Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/29313107-6437-3d59-9eba-a5d8d3c5ac86.roa
File:                     29313107-6437-3d59-9eba-a5d8d3c5ac86.roa (raw, json)
Hash identifier:          t53tqUZzdFMfStkq6TGXhFBVOQSfeDexrAJ6R5nH5nU=
Subject key identifier:   A3:EF:9D:33:BE:49:07:14:0F:DC:17:C3:BD:9D:BB:55:F7:C5:81:B3
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584F498C0812D780196975099D00
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/29313107-6437-3d59-9eba-a5d8d3c5ac86.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21669
IP address blocks:        209.212.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:08:12:d7:80:19:69:75:09:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=eede33c3-ad28-4760-a053-91131969db8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:6e:6f:59:54:6f:fa:a8:98:7f:cd:c3:d6:
                    e5:bb:65:cf:f9:9b:36:b7:a8:7e:fa:61:6f:68:48:
                    61:59:6a:76:99:cc:f7:37:da:5a:3d:a0:6e:ee:73:
                    5d:68:7b:19:ff:95:df:b6:8b:fb:ae:8a:9b:f2:f0:
                    cf:bd:bb:91:01:20:67:05:01:c2:6f:9f:52:58:8d:
                    90:f0:73:43:d0:c6:1c:ec:5d:78:1e:f5:9b:cf:91:
                    1f:f7:b8:c4:b5:46:26:fd:a6:6f:b4:66:2a:ad:72:
                    3d:e5:39:6e:16:3f:90:c6:b8:64:67:f2:6f:1b:04:
                    9f:5f:a5:52:65:5f:8a:1d:13:91:03:91:f9:60:d0:
                    49:89:56:c4:c0:8d:7a:34:71:b0:e5:b1:3c:31:27:
                    72:a3:c9:e0:46:39:5a:00:a5:e2:28:e2:26:2f:f9:
                    40:84:24:83:15:00:73:27:8e:a7:d3:1f:fe:75:ab:
                    53:e9:0e:e0:9d:1f:e9:6f:72:5f:6a:2f:7f:3f:53:
                    b1:f5:ed:90:c7:75:db:69:49:f9:3f:d5:3f:22:90:
                    81:34:a1:ed:72:f7:63:28:3e:ae:5d:7b:d6:91:ad:
                    b2:2b:eb:04:49:74:12:d9:9f:a5:ff:de:e6:11:37:
                    b6:1b:e4:4d:cb:4b:75:e4:ac:66:03:f3:f7:69:cd:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:9D:33:BE:49:07:14:0F:DC:17:C3:BD:9D:BB:55:F7:C5:81:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/29313107-6437-3d59-9eba-a5d8d3c5ac86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:fd:25:a3:88:3f:59:50:73:a1:34:40:cc:34:f3:92:c3:
         ee:48:c6:fe:e4:d5:ce:0b:cb:d1:80:d8:28:28:60:b1:54:75:
         17:97:dd:2a:d6:63:4a:bc:ec:94:1b:e0:fa:6d:95:6b:7f:c9:
         91:d9:4b:b2:aa:57:26:77:67:62:db:d4:38:31:7b:16:ff:e3:
         f4:16:81:79:c6:6d:99:4d:9a:6a:99:b4:22:02:fa:17:86:09:
         03:31:31:ac:42:ee:51:2f:1f:9c:e2:94:85:ff:fc:21:09:95:
         f1:0e:41:1b:ba:d0:7a:78:2d:9e:f2:58:85:35:00:d7:c2:fd:
         8a:69:d2:d1:fa:d0:03:a3:1f:bd:d2:9b:f4:22:42:bd:43:5d:
         07:50:d8:82:ac:96:03:58:15:ad:3a:ca:58:2e:01:75:55:c7:
         a3:79:eb:51:d0:b5:ae:fd:f5:c3:b5:d7:df:25:e1:26:59:f5:
         a4:19:1f:fb:a9:8f:c3:b3:60:a6:25:c3:b9:5b:60:28:be:4d:
         2c:99:71:10:eb:db:ce:6f:78:68:3e:ce:db:74:23:a2:59:c7:
         0a:a6:b0:03:dd:cf:54:97:29:7b:d3:f4:a6:9c:ec:f2:70:94:
         dc:ec:7a:d8:ba:47:76:04:e6:2c:4e:71:67:34:5f:c4:5a:78:
         9a:a6:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:42:57 2026 by rpki-client