Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/0193dc3b-dd33-377e-aec7-4520daae9c81.roa
File:                     0193dc3b-dd33-377e-aec7-4520daae9c81.roa (raw, json)
Hash identifier:          lbdaXdaxwTQcIFBa4Pynn7BT2ACkGT8MnsWH37728rI=
Subject key identifier:   99:28:88:8F:FD:15:94:44:F8:89:96:1D:5E:2C:86:1F:2F:AA:25:4B
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584F3CE28E091219683C78E41F80
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/0193dc3b-dd33-377e-aec7-4520daae9c81.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        72.162.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8e:09:12:19:68:3c:78:e4:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=4c9880f6-af16-4500-88c9-7dc1c1393fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:87:5c:4a:2e:bf:88:0a:31:6b:b1:57:27:
                    c8:87:d3:ae:0d:60:fc:78:3a:1d:7b:4b:56:26:1b:
                    9d:82:c5:0a:ff:9e:78:46:23:b7:72:62:ef:39:66:
                    78:98:6e:41:50:77:da:58:06:e0:58:58:1c:4e:0e:
                    d7:e3:59:bd:ee:90:3c:97:25:04:9c:3b:8a:29:2d:
                    ed:b4:37:ae:84:65:82:bd:3a:19:74:81:f6:dd:0b:
                    36:df:eb:5d:53:57:5f:bc:fe:91:aa:1e:69:89:60:
                    74:97:30:d1:6c:7c:79:40:47:b8:a1:1a:c5:1b:d6:
                    6b:01:98:95:d3:64:ea:e5:b8:93:3a:ff:1e:64:7b:
                    aa:b2:db:90:47:2a:b6:cd:d9:ed:0e:07:67:de:ac:
                    66:f5:d6:30:d6:6c:c5:43:af:29:92:f8:3f:f1:a5:
                    ff:89:cb:06:1c:f9:a4:dc:4a:ba:4c:50:32:a7:10:
                    86:ac:af:c5:50:dc:30:1c:9e:c6:38:ad:69:88:e9:
                    49:30:8f:04:79:4f:2a:f2:e5:0b:ef:66:ac:11:50:
                    8b:d9:ea:7e:aa:32:33:6a:b3:85:72:5e:5d:a3:9f:
                    81:3d:04:ef:55:39:7c:11:ec:c6:57:e3:27:1d:fd:
                    5d:26:4d:84:8d:18:62:7e:cb:e0:44:0d:c6:9f:c7:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:28:88:8F:FD:15:94:44:F8:89:96:1D:5E:2C:86:1F:2F:AA:25:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/0193dc3b-dd33-377e-aec7-4520daae9c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2f:bc:87:0e:63:ad:d8:aa:91:36:02:28:f9:07:ec:74:c6:
         b1:ac:93:60:c9:6b:80:14:70:29:f7:32:7b:a3:c7:f0:8b:4f:
         af:92:a1:73:93:32:aa:ee:23:5a:1a:44:d1:06:ac:7a:d8:52:
         c0:01:db:23:57:76:95:a0:c9:62:b3:13:71:35:47:60:5f:81:
         29:cd:bd:3d:29:93:96:72:a7:15:c4:37:40:b6:02:df:51:14:
         83:df:6d:ea:f9:50:00:4d:f2:74:45:10:d6:52:07:88:8f:2b:
         a1:9a:2b:c6:88:5d:f2:58:e5:9d:e0:82:d4:05:36:90:57:4d:
         c0:31:1a:2d:28:b0:2d:a4:93:c8:8b:e2:d4:03:75:1d:d1:cb:
         16:69:9b:23:ca:86:83:13:92:75:f9:46:c6:be:0d:ce:be:1c:
         45:6e:74:ec:1f:08:1d:a1:df:9d:56:67:5f:b9:fe:0c:34:51:
         71:9d:bc:a8:6f:d1:68:81:5f:f8:ec:00:d8:35:5a:28:a6:87:
         6b:66:81:f9:e3:85:fc:5d:3e:01:7c:35:54:a8:3d:c3:67:a0:
         ef:4c:e0:f1:18:02:41:bf:6e:80:fb:b5:7a:1a:b5:dd:52:bb:
         97:fc:0f:7e:35:80:bc:10:c8:cb:e4:cc:56:66:11:97:e3:55:
         d9:ab:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:07:18 2026 by rpki-client