Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa
File:                     ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa (raw, json)
Hash identifier:          hnk7L2IutE7l/NmBLXp6/8R3Mbs62z7Bn84x7zquoSA=
Subject key identifier:   9E:6C:0B:D4:CD:CE:CA:25:0F:D6:DA:D2:2D:FC:83:F8:D5:B5:6B:08
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584F4987168F4F398DC2381F8240
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21669
IP address blocks:        209.212.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:16:8f:4f:39:8d:c2:38:1f:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=91fdcd04-3516-4439-9576-70e0cd830b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:2a:b4:43:5b:e9:f6:14:21:e5:65:de:38:
                    f2:db:63:03:3f:24:02:b8:34:f5:8f:f8:1d:52:65:
                    2f:2c:77:68:f9:87:3a:fa:aa:a2:fc:e8:ce:a7:d0:
                    e5:1c:8b:b9:35:1e:cd:6c:f1:40:6b:31:71:0e:48:
                    a9:7e:d4:ee:28:c1:0d:9a:e1:da:5e:8d:e0:8e:9b:
                    90:1f:ed:46:46:97:22:94:6e:de:b0:0b:04:b3:d2:
                    30:36:4b:55:25:cd:71:61:e1:a9:c5:e5:9b:19:86:
                    b8:ac:d8:2a:92:aa:cc:94:c8:b9:d2:40:09:9c:33:
                    bc:1d:56:f2:93:58:ed:12:10:8f:64:12:0e:21:f1:
                    7a:19:d1:5c:21:31:1a:4c:00:28:59:6d:c8:3b:97:
                    05:b7:9b:80:ad:e2:9a:40:e0:9d:a1:fb:1f:24:33:
                    79:cc:ed:a4:ac:19:57:0b:e0:84:9a:11:9e:c1:63:
                    8d:00:7a:cd:f7:ee:9b:56:ca:60:f3:92:f8:cd:62:
                    c0:de:bf:f2:89:88:53:6e:d9:23:66:e1:52:7f:e1:
                    88:10:b5:48:f5:bb:ad:29:09:62:e9:76:3b:8b:aa:
                    2b:db:a5:17:cf:b7:e4:6d:ca:61:ab:f1:38:4d:c1:
                    a8:2e:60:47:86:5c:b0:75:e6:7d:37:ec:a5:29:33:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6C:0B:D4:CD:CE:CA:25:0F:D6:DA:D2:2D:FC:83:F8:D5:B5:6B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/ca7f7c16-8bce-30a2-b5de-68ce47a8d5da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:54:e6:13:85:17:b9:63:24:d7:25:71:31:70:26:2f:9d:
         b5:fe:a8:ca:5b:e4:5c:c5:a6:71:91:7e:ac:18:fa:0f:f0:34:
         01:8e:53:9d:5f:f8:24:e0:41:50:d9:b9:83:14:59:9c:70:39:
         3e:fb:97:b2:2b:5e:22:59:4c:a3:22:a1:00:f3:e2:17:f1:4d:
         74:91:5b:b1:d4:69:58:50:57:5e:73:d3:c0:3a:b2:94:16:2c:
         66:c9:85:04:7b:29:d7:01:d6:2f:37:5e:c2:78:72:b5:8a:49:
         0f:44:61:f8:ba:f3:dc:f4:4a:49:c3:e1:93:ea:3b:10:33:e5:
         5c:99:40:a9:43:ec:88:cc:89:0d:ff:33:66:2a:00:27:06:c0:
         56:30:b3:7d:72:af:21:50:8a:07:06:c6:42:c3:8f:b7:1d:d5:
         47:88:23:55:b2:0a:d7:6b:e1:29:ae:8f:de:0e:73:28:22:a4:
         a5:c7:2a:4b:2e:ec:9a:6a:6f:84:02:f2:8a:ce:ff:d6:63:05:
         e1:5f:85:e8:eb:65:97:c5:7c:c8:bc:0a:eb:01:40:24:6e:e2:
         f8:24:7f:d6:47:b1:3f:42:c2:4f:b6:e5:8e:98:ea:08:8d:03:
         7a:2d:41:ae:55:7c:ca:01:98:8a:d5:24:2c:07:f6:3a:65:f7:
         02:1a:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:29:10 2026 by rpki-client