Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa
File:                     9f73b1b0-941e-3f42-871e-535df2f1c194.roa (raw, json)
Hash identifier:          zt3RO75F3lorW65LqAZKVDyC0UtcENU9Tk3wK4EI+9I=
Subject key identifier:   11:90:EC:BC:A2:F3:F9:DB:BF:CF:FB:7B:B2:1B:8F:03:BA:8B:62:EC
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F4328584F3482773CADAD7602709E2F00
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     32157
IP address blocks:        199.212.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:77:3c:ad:ad:76:02:70:9e:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=c3406438-1e33-4f8a-ae10-dda6aa13de4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:6c:e0:86:d2:0e:6d:d3:99:3a:47:1a:37:
                    dc:ac:bb:b5:9c:23:ce:a4:d3:b4:27:6b:8b:b3:67:
                    a7:16:fd:34:1b:41:01:0d:db:ba:e3:3b:f3:ff:16:
                    9c:6e:a2:3d:05:ca:af:5d:ad:47:4a:96:9f:69:47:
                    72:3e:06:c9:ba:ae:54:14:4f:77:b9:ba:33:c6:b5:
                    3a:dc:cb:39:b7:23:e1:81:f4:7a:23:38:cf:02:97:
                    6e:18:2e:40:ff:33:15:19:0d:f9:24:bd:84:e8:e8:
                    93:47:f6:b0:f5:f1:0b:c6:2d:e2:da:c9:8f:a8:45:
                    cc:aa:69:39:b5:33:74:9d:15:de:7a:cb:c4:07:9e:
                    7b:ef:2b:29:56:3a:34:81:5a:5a:65:d8:bc:cb:db:
                    2b:a3:ad:9b:45:2b:da:ad:df:8e:2b:3c:e0:50:6d:
                    e3:5a:10:87:26:29:33:e5:47:dd:73:55:6e:33:80:
                    46:57:13:60:3a:1e:3e:c2:4c:f9:12:21:3d:4f:b0:
                    10:80:58:29:85:76:24:66:9b:02:a0:71:76:fa:96:
                    69:66:85:5e:fa:ac:57:1f:97:17:84:87:51:75:f1:
                    72:7b:59:d8:d3:52:86:7e:36:17:06:d6:87:c0:a7:
                    f4:c0:81:2f:39:3c:4f:2e:49:ce:2d:62:b8:ca:cc:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:90:EC:BC:A2:F3:F9:DB:BF:CF:FB:7B:B2:1B:8F:03:BA:8B:62:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:6d:d4:53:a7:26:36:b4:7e:aa:fe:f0:39:aa:48:f4:e4:
         42:62:69:03:87:f8:36:43:6e:0f:a2:54:74:78:6c:91:d0:e0:
         88:96:bb:b0:d8:ff:58:31:16:21:d6:b4:5f:4d:a6:3a:db:91:
         1b:5e:d0:cc:3b:49:53:ba:c7:c1:cf:5d:25:53:70:69:1d:c3:
         68:53:62:26:01:48:5c:25:13:23:38:76:b0:fa:e4:15:a6:83:
         74:b6:e6:f8:17:34:2b:0f:86:2d:6a:c6:bf:23:85:51:f7:11:
         89:88:71:e2:3e:f1:a8:ab:aa:df:65:64:3b:23:9c:45:6f:ab:
         b1:73:7a:db:e1:57:83:f4:0e:2c:a6:c4:03:9b:64:61:14:f3:
         cf:75:1a:b3:6d:32:88:8d:3f:4c:d7:dd:ee:e6:9f:e7:1c:10:
         f7:e1:af:0e:49:09:94:9c:b3:ed:69:c1:df:33:30:64:d1:f6:
         a7:24:54:42:23:d5:79:6b:d8:b1:a8:16:d5:cf:e0:0c:3d:f9:
         f4:f0:fb:d7:0d:69:f3:70:14:27:06:e5:a2:01:10:b7:bc:95:
         2a:9a:39:e0:30:f0:1e:69:c7:cc:bc:59:7e:5d:25:9f:ec:29:
         21:85:4b:55:99:eb:0f:95:6c:76:5b:1d:ae:3d:ed:4b:5a:f0:
         fb:75:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:40 2026 by rpki-client