Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/e9cd71e7-2211-3376-8b47-d59c7776df8a.roa
File:                     e9cd71e7-2211-3376-8b47-d59c7776df8a.roa (raw, json)
Hash identifier:          cHmPSinAcCsAjO01WIvbOYz8v7oflO9/mN7YwoORtO8=
Subject key identifier:   3A:C9:10:B4:CF:2D:3D:95:F5:DE:7B:E6:9F:BF:65:B2:8D:1E:FE:CD
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584F49891A401D5644D1CCCC2980
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/e9cd71e7-2211-3376-8b47-d59c7776df8a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10794
IP address blocks:        199.43.60.0/23 maxlen: 23
                          199.43.60.0/24 maxlen: 24
                          199.43.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:1a:40:1d:56:44:d1:cc:cc:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c0b1c604-8d19-45e4-9540-bdbe4c4be9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:17:21:c8:64:28:09:88:52:16:bd:ec:ba:
                    e8:8e:c1:cf:66:1e:32:ae:15:01:18:36:47:11:ea:
                    76:7f:ab:59:fd:7e:90:c8:bc:0d:13:b4:78:3e:2b:
                    93:23:93:2c:b9:e1:98:dd:eb:f4:ce:03:5b:aa:b6:
                    c9:51:ed:72:6d:a6:5d:c9:06:0f:1c:2a:f4:b5:cc:
                    f7:12:37:eb:04:4b:27:2a:e4:05:c8:d6:86:af:32:
                    ef:e1:ac:0f:60:ad:a4:ea:66:4c:37:27:37:4a:ca:
                    d7:f6:93:53:70:e1:2e:ed:f4:96:eb:b6:cb:45:24:
                    f3:24:f8:fb:20:f7:ca:f1:45:1f:4d:a1:e1:67:a7:
                    5d:b5:9c:bf:78:cd:d4:43:cc:d0:33:3f:ad:de:b3:
                    26:c9:36:1f:d7:59:7b:0b:a5:cc:3e:5e:9e:dd:f2:
                    7d:f3:af:78:20:3c:28:d7:88:c5:16:33:c5:bb:60:
                    40:5b:b0:6c:4f:7d:e5:d6:68:a1:34:5d:1e:1a:43:
                    79:c7:e4:c4:52:4f:f3:c1:24:1b:4c:c1:bc:52:b0:
                    54:d7:20:6a:8f:fd:8b:cb:5c:96:b0:cc:a0:aa:bb:
                    55:ed:cf:3b:50:4a:ce:1d:af:c6:82:be:1f:28:c5:
                    dc:15:f3:7d:b5:0f:19:9a:2c:e5:4e:03:40:2c:ba:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C9:10:B4:CF:2D:3D:95:F5:DE:7B:E6:9F:BF:65:B2:8D:1E:FE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/e9cd71e7-2211-3376-8b47-d59c7776df8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:92:95:f6:53:03:86:e3:18:9d:f8:b2:70:fe:d6:9f:bc:
         81:de:aa:8d:ec:7b:1c:67:02:f4:a2:3f:d0:83:02:72:20:09:
         3e:bb:5e:78:e7:93:0d:d1:87:8e:a6:ad:c4:e1:f9:56:80:86:
         26:21:09:8e:76:ef:45:68:7a:8b:04:15:a4:e0:a3:99:c9:e9:
         71:7c:0e:48:06:d4:18:66:ce:12:d4:82:18:eb:96:c2:95:e5:
         eb:06:ef:55:d4:2d:9e:46:c4:a5:73:ed:ad:ec:e4:19:9b:e4:
         67:70:06:53:55:06:41:24:ec:41:0f:31:2a:6e:ea:39:93:f9:
         39:4d:f1:b0:25:be:7c:5a:b3:21:a8:4d:e6:62:58:6c:fb:18:
         04:85:1d:61:74:c6:f8:92:4a:d4:74:d3:ee:36:27:9a:eb:f8:
         e4:fc:11:41:b9:c5:00:e3:be:b0:f2:8d:cd:3d:b9:df:05:da:
         6c:8c:73:a9:82:e4:3b:1d:13:a7:6d:c2:36:39:0c:88:95:f0:
         91:84:e0:3b:dd:ef:8e:cb:39:28:03:89:3b:d4:90:5e:ef:87:
         62:48:dd:f5:c1:45:0b:88:14:d6:12:90:0f:4f:0d:8a:ed:91:
         f1:e1:83:68:6b:a8:a6:55:94:ad:d7:d6:b2:75:c2:a0:48:c8:
         95:75:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:12:56 2026 by rpki-client