Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa
File:                     c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa (raw, json)
Hash identifier:          nR4N27ZGANYMRlbBIzP5XSCGc9a0+KJj1DCAU00heb8=
Subject key identifier:   90:18:27:B8:13:C5:64:85:AF:AD:86:5A:A0:C9:DF:3D:14:5D:66:C3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497656C9BD07E63E76EDAD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32787
IP address blocks:        209.200.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:56:c9:bd:07:e6:3e:76:ed:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=507fe2ec-5269-462c-85cd-106779be635d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:34:aa:16:75:6d:f9:5c:23:ef:6c:f8:b3:
                    19:8f:7e:b0:18:6f:ea:e5:e5:36:1f:20:08:c4:4d:
                    b8:f5:60:30:62:c5:41:3e:c7:7d:1b:88:4a:21:f3:
                    a7:b0:bd:9d:65:ab:5e:25:60:71:cc:26:86:48:ac:
                    eb:83:28:e6:0a:e2:12:21:ab:34:3e:8d:6f:15:d0:
                    8b:2b:fd:11:aa:b5:36:39:92:5e:d4:da:f1:40:5f:
                    9f:11:3d:3b:22:4f:43:eb:91:e3:22:9d:fe:68:34:
                    62:2f:d2:84:e2:e6:65:2b:72:96:4f:f5:29:14:af:
                    04:0f:53:5c:1b:e2:dd:91:0a:7c:13:df:d1:b0:ef:
                    2f:df:53:e6:d7:8c:6b:72:cb:a3:4a:d2:68:3f:d4:
                    9c:8e:e5:13:9b:0d:12:13:b1:e6:5c:18:b2:07:c6:
                    7c:48:3c:8e:40:33:70:23:ae:ba:35:da:1d:d4:22:
                    ee:34:2b:8f:9d:9d:88:2f:42:91:f5:48:19:c7:54:
                    c0:2d:93:44:5d:ee:74:0d:a0:62:7b:df:c1:b3:03:
                    ac:a4:b1:1e:dd:c4:57:c4:27:70:da:44:3b:a8:70:
                    fe:f1:52:d6:38:63:66:15:a0:ae:19:2f:04:8d:98:
                    da:2b:ab:e4:e0:6b:e5:68:0e:37:5e:8e:6b:ea:3b:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:27:B8:13:C5:64:85:AF:AD:86:5A:A0:C9:DF:3D:14:5D:66:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8860dc8-c926-3e5f-b8eb-d8c41b2fa0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:9a:63:59:92:0e:e7:2b:33:0a:88:37:4c:86:07:e4:59:
         25:4a:4a:32:e0:97:51:82:a0:4b:a7:ca:47:ba:81:d7:42:af:
         a1:e4:41:2b:9c:4a:19:4a:08:fc:a1:9e:7b:78:d6:29:33:58:
         10:e8:69:3e:e8:10:5a:d0:67:20:c5:fc:91:28:29:06:c8:88:
         7c:97:aa:4d:b6:bd:dc:b7:1d:59:27:52:b4:be:4f:0a:0a:20:
         48:e2:eb:27:5d:c8:57:df:88:32:5c:76:88:c3:53:db:b8:f8:
         e5:a5:b0:59:ba:57:8b:e1:c9:d4:4c:51:ef:a9:bc:d1:6f:dc:
         9e:bb:27:e7:c4:1b:f8:2b:91:49:22:bd:26:89:5d:8b:c1:96:
         35:72:3a:c5:f2:6a:5c:a8:e0:5b:89:6d:0e:36:b0:cd:91:61:
         09:ec:bc:fe:5a:ac:ff:22:3e:e5:60:8e:46:ad:06:61:32:aa:
         e4:a2:21:80:1f:27:1f:3c:57:d7:66:f5:bb:ad:89:b9:ed:2a:
         0b:ec:87:21:4b:6d:d5:75:4c:f4:be:59:b1:18:37:22:b8:23:
         74:f0:aa:4b:c5:81:2e:4f:8c:01:b0:2a:85:4c:5e:f0:63:f1:
         6a:6c:28:99:84:97:4f:35:92:51:8a:ec:5a:19:40:c8:89:02:
         00:e3:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:52:40 2026 by rpki-client