Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/5b8e3e47-1b8d-3f7d-a57e-10e1c2123a2b.roa
File:                     5b8e3e47-1b8d-3f7d-a57e-10e1c2123a2b.roa (raw, json)
Hash identifier:          9eJsOY7D1GF5/KNdwpm8akTco6lN6GwbnJmzN8924PI=
Subject key identifier:   AF:01:64:DE:4F:56:0B:F2:A8:FA:7D:F7:CD:CB:BF:39:24:9C:D1:3B
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584DCF1FEDB53123FD8574E03B00
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/5b8e3e47-1b8d-3f7d-a57e-10e1c2123a2b.roa
Signing time:             Tue 12 May 2026 12:38:14 +0000
ROA not before:           Tue 12 May 2026 12:38:14 +0000
ROA not after:            Mon 10 Aug 2026 12:38:14 +0000
asID:                     21669
IP address blocks:        209.212.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:1f:ed:b5:31:23:fd:85:74:e0:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: May 12 12:38:14 2026 GMT
            Not After : Aug 10 12:38:14 2026 GMT
        Subject: CN=88c02427-c933-4b91-b8ff-67568a750904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:bd:af:e3:15:7b:99:a8:23:03:b7:4c:ba:
                    c6:63:f3:63:22:f3:de:83:9e:06:bd:39:74:65:7a:
                    30:a9:95:3c:97:5d:ad:b8:b8:9a:19:b6:2b:01:48:
                    b1:12:13:13:8e:5c:c6:18:43:b4:88:dc:73:8f:4d:
                    4f:6f:32:e7:ca:4c:e4:47:e8:fc:37:e8:23:76:c3:
                    d9:13:e8:4d:7a:40:05:35:d4:fd:96:37:cd:ce:5a:
                    5d:0a:3a:dd:b7:55:b2:f9:5e:b4:19:9c:0c:2a:88:
                    ee:50:67:f2:cc:01:a2:06:0b:7e:c9:33:66:70:0e:
                    ab:93:ad:53:3f:58:9f:6d:f4:eb:4b:d0:f7:64:46:
                    a0:7c:d8:80:b3:d6:4f:13:6a:02:86:1d:5e:5c:a7:
                    c1:07:78:78:00:11:ce:ef:82:6f:49:29:81:af:05:
                    d3:4a:c8:f4:ca:b5:91:33:01:b9:d8:f5:82:a7:a0:
                    3b:d5:91:b0:f0:55:33:ee:b2:15:ad:37:9b:b0:8b:
                    c4:77:ca:ee:78:5d:b8:9a:f5:85:61:9c:fd:76:b8:
                    a9:19:1e:c9:73:3c:f0:8b:f9:5d:57:f9:3e:0f:bd:
                    2a:1d:56:9b:30:42:94:77:c0:16:3e:94:a2:e1:98:
                    d6:27:b2:95:be:bb:26:81:96:6a:fd:ca:8c:de:c2:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:01:64:DE:4F:56:0B:F2:A8:FA:7D:F7:CD:CB:BF:39:24:9C:D1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/5b8e3e47-1b8d-3f7d-a57e-10e1c2123a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:a6:cb:cd:f3:4d:5a:f1:1b:bf:6d:5d:47:c3:31:9f:96:
         df:87:1d:ca:9b:86:4c:0e:bf:f7:3a:e9:ff:26:b8:59:75:fd:
         9b:4c:0a:50:6d:95:4c:69:dd:29:e0:f7:4a:23:3d:87:8a:11:
         57:0c:80:17:85:60:07:f7:88:2e:a9:d4:ac:41:69:cf:6e:e4:
         66:85:54:f4:fa:73:05:f7:bd:26:1b:65:30:ca:3c:4b:ee:f8:
         a4:3d:10:5f:28:8f:5f:d4:b5:d9:cb:e8:96:8b:e7:71:d0:26:
         00:54:47:6d:d7:c7:1c:9c:07:f4:c5:01:80:d9:1a:d7:61:38:
         55:63:2c:6b:22:b8:70:48:90:a9:d7:b3:e1:de:b1:be:7e:74:
         15:15:26:4a:72:ff:b4:ae:be:7f:f0:bb:e8:9f:53:41:c8:c3:
         da:cb:4a:e4:66:94:fc:0a:07:eb:b0:66:fc:6e:ea:d7:bc:7e:
         69:17:a7:74:93:eb:08:35:1f:2d:f8:0a:45:8a:89:79:73:98:
         2d:97:dc:20:3b:db:85:e2:01:44:03:83:6e:f1:2e:55:2e:52:
         1f:1f:6a:73:56:13:f1:a3:b5:55:69:18:99:e0:50:42:15:b7:
         9d:bd:66:8f:83:fa:8e:09:ea:c0:e4:19:7d:e8:a1:e6:68:5b:
         d8:6c:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:55 2026 by rpki-client