Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa
File:                     40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa (raw, json)
Hash identifier:          Rqomh/BUYkoao7WVp4qbNwbHD97b1rMgq7uIw/jc2sU=
Subject key identifier:   6F:56:0E:58:69:49:56:A6:7A:D1:D1:86:D9:18:B9:4A:28:ED:4D:69
Certificate issuer:       /CN=58520fc1-e07b-4b1b-ad59-5756198c9756
Certificate serial:       010D0C9F4328584F4972D4697E47A2E27AFC0C00
Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        199.181.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d4:69:7e:47:a2:e2:7a:fc:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b3ecdc81-493e-4b5a-9d7a-820866aeb312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:8c:74:1c:66:0c:b3:ab:a0:fc:92:8b:03:
                    91:8c:9c:46:25:fd:d9:50:e5:0f:e1:ac:a4:39:5d:
                    bc:0f:73:a9:a8:d3:2d:87:2b:63:5e:9a:d2:53:5d:
                    a0:78:8d:93:dc:68:9b:36:1b:9c:b1:86:16:e5:c9:
                    79:99:d6:0c:77:3e:2e:31:b1:d2:6d:37:8d:62:ae:
                    6a:b3:a4:cb:e9:f9:08:fb:85:f9:b3:b2:b7:71:7d:
                    5b:81:f4:71:95:64:f0:4a:58:59:69:28:a1:40:14:
                    1a:77:08:f6:95:3a:b0:1b:fe:53:ce:84:5d:26:66:
                    e3:87:f9:2e:99:5e:c3:cf:54:bc:de:b1:a0:3d:f3:
                    68:39:18:5b:df:af:dc:02:c1:d8:1c:e5:44:d1:34:
                    0f:12:fe:5f:f9:2b:e0:c8:0e:fc:19:3d:ab:d4:95:
                    f0:9e:71:65:03:e4:42:57:31:00:f6:33:62:61:31:
                    92:7e:a3:56:0c:e6:5f:7f:fc:15:17:8f:10:2b:75:
                    ac:fb:f9:65:d6:63:51:43:af:18:92:1a:ce:a4:47:
                    41:59:69:eb:68:b1:4c:a5:3a:75:eb:8d:da:b7:c1:
                    48:5c:8f:0e:12:f0:96:35:ac:7d:26:be:9a:58:bb:
                    ba:57:7b:fe:21:5d:4d:08:80:c8:b0:e6:62:06:32:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:0E:58:69:49:56:A6:7A:D1:D1:86:D9:18:B9:4A:28:ED:4D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:0c:cc:96:6d:dc:b5:45:7c:a9:a7:0c:b9:d1:94:1c:93:
         2f:36:4c:27:05:fe:ec:ff:0f:7c:0f:19:a1:be:62:44:73:ca:
         e6:eb:36:15:15:a9:e8:06:dc:50:36:e0:11:97:97:4e:35:17:
         80:e4:8c:f2:e5:db:e3:25:d2:3b:d8:72:f5:b6:2e:10:3f:0c:
         3c:e9:65:d3:37:94:2f:ff:be:1d:4e:da:03:ab:cb:5e:c4:7f:
         44:f6:fd:98:8c:11:66:b8:4d:c7:e0:f4:24:9a:08:ee:1c:07:
         80:9e:9c:7f:f8:b7:ad:0a:d1:96:54:42:f2:63:e9:50:b5:e9:
         b1:c2:c2:73:ed:64:e3:da:1a:8a:98:d2:58:db:be:04:14:0e:
         b3:65:3b:e6:51:0d:7c:0e:11:0a:a9:55:27:36:87:72:66:ab:
         85:8b:a6:2d:1a:0e:b7:fe:d8:23:df:7f:7b:6b:04:c6:5d:a6:
         ab:a0:32:bc:08:87:cd:a9:8f:2e:1b:9e:4c:45:da:36:4f:21:
         e9:4a:11:b5:4e:e9:c3:61:4c:09:5a:9e:57:bb:6a:69:ab:b0:
         c6:79:48:81:31:a9:5c:ff:9c:34:3f:cb:54:f1:89:76:1d:7f:
         3d:70:20:e0:58:a7:24:af:11:d3:0d:86:ad:93:33:9f:3a:a1:
         6e:ba:d5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:44:53 2026 by rpki-client