Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/7fb504cd-3f18-314f-8b86-8eba7dc2f463.roa
File:                     7fb504cd-3f18-314f-8b86-8eba7dc2f463.roa (raw, json)
Hash identifier:          Vt8+StO8GxuGMt/l8hOWjOz+f+yTvS4v4Ul9Z6tvmvk=
Subject key identifier:   9A:7D:CA:35:E5:BE:11:95:41:A7:66:F7:DE:BC:E6:05:F7:45:8E:B1
Certificate issuer:       /CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
Certificate serial:       010D0C9F4328584F43DD4B9119ECFE4042763B40
Authority key identifier: E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/7fb504cd-3f18-314f-8b86-8eba7dc2f463.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     62467
IP address blocks:        216.109.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:4b:91:19:ec:fe:40:42:76:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=45cf2c5c-a1e1-40f2-8827-9e5b3d956b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:de:5a:9c:10:c2:2a:c3:5a:cf:c4:99:aa:
                    2d:a4:4c:e9:cb:8e:d7:e7:6b:49:fd:4b:db:af:71:
                    86:fc:c5:94:d4:64:f3:34:82:41:7c:a9:76:6c:70:
                    a4:03:48:92:89:b8:90:d9:c5:4b:f6:20:6d:4a:f4:
                    ca:1b:3e:db:da:14:6a:97:e0:d1:94:92:84:65:63:
                    df:53:a1:b1:d1:bf:9c:00:0d:97:e9:52:b0:bb:18:
                    ae:9c:32:cd:26:b6:64:71:32:0f:dc:df:2e:7d:c7:
                    65:52:e7:c7:0d:6a:32:4d:dc:64:13:9a:89:64:0b:
                    92:6b:8c:15:86:d5:3d:fa:a4:46:80:70:76:24:37:
                    a3:d9:0f:1e:71:34:ab:be:12:a1:10:5b:b7:61:b1:
                    1c:f3:94:1b:7f:48:9b:19:f1:96:a3:7a:c1:0d:dd:
                    19:bc:b4:82:e8:e8:34:c3:62:7a:0a:80:82:67:5e:
                    d7:32:1e:dd:ef:a4:50:e6:a2:2c:3b:b9:0d:36:6e:
                    a6:a6:0a:09:72:ef:d6:c8:b5:1b:1a:6f:58:a7:af:
                    eb:e5:9d:d6:17:f3:52:62:54:0d:42:2a:d7:57:8f:
                    7f:48:5a:be:c7:55:95:bc:5e:35:25:11:3a:8b:55:
                    60:08:9d:ac:1d:5b:48:37:8b:c6:ad:9d:c9:4a:52:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7D:CA:35:E5:BE:11:95:41:A7:66:F7:DE:BC:E6:05:F7:45:8E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/7fb504cd-3f18-314f-8b86-8eba7dc2f463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:22:03:62:10:67:1f:29:d9:de:cb:52:60:1e:71:82:2d:
         42:5d:c9:c2:79:d5:36:44:80:7b:66:82:b8:88:37:9a:08:90:
         05:08:e0:18:9a:cf:7f:a2:fc:aa:59:87:1c:8d:e0:59:82:7b:
         36:7b:db:30:87:df:98:82:3a:19:b7:cd:5e:41:de:fa:bd:b2:
         8f:58:30:35:6b:58:66:a9:02:cc:3b:c4:c4:5d:70:c8:39:f8:
         8f:1c:82:4c:16:d3:35:bb:b6:8d:e9:27:03:11:2f:7c:ea:4c:
         db:a6:67:40:02:98:ae:3f:f7:05:af:36:63:84:aa:67:41:5e:
         1e:18:78:23:57:8d:64:28:e2:90:f6:92:38:47:2b:2e:8d:e1:
         08:e8:4a:4b:39:bc:d6:03:ad:a9:f9:75:d6:de:8b:5c:94:e1:
         ab:16:52:df:74:a0:24:e0:3c:f6:8f:d5:4a:95:70:9c:2b:01:
         04:a8:1b:0d:86:74:47:59:e2:a5:b3:95:f2:32:05:78:5a:61:
         d9:9a:10:5d:05:45:d4:d1:25:be:b6:c1:7c:bb:b7:d7:6f:50:
         7f:ae:05:51:95:33:17:6f:3c:19:f9:84:9f:fd:b3:e3:63:67:
         af:ce:e0:ad:c7:d9:2a:83:a1:39:d2:31:f6:8b:47:e4:7e:23:
         32:8a:69:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:50:40 2026 by rpki-client