Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58/47df0b81-895c-36d3-8704-32eb1faf6e8a.roa
File:                     47df0b81-895c-36d3-8704-32eb1faf6e8a.roa (raw, json)
Hash identifier:          XKxhIByzLfC2SAvSGJ1i2NHdIBIicUTfqrY1D9QqZLw=
Subject key identifier:   3D:4F:30:EB:AE:9B:CF:65:EA:FF:09:B9:3B:D0:FF:EC:2A:9A:5F:E0
Certificate issuer:       /CN=faeb9b63-d561-4799-bc5b-ed6900485d58
Certificate serial:       010D0C9F4328584F119CDB96F5EEA8884A092890
Authority key identifier: D9:E9:69:A0:17:FF:DE:63:74:7F:37:58:E5:C2:03:34:26:E7:EF:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58/47df0b81-895c-36d3-8704-32eb1faf6e8a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     19738
IP address blocks:        167.79.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58/faeb9b63-d561-4799-bc5b-ed6900485d58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58/faeb9b63-d561-4799-bc5b-ed6900485d58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:db:96:f5:ee:a8:88:4a:09:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faeb9b63-d561-4799-bc5b-ed6900485d58
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=ca5dfb00-b543-4a69-9282-4a161178961c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:bd:24:7b:a9:b8:98:c4:e7:e7:d5:f7:a1:
                    90:c4:4f:e5:49:fd:16:08:ee:d4:09:15:ce:54:ac:
                    27:b5:97:eb:4c:9f:6c:bc:bb:7e:e5:72:a0:3b:44:
                    0f:77:47:44:f4:4e:82:9a:f1:f4:b1:8b:dd:0e:3d:
                    aa:cf:5c:e7:e8:70:f2:e6:ac:01:b0:9d:98:27:36:
                    47:25:61:d3:b1:bc:02:6a:5b:b4:8e:64:8d:40:72:
                    01:ad:a4:ef:36:82:ec:f6:4c:33:54:8b:15:3d:40:
                    93:59:b4:5d:23:e3:6c:31:61:21:0d:f4:c5:51:c8:
                    5b:43:0a:51:75:a0:1f:41:91:d3:09:e3:a6:d2:82:
                    52:3e:16:ce:47:25:6a:d0:56:ee:23:fd:0b:94:64:
                    0b:f0:d9:3f:94:49:eb:b5:86:79:bf:30:79:15:59:
                    80:5d:25:c1:d2:3a:e5:7b:83:94:a5:e9:d0:d6:b8:
                    57:0e:ef:45:e8:93:59:9a:b9:47:b8:8f:60:c3:7c:
                    8a:51:ee:b3:62:bf:35:1d:a6:6f:7c:44:1a:dd:89:
                    f8:af:d1:cf:60:2e:66:4c:a5:42:bc:ab:45:61:34:
                    73:d5:b1:29:be:b7:ac:63:b8:85:57:c7:6a:c0:b5:
                    41:b2:39:dc:ef:a5:50:5b:9d:95:e4:a9:cf:17:cd:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4F:30:EB:AE:9B:CF:65:EA:FF:09:B9:3B:D0:FF:EC:2A:9A:5F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58/47df0b81-895c-36d3-8704-32eb1faf6e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58/faeb9b63-d561-4799-bc5b-ed6900485d58.crl

            X509v3 Authority Key Identifier:
                keyid:D9:E9:69:A0:17:FF:DE:63:74:7F:37:58:E5:C2:03:34:26:E7:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/faeb9b63-d561-4799-bc5b-ed6900485d58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.79.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:98:d9:9b:18:f9:e0:26:30:8f:39:24:be:ee:c4:ae:14:59:
         5f:24:6c:cd:f0:ed:36:5a:34:ed:92:af:8f:7a:06:7e:85:d4:
         df:de:fc:a3:ad:3b:56:81:81:60:aa:dc:b8:95:99:72:66:e9:
         0b:76:03:f5:37:e1:fe:7e:90:b9:24:e0:d9:19:11:03:f4:9e:
         6d:42:1a:92:4d:b4:63:7a:69:df:81:d0:3e:3b:45:a5:9b:4a:
         72:f4:34:30:c2:8a:a5:9b:97:89:1b:64:05:28:eb:60:f5:2e:
         76:6f:ce:58:b6:5a:b8:8b:6b:87:8e:e5:a5:2f:7e:91:12:8d:
         da:a9:aa:23:a2:39:a2:4c:bb:d6:f9:21:26:54:12:8e:4e:75:
         60:21:4c:e2:42:19:8b:4d:21:f1:f5:40:09:ec:72:8d:57:42:
         f2:63:60:44:5a:48:fb:8b:9a:e4:5f:82:c6:a1:26:42:cd:49:
         12:87:2b:f9:40:4e:46:37:a1:a0:8e:c8:c9:2b:38:c5:31:bc:
         d1:44:55:39:f3:86:e8:ca:63:ff:11:bf:4c:1d:6e:53:3b:8c:
         e5:92:71:28:ba:1b:64:b1:dd:90:e5:b5:48:35:e5:08:51:78:
         47:78:e5:10:31:e8:13:a3:fd:a8:4d:39:00:a4:3b:47:4d:03:
         ee:31:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:13:19 2026 by rpki-client