Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa
File:                     9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa (raw, json)
Hash identifier:          NyN0KB/1atZ+zrvyyyDwukUpX+YLi5YKE38j5XGQpyg=
Subject key identifier:   02:A1:6A:B7:E5:64:0E:D0:32:9A:90:C2:95:EC:7B:C4:FA:01:66:9C
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584F49773FA43BC7B60421982040
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        207.210.112.0/24 maxlen: 24
                          207.210.113.0/24 maxlen: 24
                          209.51.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3f:a4:3b:c7:b6:04:21:98:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=65abf4ce-77a5-4fab-a596-792c9e8abe5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:21:1f:0e:cd:36:2d:60:49:d8:12:73:33:
                    7c:90:68:ee:1e:3d:75:8b:c0:1c:3b:db:f9:79:e3:
                    06:d5:ef:d8:9d:a9:71:0a:07:f1:0b:41:bf:3a:07:
                    0a:a7:3d:b7:61:fb:18:90:19:6b:18:77:72:3a:86:
                    fe:f1:47:49:05:8e:3a:9c:06:c4:d2:42:23:f8:6e:
                    7c:3e:b6:8f:ad:15:f5:f3:70:cb:9b:f8:fa:f4:eb:
                    78:6c:55:fa:5d:98:5a:f6:41:6f:77:d3:ce:7a:6b:
                    df:2b:0d:66:ee:4a:b9:2d:03:86:68:8c:44:2d:bb:
                    25:8e:80:d1:73:ef:b3:84:59:fc:ad:a7:77:0e:db:
                    13:f7:07:a0:d1:48:5d:7b:50:b4:08:6f:72:ea:ad:
                    62:0f:84:4f:71:46:21:18:6a:4d:ef:0a:52:f3:71:
                    c2:dd:89:ed:72:89:6a:17:9e:fe:ed:64:ab:56:3e:
                    c1:c3:13:8d:79:13:7d:00:9b:7c:ba:e1:02:d5:e0:
                    e8:35:fc:98:b4:ca:08:09:d7:94:10:98:3a:9e:ca:
                    38:77:b4:22:8d:c5:86:99:f4:d8:11:ac:97:88:9d:
                    e9:54:cb:e5:b4:cf:50:51:be:1b:a5:82:64:91:3a:
                    f1:2a:ee:dd:e6:5c:57:1f:cb:b4:ed:1f:fa:53:6d:
                    07:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A1:6A:B7:E5:64:0E:D0:32:9A:90:C2:95:EC:7B:C4:FA:01:66:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9b4cbddb-faa2-329b-b7cc-9036654e5d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.112.0/23
                  209.51.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:65:36:47:49:4e:2b:ef:33:6a:b3:b4:fe:09:b0:09:36:
         8c:c2:dc:76:bd:dd:c1:5b:46:a1:ef:55:b1:11:2a:e2:2d:bb:
         68:81:ab:f8:69:4f:93:f6:09:d6:a0:45:13:ed:28:e6:de:9f:
         6a:75:06:95:81:fe:a2:4a:d6:77:5a:36:0d:e8:8e:a6:58:2d:
         00:ae:d0:19:38:ee:57:9c:ad:c4:0e:29:6d:c0:90:97:ed:07:
         f1:a0:ba:fd:73:6f:7b:c9:0d:de:76:85:3f:19:27:8d:d0:dd:
         28:7a:47:0b:65:61:bd:bb:8e:28:d4:fe:43:ce:74:84:94:91:
         92:21:06:cd:70:88:bd:b5:d5:20:51:4f:0d:26:57:29:a7:90:
         ec:61:28:c0:a3:a9:a1:d0:42:cc:c4:20:40:6f:b3:c5:52:51:
         cb:e0:f5:ac:79:9c:79:51:94:06:1e:53:2e:eb:8f:d4:7c:ff:
         c2:15:8b:ff:6e:9b:92:07:f2:64:38:c2:3f:a1:51:db:6f:0f:
         b9:a4:36:dd:0d:e9:da:56:b5:21:5f:39:de:fd:64:bd:a1:2a:
         85:63:20:26:ec:78:57:1f:89:e5:17:b7:ed:e7:24:88:35:c8:
         8e:63:1c:0a:4a:1e:a5:b4:2b:06:f5:c9:f4:0b:2b:57:89:83:
         ba:cd:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:48:41 2026 by rpki-client