Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/a085db7a-feb3-3680-9962-66de937697bd.roa
File:                     a085db7a-feb3-3680-9962-66de937697bd.roa (raw, json)
Hash identifier:          XWSFsgvSC/UpOBlw/UTPYee3PEOGVbIisygxRg5d2cY=
Subject key identifier:   65:85:DD:37:19:50:16:F0:1B:83:C7:91:B8:D0:F7:AD:AF:74:C7:31
Certificate issuer:       /CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8
Certificate serial:       010D0C9F4328584F20F7B06103012C16925B2FF0
Authority key identifier: BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/a085db7a-feb3-3680-9962-66de937697bd.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     402169
IP address blocks:        186.241.64.0/18 maxlen: 18
                          186.241.104.0/21 maxlen: 24
                          186.241.112.0/21 maxlen: 21
                          186.241.112.0/22 maxlen: 24
                          186.241.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b0:61:03:01:2c:16:92:5b:2f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=c2a5e369-0720-4f89-afb9-ea50e036e829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:fa:a8:97:4a:be:9d:5f:f7:72:a9:2f:3a:
                    85:90:38:56:0d:98:4d:7e:6d:88:79:14:23:d6:6a:
                    5e:60:18:9c:21:95:9b:db:42:c2:54:1a:8f:73:f5:
                    88:a1:fd:d3:96:cb:d9:d0:31:8b:4d:7e:95:8e:19:
                    f4:e8:6e:66:8e:aa:c5:c3:3c:df:ce:2a:56:70:55:
                    e8:c2:2c:d9:bb:82:00:6d:cb:6a:ec:6e:1c:10:98:
                    b5:5c:f2:d7:26:a5:d8:50:b1:18:29:c1:07:df:4d:
                    3a:c7:f1:48:e1:20:a2:1c:a3:d0:dd:8e:31:6d:32:
                    4f:e2:30:35:9b:af:9c:58:4b:63:a3:2f:9e:e7:98:
                    1f:7e:56:73:43:5b:ae:2d:f4:c9:36:7a:65:f4:6e:
                    f7:9a:23:97:b6:fd:a6:36:4e:c1:1f:47:94:60:87:
                    f6:e5:0b:fa:83:4a:84:f9:b9:d2:38:b3:f1:e1:a8:
                    36:e8:f0:10:86:cd:d1:fb:41:ae:76:e2:9c:78:df:
                    27:58:2c:57:88:da:23:a7:7a:42:49:7e:9b:2a:36:
                    3d:7a:58:b5:38:59:a3:15:5a:c4:41:d2:ee:2d:2c:
                    46:1b:0a:b6:21:f7:5f:5b:c7:cf:0c:46:e2:e8:ca:
                    e9:1c:e3:2c:f6:12:24:9c:bf:59:e9:6a:7f:6d:cd:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:85:DD:37:19:50:16:F0:1B:83:C7:91:B8:D0:F7:AD:AF:74:C7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/a085db7a-feb3-3680-9962-66de937697bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.241.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:96:b3:75:a5:dc:bb:0d:01:aa:a0:a2:50:41:0c:e6:de:
         b5:02:c0:16:80:5b:54:1b:db:4b:8b:19:cf:97:ef:6d:7c:00:
         b5:4a:1d:c3:ef:12:69:73:37:f6:54:9e:85:8e:2a:f2:4a:9d:
         86:06:23:f3:aa:a9:94:27:fb:83:6d:a6:c3:93:62:d3:64:90:
         e8:9e:2e:16:39:18:ec:b6:e1:2d:c5:b1:c6:40:a5:94:51:0e:
         c6:d5:45:46:4c:b4:c0:30:eb:3f:14:70:e8:4a:3e:a3:f5:67:
         1d:c6:70:f9:dd:b7:d7:d6:5f:dc:09:1d:c3:a8:10:1d:6b:f7:
         9f:f8:54:72:d6:dc:6c:83:1c:ec:df:bd:d0:9f:58:20:8b:6d:
         f5:c2:4c:2a:31:22:97:41:74:cd:97:86:0a:e3:81:37:97:1e:
         dc:60:73:8b:6a:16:09:83:c8:57:81:af:c5:83:06:1e:23:ab:
         4d:61:4a:09:22:6f:e3:44:36:63:03:66:4f:ca:1f:d6:d6:c4:
         6e:5c:af:e9:9b:4b:2e:0e:69:df:87:5c:90:11:de:13:ba:2a:
         c1:50:c7:d0:2a:59:59:63:24:cd:8b:b3:ae:33:44:45:30:bf:
         2f:81:f8:db:86:64:58:fa:26:2d:5f:e9:14:de:10:fc:65:5b:
         75:91:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:49:34 2026 by rpki-client