Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/9f614029-2c79-3817-bf66-1ff6fdc9b475.roa
File:                     9f614029-2c79-3817-bf66-1ff6fdc9b475.roa (raw, json)
Hash identifier:          VBgEj/d63RAiXAf2nC9WtrdftKXq4kfreeXQq3xM+ls=
Subject key identifier:   4C:CD:8E:C3:04:B8:09:F7:72:9D:9D:2B:36:70:85:44:46:1D:68:F0
Certificate issuer:       /CN=56964c1e-1743-472d-943f-01fba0dace8c
Certificate serial:       010D0C9F4328584F49735DB8FB90752CFEF16B80
Authority key identifier: 34:C1:BA:95:53:5E:D5:B5:78:B2:C6:DE:20:61:14:67:24:27:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/9f614029-2c79-3817-bf66-1ff6fdc9b475.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399712
IP address blocks:        206.197.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/56964c1e-1743-472d-943f-01fba0dace8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/56964c1e-1743-472d-943f-01fba0dace8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:5d:b8:fb:90:75:2c:fe:f1:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56964c1e-1743-472d-943f-01fba0dace8c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=89b01e09-07fd-4161-a8fe-e66aae604935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:df:99:b8:e7:e0:5d:31:de:38:4b:16:12:
                    15:18:b4:e5:92:78:be:5a:41:b5:97:db:fb:bb:d8:
                    df:df:03:b0:df:17:d2:bd:b8:2f:33:8c:ce:92:95:
                    86:e6:3b:2d:83:2c:5a:f7:f4:6a:01:27:5f:16:5b:
                    ec:75:b6:c6:19:4c:6c:19:c6:7a:d4:eb:0e:8a:15:
                    77:38:28:d3:20:8f:f9:38:16:06:00:d4:ff:cc:6d:
                    0b:b0:ec:d6:9c:05:c7:4b:fb:f3:06:fb:11:8e:c4:
                    c4:cb:4f:b9:65:ca:33:2c:21:d0:9b:79:96:46:e0:
                    79:af:18:e2:16:93:af:37:c7:7c:04:eb:39:6b:bc:
                    ef:74:f1:ab:24:37:bd:e5:19:c3:ea:14:97:06:a0:
                    18:00:35:14:74:5d:9c:11:3d:10:53:1a:be:fe:e1:
                    10:fd:a4:46:b5:e6:a3:4e:db:d3:44:b7:ae:87:15:
                    2d:2f:de:8f:88:2d:60:49:ef:cf:6c:1c:33:ba:72:
                    90:e7:f9:76:55:11:ae:6b:de:89:53:65:d4:db:83:
                    11:00:02:2b:8b:97:43:0a:39:85:a3:5c:2a:7f:a8:
                    22:c8:d9:63:34:ba:db:9a:c1:62:69:44:44:4a:4d:
                    9c:38:51:2c:af:d7:e9:5a:db:e8:9a:fc:bf:c2:a5:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:8E:C3:04:B8:09:F7:72:9D:9D:2B:36:70:85:44:46:1D:68:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/9f614029-2c79-3817-bf66-1ff6fdc9b475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c/56964c1e-1743-472d-943f-01fba0dace8c.crl

            X509v3 Authority Key Identifier:
                keyid:34:C1:BA:95:53:5E:D5:B5:78:B2:C6:DE:20:61:14:67:24:27:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/56964c1e-1743-472d-943f-01fba0dace8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:14:87:d6:11:20:cd:0d:63:d7:4b:a0:84:e8:7e:19:b8:
         cf:2a:ff:17:70:c7:5b:6e:31:df:3b:8e:e8:ff:c7:e0:1a:23:
         14:48:e3:da:2b:95:ab:b8:d1:a8:8a:0c:19:52:05:d7:19:5d:
         6b:2f:2a:09:10:c7:ef:c2:50:64:85:50:b2:a8:4b:35:00:fe:
         00:1d:b0:de:2c:4e:66:ab:c8:bc:d8:9e:61:04:be:20:47:9e:
         0d:6e:22:bb:39:be:a1:7d:93:c3:ab:bb:89:2e:30:b3:61:ed:
         9c:72:be:df:aa:1e:f8:e5:a2:ab:a2:cb:02:d6:f8:fe:4e:09:
         3f:50:ce:20:37:d4:bc:65:62:22:c1:e5:f1:b1:46:8e:8f:39:
         15:50:59:87:92:f6:11:44:f5:29:d7:ff:84:d7:2f:ca:7d:6c:
         a5:1f:51:e2:e7:7d:fa:05:06:39:13:d7:90:3f:c3:0c:89:19:
         14:cb:98:d0:42:f9:a7:32:cb:c7:98:07:63:ec:c1:3f:32:31:
         55:5f:51:48:da:80:04:6e:89:40:e6:20:31:ab:51:ad:e0:ab:
         28:ee:b0:2c:e4:b6:2c:68:b4:01:4d:3e:ed:16:66:46:6b:24:
         f1:d9:d2:03:88:ff:d5:f4:ab:6f:b3:25:e3:b4:2d:f1:e2:8b:
         df:c7:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:04:40 2026 by rpki-client