Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
File:                     150163dc-8b27-3e02-913c-e2a4c34fdb91.roa (raw, json)
Hash identifier:          z4OzjrDUmPOfzkp3WENXrIUuHBzWWFP4ACnNr17saMU=
Subject key identifier:   22:24:77:F0:4E:FD:38:56:FE:11:F9:9E:0D:BA:03:CA:EA:F1:ED:00
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584F374D27FD99A83B505E581400
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     9312
IP address blocks:        93.179.124.0/22 maxlen: 24
                          94.103.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:27:fd:99:a8:3b:50:5e:58:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=f0fd2e94-fc87-4d45-ae1e-011d334067d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:1e:c6:a5:5e:d3:0b:fb:7d:05:65:82:62:
                    ea:c8:18:99:14:90:98:93:f7:c1:d6:e7:c1:fe:b7:
                    1f:fb:14:f9:4e:d3:c3:bc:a0:e8:df:93:67:c4:c5:
                    f7:d3:de:f8:9e:6b:a4:20:45:e1:e0:0d:3d:e9:46:
                    5b:7b:14:66:95:a8:42:e5:82:99:a2:30:ca:f1:72:
                    eb:c0:02:de:99:20:20:50:cd:73:ec:7b:cc:d4:31:
                    be:ce:51:a7:7e:a2:64:5c:1a:6f:6f:b2:9f:9a:9b:
                    95:83:1f:f6:31:07:11:3b:6c:b3:c0:06:fb:75:ac:
                    39:96:ca:1f:4c:d9:7a:b9:a0:3d:01:c6:9b:50:4c:
                    5d:c6:47:73:36:f1:3b:83:2e:1d:4d:58:35:72:b1:
                    12:0c:9d:ee:2a:5c:ba:90:c0:db:71:36:24:04:11:
                    5c:a7:ec:05:ed:4e:d7:ac:f2:53:09:5e:1f:8d:ae:
                    c4:61:20:32:4a:eb:85:5a:1e:b5:61:73:6b:9f:a5:
                    03:23:c6:16:85:c4:09:54:9d:07:b0:8f:03:7c:b5:
                    47:ee:d8:ec:64:a8:f6:ab:13:fe:fd:22:d8:04:55:
                    ad:22:4a:6c:3c:d6:8f:cd:f6:7e:14:8b:30:d4:aa:
                    e1:ee:c9:5d:d2:a9:50:b4:ba:01:a2:da:fa:c9:7a:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:24:77:F0:4E:FD:38:56:FE:11:F9:9E:0D:BA:03:CA:EA:F1:ED:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.124.0/22
                  94.103.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:86:7a:24:f9:17:67:cb:b7:e2:85:6c:c3:3c:67:2a:24:
         71:5d:be:5e:76:93:58:f8:3d:3f:fa:a6:a3:11:5e:20:e7:49:
         7c:cc:d9:2f:ae:31:12:94:ec:c4:b8:be:44:19:b1:26:2a:33:
         92:b7:aa:27:eb:f6:31:a3:dd:6d:72:8d:1e:00:a6:b7:85:85:
         08:5c:f6:9a:f9:d1:a7:d2:42:46:cf:07:e7:ec:3b:a5:ae:fa:
         e7:6c:89:80:a9:24:cc:37:bc:be:80:45:04:26:16:5a:76:43:
         a1:c5:e1:b6:8d:7c:9d:24:f9:fe:de:db:7f:f2:de:92:50:3f:
         f8:a4:6c:c4:d6:b5:3e:dc:1a:13:d3:c5:69:c3:bc:9a:00:80:
         08:60:6d:9d:af:c2:29:1c:b8:c4:f5:c0:5f:e0:56:b7:e6:65:
         e9:03:a0:34:a3:2a:11:3e:91:dc:00:28:0e:e6:40:b6:41:14:
         dd:95:d1:7f:04:5a:9d:8b:1d:49:22:7d:09:5e:6d:fc:9d:ab:
         92:4f:cd:82:70:37:21:a8:7a:ef:07:66:6f:e6:67:b8:fb:f3:
         25:db:b5:39:d6:c3:9a:df:66:2e:1a:2e:4a:df:c6:ff:ba:3e:
         6e:e9:54:65:67:81:32:ac:68:1f:75:34:e1:54:b5:bf:56:cb:
         e7:a8:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:34:24 2026 by rpki-client