Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
File:                     6e84b623-e3a3-3f1f-88da-e527e9861998.roa (raw, json)
Hash identifier:          hfvuCK6jFY4P5v3d6cS7ZCgQy3k+VP+BnQn9Jws/q0Q=
Subject key identifier:   03:83:42:E1:35:5E:EB:4E:84:A7:2D:86:81:E8:A6:9D:C0:26:50:86
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584F497CFD11662710C836D52EC0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        209.107.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:fd:11:66:27:10:c8:36:d5:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=26c59d78-6dac-4940-a5f0-d7359e94c5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d3:85:51:c6:de:da:97:9e:00:95:59:10:fd:
                    5b:05:b6:85:61:b2:f2:c6:3e:74:48:16:1b:2d:4c:
                    be:3f:f8:e5:a3:62:74:bd:ca:c4:76:e9:71:31:c0:
                    65:ca:3d:3e:e0:53:70:64:39:a5:23:3a:47:14:48:
                    11:ba:c8:39:ee:86:9c:49:b1:7d:2e:13:01:89:4b:
                    cc:b8:07:af:2e:35:6b:05:1a:70:c8:89:58:ea:79:
                    c7:27:26:b6:da:f2:d4:2b:b8:09:db:bc:10:0d:42:
                    f1:9c:ce:d7:51:6a:1e:7e:17:85:09:af:4c:5c:ce:
                    ed:a7:77:d9:0d:c7:3e:39:11:1c:35:41:9c:ef:06:
                    73:02:95:ac:9d:06:9e:92:2b:3c:c0:d1:44:13:28:
                    cc:2d:a7:ad:1f:1b:9c:88:a8:34:4c:5f:c4:a1:77:
                    95:d2:ca:c6:86:0e:08:b7:52:2e:88:e0:0e:f2:ed:
                    d9:3e:24:b4:d5:86:5d:f0:f6:0d:5c:13:80:88:9a:
                    03:f2:2f:98:c5:69:35:bc:af:1d:24:bf:9e:f9:c0:
                    aa:cd:aa:de:d0:bc:62:fe:4f:b8:9b:7a:d2:c0:df:
                    ec:0e:2a:33:bb:0c:fa:e7:c8:21:33:1f:67:1c:83:
                    4b:ad:bb:0a:65:2d:61:a1:d7:36:d1:58:78:9c:09:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:83:42:E1:35:5E:EB:4E:84:A7:2D:86:81:E8:A6:9D:C0:26:50:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:65:62:1e:c0:33:be:d9:d4:62:f6:a9:41:79:5d:5d:14:
         a8:41:7b:d8:cc:cd:36:42:7b:34:83:a8:fd:58:70:45:56:a8:
         93:e7:ca:64:69:a2:16:cd:57:74:65:64:aa:4c:67:9b:fe:75:
         d2:49:2d:f4:70:2b:90:1c:68:d9:f7:05:c3:29:e2:37:e5:42:
         7f:78:35:9c:18:b5:5f:4a:3d:9e:9f:f3:9b:29:fd:18:a8:b5:
         0b:2a:11:68:a8:07:e5:da:cc:1c:3c:fc:5d:4a:b2:f9:4b:e1:
         cc:9c:a2:59:92:cf:e8:c8:33:ef:34:09:c0:93:d9:ed:3a:54:
         6d:70:11:47:6f:04:f4:a7:b1:04:44:90:da:00:9c:22:18:a2:
         f6:7f:37:5e:a7:83:af:4a:cc:6a:a2:b5:62:be:d8:43:7f:64:
         36:c9:ba:e4:9c:4a:1e:8c:93:88:09:95:e9:56:a6:78:48:33:
         e2:c7:90:50:51:1e:40:72:bb:96:a4:aa:3b:13:3a:b2:75:b5:
         3a:65:7e:31:de:ee:fa:34:51:2c:87:b3:6a:2e:39:5b:9e:64:
         47:db:71:b8:13:73:d1:95:1c:d6:46:59:fb:10:32:8f:4d:52:
         4f:7c:f1:21:16:bd:e1:cb:90:52:ec:a2:a0:c4:5f:cf:2c:53:
         cc:30:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:21:49 2026 by rpki-client