bf:79:f9:58:41:64:e2:a0:ad:fd:d2:54:00:fc:7b:
         bb:a7:5d:fd:89:9d:bc:12:af:7d:c5:d9:b2:fa:89:cc:72:2e:
         8c:7f:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:18:49 2026 by rpki-client