Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa
File:                     9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa (raw, json)
Hash identifier:          pk7j+DUm+12dWFXo0tNrns55rrWHHHSqvtKNITkpKOE=
Subject key identifier:   6F:D6:C9:F7:5F:12:2B:01:D2:0A:FD:88:38:E2:BF:43:90:8E:D1:2E
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584F4987C3251C3A74620439EB00
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21669
IP address blocks:        209.212.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:c3:25:1c:3a:74:62:04:39:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=71254f37-6def-4c6d-81fc-33a592129769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:25:31:c3:a3:eb:1f:98:f3:17:4b:ef:4e:
                    52:cb:f8:11:89:0c:b4:73:b9:f4:cb:d6:82:c1:99:
                    64:47:cb:6d:a1:6e:03:2a:a5:3d:6e:34:b4:fe:5f:
                    45:ee:77:85:48:19:99:e7:0f:06:98:a1:7e:28:cf:
                    96:91:f1:39:e8:94:c8:1d:5e:c1:b8:57:53:b4:c5:
                    a5:e4:1e:a1:c7:d4:8c:19:38:13:39:1a:52:fd:d3:
                    47:d8:3f:f2:21:64:ae:82:e4:5a:cc:d9:83:fb:25:
                    2f:1c:c5:57:af:0b:f2:f7:c4:18:d9:89:df:8f:1d:
                    5a:b4:65:3e:fc:34:dc:35:eb:ee:14:b3:11:fd:dd:
                    db:14:9e:f5:2d:ab:c3:be:02:28:cd:b0:8c:4b:42:
                    cd:90:79:08:df:d1:3f:6b:66:28:ee:e2:9a:ce:1c:
                    9d:10:ca:4d:65:76:37:9e:54:31:91:7f:63:14:13:
                    c2:e7:3d:73:ac:9b:c2:31:46:1e:14:b8:84:00:1d:
                    84:40:c3:08:70:45:06:4e:1b:95:3d:7b:8e:9f:09:
                    c7:58:74:9e:c1:92:bf:82:f7:8a:54:a3:6a:55:fa:
                    b3:aa:40:d2:27:a3:b4:b6:14:94:1e:0a:62:72:cf:
                    79:d1:95:00:44:c2:c7:26:2d:16:e2:96:06:4d:e0:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D6:C9:F7:5F:12:2B:01:D2:0A:FD:88:38:E2:BF:43:90:8E:D1:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/9da2b8fa-d899-38d0-b159-ec1cb41ea7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:36:a9:ee:25:57:3d:2b:62:21:4e:49:45:c0:45:bd:1b:9f:
         b7:b6:f1:8f:2a:6b:79:8f:1f:80:29:e5:4e:51:20:e2:33:4d:
         23:d3:6d:12:e1:e6:ca:78:a5:cc:4c:d8:90:d4:fe:d1:17:94:
         72:11:10:75:73:eb:5b:72:1e:78:f1:9c:fc:99:6f:02:aa:71:
         db:04:15:17:6d:95:b0:63:25:ce:8c:1a:73:fb:e8:56:88:e9:
         00:ed:57:f3:f7:49:34:7e:72:99:5d:45:c7:11:30:09:5a:5f:
         ae:ab:39:0e:69:ce:d5:0c:df:d3:d3:4e:a1:a0:0d:b1:1b:c6:
         35:0e:6e:e2:6d:49:d6:48:04:c1:a7:a3:b4:86:90:be:df:3f:
         51:c5:b4:c1:21:ea:84:2b:65:22:8c:eb:4e:59:45:df:b0:16:
         1e:0d:ca:56:6a:13:2b:3b:2f:5d:0e:c3:54:ba:a9:44:65:db:
         6a:d9:53:d3:88:a0:87:93:11:79:73:45:b2:99:7d:8f:4b:07:
         f5:50:72:4e:a1:ef:b9:a6:01:2b:d5:48:c4:1c:6e:95:57:8e:
         61:0a:fa:da:4a:81:70:d3:08:7f:db:5f:8d:0e:48:1e:fa:09:
         bc:66:e6:95:f7:ce:8a:10:92:5f:e5:1d:6b:4d:5e:3c:af:72:
         9b:67:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:59 2026 by rpki-client