Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/6dbc47a8-1bf4-3962-aa05-f2e89a9b93a7.roa
File:                     6dbc47a8-1bf4-3962-aa05-f2e89a9b93a7.roa (raw, json)
Hash identifier:          Twmg9LM56HdlmJ0Q1Yai5aCmpVPK1eQhb8lPykgKVdE=
Subject key identifier:   39:09:61:7F:47:1C:BA:04:31:CF:44:D9:3D:5F:99:B2:6D:B5:47:2E
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584F4975C6CA4864EBE54416C380
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/6dbc47a8-1bf4-3962-aa05-f2e89a9b93a7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        162.138.64.0/24 maxlen: 24
                          162.138.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:c6:ca:48:64:eb:e5:44:16:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=890f7ab1-0ac3-468f-93e9-a62082b8a531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:79:d2:aa:2f:35:99:2d:73:17:d5:4a:70:
                    87:60:b7:86:4a:58:66:dc:86:68:dc:fe:cf:a5:5b:
                    19:15:a7:57:52:bf:ed:95:4e:00:35:9d:3c:29:db:
                    ac:07:74:12:c1:72:7d:ca:6c:e6:46:97:53:ce:28:
                    fc:d8:ab:db:5b:fc:ae:cd:58:c9:0c:32:14:49:95:
                    ff:b4:9e:13:8b:ab:6b:85:c5:6c:1d:b3:69:27:41:
                    21:7d:f5:25:3a:a6:d1:a1:99:01:82:01:48:2f:d6:
                    45:a7:b9:52:c1:51:da:c9:ec:65:e9:85:23:ea:17:
                    2b:16:28:fb:7e:a6:2b:17:56:c6:00:6d:c0:94:64:
                    1b:25:6c:44:dd:db:75:e0:f3:77:d7:43:93:dd:bd:
                    89:11:d7:f6:98:41:8d:ac:00:f5:2d:53:b8:32:95:
                    b0:c1:49:12:29:c6:c6:84:e7:02:8a:21:b4:47:ba:
                    d4:c9:e1:bd:75:b6:a5:28:36:0a:28:30:ec:b0:7e:
                    b3:19:61:75:bf:da:40:a2:c6:a6:0e:2d:ba:09:1a:
                    d5:53:c3:5f:5f:eb:cc:3e:53:4d:5e:6d:87:79:f6:
                    4b:9b:69:9b:c4:3d:c8:da:01:df:c9:d1:95:98:28:
                    4b:47:5a:5d:ba:70:d4:0a:03:bc:39:cd:a1:78:a4:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:09:61:7F:47:1C:BA:04:31:CF:44:D9:3D:5F:99:B2:6D:B5:47:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/6dbc47a8-1bf4-3962-aa05-f2e89a9b93a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.64.0/24
                  162.138.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:f4:2c:35:45:60:7e:ea:75:ae:05:5b:1c:35:1d:91:8f:
         e3:50:7a:96:92:5c:2d:3e:12:a0:e6:e7:de:ca:bd:0a:32:6a:
         15:66:19:bd:0b:4b:e9:3a:4a:38:0c:2f:d8:6a:32:48:16:cd:
         cb:b0:fa:d3:e9:1c:54:58:29:7e:f6:1b:2a:e9:ca:9f:23:0a:
         60:01:34:3f:08:6d:e9:5e:06:70:bc:58:58:9c:d4:6c:7c:ae:
         e6:46:d0:10:fe:f6:95:aa:ed:76:6f:e1:b1:79:e9:8a:03:c3:
         ce:4e:5a:91:5f:b9:c3:4a:6d:d8:f9:52:bc:f1:ab:35:ed:44:
         1d:97:25:4a:42:72:de:f5:98:2c:1a:3b:49:bb:de:f2:17:70:
         d1:78:0e:1a:2e:b1:1d:a9:75:04:0d:20:3a:e8:9e:9c:76:57:
         be:fa:fc:6e:81:84:85:6b:4c:b6:52:4d:50:8f:52:37:3a:73:
         f1:73:9e:e9:de:4d:b0:37:fe:35:e6:be:5a:ba:e3:2a:7a:f3:
         11:c8:c3:b0:63:e1:ad:d3:dc:8f:9a:36:37:11:fb:f3:6a:78:
         e8:c4:f0:e5:b3:83:81:57:19:52:49:9b:1b:7d:f4:e0:b0:c6:
         2a:61:94:22:a9:9b:ed:e8:da:80:18:fa:e8:e7:8e:7b:cc:0f:
         14:cc:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:52:46 2026 by rpki-client