Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa
File:                     d78030db-8b0b-346d-bbfe-bc1ab103241e.roa (raw, json)
Hash identifier:          PZKZDA/O1pm3lSFwJKdxUeOdji/LaBniNToFsdc3wWg=
Subject key identifier:   72:BD:6E:6B:CF:01:C5:AE:6A:DB:4E:A8:CF:BD:97:F9:9C:DD:1E:B9
Certificate issuer:       /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial:       010D0C9F4328584F3E47E4AD4E11CD02DE4A1180
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     40788
IP address blocks:        24.156.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e4:ad:4e:11:cd:02:de:4a:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=0d901f10-f88f-488a-9159-a4fcbbb71251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:ef:0d:e8:0f:f4:c5:da:25:43:0f:4c:fa:
                    63:e4:31:2a:a3:24:33:ab:dd:70:c0:a1:3b:16:0a:
                    76:cf:10:23:27:fc:11:41:64:e4:ba:61:2f:ec:ed:
                    9e:b5:a1:ab:d6:c2:d9:df:02:35:e2:93:54:74:ff:
                    36:95:eb:85:90:1d:be:88:12:41:f0:2f:23:a4:79:
                    d5:b3:5e:49:39:93:9d:5f:88:41:4b:6b:af:7f:d1:
                    40:f6:8d:9a:e7:c9:65:bc:4f:02:60:ca:88:c5:ab:
                    5d:8e:97:7d:c3:ad:8a:bc:26:25:21:d2:03:d7:0a:
                    ed:6a:d0:ac:9a:3a:89:86:f6:8c:08:ee:79:54:cf:
                    b8:06:0d:a9:55:6f:7f:ad:1a:ed:e1:6f:3c:5f:d6:
                    ca:3d:44:9e:8e:52:da:7c:db:1a:d4:fe:42:0f:41:
                    20:8f:c5:63:23:f1:83:86:b2:a4:f9:46:51:cc:e3:
                    ef:0d:71:95:e2:ea:72:a8:0d:37:49:8d:e4:10:97:
                    24:88:cd:4c:58:bb:e1:c6:75:7a:e1:86:b0:ca:dd:
                    ee:99:0d:41:76:66:59:2c:c0:96:2c:6c:34:f3:1e:
                    2d:68:01:d8:ca:17:29:62:cd:08:e7:78:d7:3c:71:
                    56:d0:7b:87:48:73:f4:b1:a8:d5:57:88:28:46:a6:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BD:6E:6B:CF:01:C5:AE:6A:DB:4E:A8:CF:BD:97:F9:9C:DD:1E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/d78030db-8b0b-346d-bbfe-bc1ab103241e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl

            X509v3 Authority Key Identifier:
                keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.156.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:ce:04:19:12:8c:c4:18:19:21:4c:2e:40:03:2d:ad:0a:
         53:e4:ab:9b:a0:2b:ea:0d:82:6f:38:37:68:7d:f8:68:3d:80:
         70:c4:65:3f:ff:b1:49:32:41:d8:54:ae:d7:2f:77:57:a5:48:
         f9:c9:62:98:6e:21:02:1f:3f:66:f8:22:b9:9f:6a:9a:ba:63:
         ea:d1:9f:4a:1c:6f:b8:e1:18:8b:95:0a:0e:63:eb:f3:c1:c4:
         2f:46:1e:34:f3:d2:68:91:bf:ef:21:d3:f7:69:56:cb:54:1c:
         80:55:83:e9:b4:88:7c:3d:f6:1e:27:6c:a8:18:9e:bf:83:d2:
         8e:87:b6:9e:cb:f7:af:9d:f5:d5:77:02:a1:c7:82:10:9b:42:
         74:0f:89:c5:c3:a7:b7:43:d3:3a:d2:da:3f:53:61:79:6e:ec:
         a0:7b:06:e9:35:d6:5a:2c:0a:fb:8e:69:2a:e0:7f:89:45:dd:
         6a:af:2f:82:2b:a2:18:02:10:63:83:f2:7f:15:dc:5f:4b:d4:
         71:aa:8f:88:9d:ad:e1:e8:7c:00:96:f8:81:bc:87:26:7f:a2:
         3b:bd:6c:79:fc:b8:90:e5:cb:e1:f7:96:0f:e0:07:8a:89:b4:
         a7:5d:e7:b1:84:2e:55:37:18:6a:19:9c:f1:72:22:05:e0:cc:
         83:3a:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:12:35 2026 by rpki-client