Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/92829906-fe04-3825-9e11-083fcf90e358.roa
File:                     92829906-fe04-3825-9e11-083fcf90e358.roa (raw, json)
Hash identifier:          wrB1nQO1X0zfnKouPOhe2SC70hSIQPAuJloqeWdZasI=
Subject key identifier:   F6:83:E3:B2:02:EA:B1:87:88:AA:F7:4C:EB:4C:E1:75:07:C4:39:20
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F1B6249F5063ED9E6A29518C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/92829906-fe04-3825-9e11-083fcf90e358.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     1239
IP address blocks:        2001:49f0:d129::/48 maxlen: 48
                          2001:49f0:d12a::/48 maxlen: 48
                          2001:49f0:d12b::/48 maxlen: 48
                          2001:49f0:d12c::/48 maxlen: 48
                          2001:49f0:d12d::/48 maxlen: 48
                          2001:49f0:d12e::/48 maxlen: 48
                          2001:49f0:d12f::/48 maxlen: 48
                          2001:49f0:d130::/48 maxlen: 48
                          2001:49f0:d131::/48 maxlen: 48
                          2001:49f0:d132::/48 maxlen: 48
                          2001:49f0:d134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:49:f5:06:3e:d9:e6:a2:95:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=8c6271c1-968f-4f21-9d4a-ece88cd27715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:c1:fa:0d:19:22:b1:09:cf:de:af:f7:3d:
                    a4:8e:6d:30:f8:86:21:40:c3:e2:25:f0:7b:31:5a:
                    48:75:5a:b7:8c:2d:ff:5a:a0:be:40:74:66:b3:ae:
                    38:1b:3b:8c:d7:99:24:5d:f6:62:6e:71:84:81:a8:
                    f5:ba:b6:44:c3:43:82:31:f5:c2:99:35:f6:90:6c:
                    49:84:23:bf:08:9f:a9:54:11:db:9c:8f:3e:6b:b1:
                    e9:60:0a:96:2d:0a:08:c6:7a:b8:d2:69:e4:ea:c6:
                    dd:1a:eb:c2:77:4b:d6:0b:cb:75:74:c8:22:b4:3d:
                    d6:9d:73:4a:ba:d7:cf:6b:ef:ca:db:18:c8:2d:9e:
                    a8:fa:83:ef:a2:4d:ec:9f:98:4b:d5:c3:3d:bd:53:
                    25:ef:08:2e:c9:36:c7:ee:a4:64:13:09:ae:4b:7c:
                    51:41:21:80:11:1d:ad:86:46:7a:6f:6e:db:6f:27:
                    ac:61:f4:86:54:ae:1c:0c:a0:88:c4:51:bf:3f:47:
                    86:d5:2c:b6:50:f3:4b:cd:56:dc:b7:8c:e3:13:2e:
                    88:30:0b:fd:46:13:07:3d:d6:5a:95:c4:5c:0e:b9:
                    a0:69:b3:5f:a9:4b:92:92:8f:93:fd:d8:45:6c:88:
                    c0:f8:50:ca:48:6c:eb:37:79:7d:a3:a9:c1:a8:5c:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:E3:B2:02:EA:B1:87:88:AA:F7:4C:EB:4C:E1:75:07:C4:39:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/92829906-fe04-3825-9e11-083fcf90e358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d129::-2001:49f0:d132:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:86:f7:9a:13:62:80:d4:01:99:94:41:18:ec:34:7a:d1:1f:
         5d:26:f7:c6:9d:1b:12:d2:98:eb:82:c3:74:e0:02:da:df:f1:
         ac:a9:8f:28:51:82:9b:cc:3c:77:4f:67:3d:4b:f4:da:ce:48:
         75:dc:67:ca:f9:02:9a:ee:e0:60:dc:4f:2a:b5:93:ac:7a:d6:
         24:59:61:6b:41:9d:16:fb:2b:45:5c:33:aa:27:cc:ea:5b:ba:
         70:cb:65:07:1d:09:41:b6:e3:f3:19:78:db:53:e2:17:e6:21:
         f0:17:89:23:15:cb:66:65:95:55:3e:c2:e9:6b:cd:a6:f7:a0:
         9d:0c:6f:d0:3b:00:92:b1:7a:61:2c:d0:b3:14:3c:33:a3:1f:
         24:63:72:90:6f:0b:af:13:96:20:d4:18:4f:49:fa:34:b6:80:
         2e:2a:8c:d9:71:b2:b0:5b:eb:d4:9c:e0:e1:b6:96:ef:f0:75:
         c7:38:a2:12:9c:a7:fe:cd:77:6f:1c:c6:cb:88:f7:80:6e:5e:
         b5:ef:bf:1f:8c:cf:b6:f1:57:3f:f2:0f:83:f1:49:01:a9:0e:
         f0:8f:31:bc:04:5c:d2:45:df:6c:5e:68:a3:16:36:d3:65:ac:
         8f:13:b4:bd:0e:6d:2b:cb:78:23:1e:b1:66:d5:8a:88:d0:69:
         a8:a0:bf:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:57:10 2026 by rpki-client