Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e7bb045-5bb5-3e99-a8eb-64592cb82eed.roa
File:                     3e7bb045-5bb5-3e99-a8eb-64592cb82eed.roa (raw, json)
Hash identifier:          LBBFNQ+TfLtDOVfW47cns9NVk/oYeu7Y81k/LSwY4c8=
Subject key identifier:   35:D8:A3:C2:52:28:3E:01:E9:4F:1E:7E:87:C0:4D:1C:95:9D:FA:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F1CC7B7879CC2C2CBAE5B4360
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e7bb045-5bb5-3e99-a8eb-64592cb82eed.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     200005
IP address blocks:        170.199.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b7:87:9c:c2:c2:cb:ae:5b:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=e5987d9f-e598-4b6b-8d02-7b743e2a8eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dc:66:85:10:5c:64:b6:73:27:e4:f3:ab:79:
                    38:e4:10:15:55:a3:67:ab:16:23:2a:ca:77:d2:a7:
                    42:3a:81:52:f8:95:81:af:3c:ad:32:46:d1:23:91:
                    89:38:87:35:ca:25:26:14:e2:bc:ac:08:ba:0a:03:
                    0d:f7:d2:df:45:c7:fc:5f:06:3e:80:df:25:30:72:
                    5f:c1:04:c6:65:8a:39:71:2f:18:37:b4:36:f0:fd:
                    2c:0d:9c:8b:4e:8d:62:40:93:fe:1d:cc:ed:cd:e7:
                    02:2c:14:df:25:32:c3:d9:4b:6a:a5:48:3f:9c:58:
                    18:e5:97:de:e0:11:b3:c1:61:6f:39:3a:45:4f:55:
                    bd:d9:40:12:45:b3:7c:d2:a2:d1:e7:5d:69:11:f2:
                    1f:c6:22:9e:e9:07:d3:e6:42:95:c4:e2:da:9e:74:
                    6a:21:eb:cd:07:06:8d:2e:8b:00:5f:c0:10:84:71:
                    72:65:e8:69:76:05:d8:83:08:e3:0f:ca:dd:33:28:
                    b3:7e:41:56:b5:ed:a5:0c:1f:8c:35:91:2b:c0:fb:
                    22:b0:33:2b:5a:96:ba:dd:35:78:ef:55:35:4c:60:
                    db:29:fc:9d:bc:00:d4:2a:c6:26:29:51:80:b0:d9:
                    29:f9:8b:02:ea:1b:19:a3:de:4a:21:ff:f2:b3:4a:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:A3:C2:52:28:3E:01:E9:4F:1E:7E:87:C0:4D:1C:95:9D:FA:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e7bb045-5bb5-3e99-a8eb-64592cb82eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:a9:51:46:83:a4:be:12:5e:9d:e0:a8:34:0d:74:4c:bc:
         d7:91:cd:7c:2f:4c:05:ed:67:35:2e:93:50:12:dd:1a:22:56:
         2f:87:f8:33:70:48:37:57:59:a5:6d:ab:11:cf:cd:f3:28:ee:
         fc:9d:05:77:40:d3:01:91:73:bf:2e:03:67:cb:86:9a:15:07:
         d3:3f:e6:87:34:a0:b0:f3:49:03:a0:2a:ab:52:f7:3d:d5:be:
         01:db:26:5f:b8:e2:ef:3a:d9:fe:0f:2e:4f:fc:63:56:7b:9b:
         b1:33:75:b5:23:21:e6:80:8c:82:54:23:e3:3a:8e:54:63:b9:
         dd:58:fc:c7:27:c0:7d:d4:6e:87:cb:fd:d6:b9:76:62:71:c2:
         3d:a5:d2:0b:76:67:15:73:af:24:60:66:c3:ef:a8:ea:17:04:
         4c:77:b3:b1:cd:93:84:58:17:93:eb:70:d4:26:67:f7:37:19:
         13:b6:2b:98:ec:81:b7:7d:66:e2:81:f0:d0:ea:be:d9:77:95:
         c2:c1:58:3e:a6:49:e9:9b:c3:ed:c5:ab:a1:1c:1f:7c:a1:2e:
         87:06:cf:56:b3:08:2c:8c:8d:3f:b3:bc:a0:41:71:37:47:80:
         a7:ad:39:19:9f:34:67:35:11:06:51:28:28:04:7d:45:7f:1d:
         ec:68:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:14:16 2026 by rpki-client