Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
File:                     fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa (raw, json)
Hash identifier:          VCjfvVbFDthNd5ETLVSO7/U7EhZIO3qoGZeocavfyXQ=
Subject key identifier:   44:04:FC:8F:43:2A:19:1E:E7:D8:D4:16:EF:C1:AE:3D:EA:49:40:9D
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F4328584F49755C987F952FB88B6A1E00
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6122
IP address blocks:        165.206.0.0/16 maxlen: 24
                          207.28.0.0/16 maxlen: 24
                          207.165.0.0/16 maxlen: 24
                          209.56.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:5c:98:7f:95:2f:b8:8b:6a:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=636d3af4-e028-4529-bd06-5ec8a6d0ccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:15:ab:2f:ca:5f:c4:8d:e8:aa:0b:a2:a3:
                    76:c8:93:a7:b4:16:b2:7f:6a:1a:c7:1a:8a:8c:f7:
                    64:ea:b1:5c:fd:23:30:b0:05:30:a4:df:e3:2c:c0:
                    50:6e:8e:57:76:ee:ff:45:1c:24:f6:29:24:03:3a:
                    f6:2b:5c:04:ba:78:38:91:61:2d:5e:b8:0d:43:29:
                    aa:9e:cd:f9:6f:ba:3d:51:ea:23:db:8c:fb:15:03:
                    96:6c:9e:5b:03:55:3c:c2:6a:33:60:54:73:72:7c:
                    dd:06:91:73:d6:79:57:d6:7d:76:7c:0e:8d:58:de:
                    10:7a:20:c6:f2:97:e0:b9:47:cd:df:3a:71:e2:b5:
                    29:21:67:90:b0:23:b2:57:fb:27:56:9e:73:11:99:
                    2c:a4:dc:54:7a:1d:dc:bc:94:49:fb:a8:1c:59:e8:
                    4a:e0:43:25:9c:e1:15:ca:fd:35:af:04:64:3b:7a:
                    ef:e4:20:ce:10:2c:7a:2a:d4:1c:ed:3d:a2:4d:86:
                    07:f4:c7:0a:9d:a9:f6:0a:76:d4:9b:ed:d0:7c:e8:
                    d4:94:7a:da:c9:68:c4:45:08:9b:4f:3a:5a:e6:ec:
                    92:be:bf:a2:4c:e0:4f:55:dc:11:20:d7:6b:be:cf:
                    8d:90:40:08:97:d0:42:59:7d:26:4d:4d:8f:41:78:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:FC:8F:43:2A:19:1E:E7:D8:D4:16:EF:C1:AE:3D:EA:49:40:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/fe198f15-78ed-3e22-b41f-1f882ca8f9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.206.0.0/16
                  207.28.0.0/16
                  207.165.0.0/16
                  209.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:91:83:85:90:45:a2:ff:16:cb:44:88:38:ee:ad:82:f0:53:
         0c:53:f8:23:fa:16:d7:e9:f8:1c:f2:ec:8c:20:5b:62:3f:51:
         5d:e4:eb:9b:36:be:5b:7f:a2:14:22:2f:bd:91:6a:94:fb:67:
         a9:17:ea:08:cf:ca:41:2a:eb:5e:db:a2:85:d0:3a:b5:ac:27:
         c2:0f:04:ae:62:8b:8d:ec:78:7d:0f:86:ab:37:dc:2c:57:35:
         d0:61:11:61:97:3e:f9:a0:29:ad:f7:e2:05:58:7c:97:bd:a8:
         03:66:7c:c9:5a:b8:91:9f:8f:8b:2e:28:b3:b8:8e:a9:02:59:
         59:5b:d1:f2:fc:7a:12:b4:44:2e:9a:b2:a2:b6:fd:de:d5:ae:
         22:12:2a:e7:26:57:ae:12:a6:0c:01:be:16:97:51:9e:3a:51:
         e9:57:e0:de:b1:cf:f8:4e:5e:d2:f9:cf:85:99:2f:b9:f6:ac:
         7f:dd:e7:17:a4:c8:d8:7e:7c:5d:e9:21:f1:a0:b8:f9:18:34:
         52:1b:05:5e:c3:cb:4c:24:49:d1:3c:e8:1a:1c:f1:a3:7a:6a:
         ee:49:69:30:2f:ee:18:8d:23:3e:7a:8b:e9:b2:f7:08:cc:e6:
         3f:14:a0:9d:9b:82:ab:c2:d8:2f:00:5c:bc:64:f7:30:1c:22:
         64:22:58:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:16:40 2026 by rpki-client