Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa
File:                     6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa (raw, json)
Hash identifier:          aPmAj63Z7n1ilnCo1K/2qXPbZYZpUlhvScJs+LQBPI8=
Subject key identifier:   69:20:FA:C2:F7:96:F3:D6:75:09:D0:2D:76:D1:F3:40:4F:5D:F8:3E
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584F4973ACF916AD67B800B6AA80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     64249
IP address blocks:        207.32.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ac:f9:16:ad:67:b8:00:b6:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f0131481-2a06-42a9-b565-d719ab0e00e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:ca:5a:9f:51:b7:d0:f1:91:52:83:7c:ba:
                    4b:a3:0a:d8:fc:a1:f9:ba:51:71:d1:0a:97:36:49:
                    02:05:58:c8:59:a4:3a:2f:1e:a1:22:1f:42:a4:b4:
                    71:58:0b:bc:60:a7:4b:9e:f9:48:04:f8:0c:4b:f8:
                    2e:8d:8f:d4:46:2c:b9:69:4b:7f:f3:46:7c:51:4d:
                    dd:8d:03:fa:53:61:f8:01:cf:8e:de:66:bb:f4:11:
                    8d:62:c3:16:d4:77:3c:a3:f0:05:52:57:b7:52:42:
                    9e:12:41:ea:3e:c8:d3:6e:6f:12:96:3e:9e:45:14:
                    3a:b8:ba:07:5c:60:ec:c6:68:f5:ba:f4:ce:5e:1a:
                    6d:cc:02:99:2f:19:c8:13:92:49:5a:d6:23:bb:f0:
                    4b:80:8e:21:58:f5:25:c7:12:6c:63:27:dc:ce:be:
                    5a:09:5d:bf:99:19:78:dd:7a:f9:02:ed:99:88:e5:
                    f9:77:44:ea:08:84:d4:2a:bb:d0:c5:a1:e0:6a:62:
                    82:26:0c:e8:9a:a1:c1:d0:c7:b4:64:8a:b0:72:9d:
                    4a:3c:18:0c:0c:f8:95:b1:4e:62:9a:a2:56:e3:02:
                    18:3d:8c:c8:90:38:ea:67:3f:ce:12:60:f5:d7:ed:
                    30:34:4f:98:49:64:a0:1b:6e:c6:94:60:f5:40:00:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:FA:C2:F7:96:F3:D6:75:09:D0:2D:76:D1:F3:40:4F:5D:F8:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.32.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:c3:e4:c7:ae:54:fe:0e:05:0f:31:fe:2d:ec:18:d2:bf:
         eb:05:fb:bd:29:46:8e:11:82:48:72:a0:fc:7d:db:e4:33:4d:
         f7:0b:4a:1b:af:ac:c1:5a:9f:91:59:c2:35:9c:2b:8f:4d:b7:
         08:0d:01:97:8e:55:ec:be:46:ff:66:5e:15:da:26:8a:49:8c:
         97:e4:ad:8d:b1:2a:d2:75:8b:7d:9a:c3:51:e2:5e:d0:a9:2a:
         dc:4a:f6:aa:34:55:d7:4b:af:cf:fc:91:86:d2:37:7e:e9:05:
         0a:22:be:8a:8f:81:96:a8:f9:6d:6a:e5:b8:f6:57:6d:9c:da:
         f2:3e:4c:c0:91:9b:9b:2c:a5:5f:6e:7d:ca:52:8f:74:cb:24:
         ef:36:ad:f0:6d:d0:ba:b7:eb:17:8f:13:f9:06:65:c9:d3:dd:
         5a:87:b8:bc:a1:5e:a6:f8:e1:24:c6:39:7a:0b:a8:1a:4d:d7:
         d5:4c:08:7e:93:c7:7f:e9:02:b9:a4:e2:07:64:91:c7:75:a0:
         af:60:4d:b5:6c:77:85:c9:f4:ab:eb:4e:aa:9a:40:86:e9:97:
         b6:4d:5a:6e:4d:80:01:4c:dc:ac:36:a0:8e:3e:dd:13:76:19:
         f8:49:20:38:a1:46:d6:be:e0:29:43:27:41:b6:72:33:3b:48:
         79:d3:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:25:55 2026 by rpki-client