Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/81d4fe31-ef1d-334c-bb2b-9895407197ae.roa
File:                     81d4fe31-ef1d-334c-bb2b-9895407197ae.roa (raw, json)
Hash identifier:          4/FLcJXCdJE28riQVHj5rkPg8UYMlrfam/GwCA4qJgU=
Subject key identifier:   3F:EE:C7:E7:63:BC:0F:68:F7:0A:3D:B8:2D:05:A1:0F:49:40:A1:D6
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584F46A7D9BFA70F7710743708C0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/81d4fe31-ef1d-334c-bb2b-9895407197ae.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     29873
IP address blocks:        209.34.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:d9:bf:a7:0f:77:10:74:37:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=0d6a8ea4-5261-42c2-a0f3-95074969b898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:61:83:3e:43:68:a0:48:d9:c0:26:73:4d:17:
                    09:20:f0:6b:3d:92:fb:4e:fb:33:57:9e:d4:0f:01:
                    59:1a:5c:09:6a:7a:a7:e2:a6:66:9b:5f:e3:7c:8b:
                    49:1b:a5:2c:3b:79:7a:b4:0b:45:cb:e4:69:5d:d3:
                    ca:94:19:64:52:b8:17:cc:f1:3c:75:f1:56:f0:61:
                    0b:3d:d9:20:b4:54:b9:c8:55:94:89:65:a2:60:56:
                    f6:5a:2d:bc:23:f6:46:f1:2b:31:2c:24:be:af:42:
                    3f:2b:9a:90:b8:41:99:1d:f4:29:44:32:e4:8d:1e:
                    1d:26:35:e5:42:b0:f8:e5:88:04:6b:38:2d:34:16:
                    2d:6e:6e:bc:2b:fc:85:02:4b:45:e8:7b:9d:74:0a:
                    4d:bd:48:08:18:a7:54:a7:91:26:f3:db:9e:30:dd:
                    5b:d4:92:db:21:2a:e6:b1:43:1c:53:26:74:8f:d1:
                    26:3b:2a:21:73:7a:9b:e5:47:b5:fe:c2:25:f6:81:
                    b8:0d:d0:dc:6a:17:61:24:d2:b9:3e:29:8c:f5:c6:
                    a8:7d:5a:2b:80:1f:62:da:7f:67:e3:52:78:1d:65:
                    db:46:a8:17:a1:64:d2:63:45:44:dc:69:f1:05:6c:
                    c3:92:45:b6:41:1a:bb:04:46:a6:a3:80:d4:75:0b:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EE:C7:E7:63:BC:0F:68:F7:0A:3D:B8:2D:05:A1:0F:49:40:A1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/81d4fe31-ef1d-334c-bb2b-9895407197ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.34.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:b8:ea:b7:90:06:e7:98:06:79:f5:d5:44:5a:f6:ec:48:
         57:09:f8:e9:18:9b:50:d6:7f:28:b7:d3:68:d5:f8:82:22:90:
         17:d6:a7:a8:65:54:32:15:78:b7:a8:ee:19:4d:0b:12:b9:11:
         e6:50:58:3f:6b:89:46:a0:12:0f:f3:00:cf:6f:39:75:29:91:
         0d:4e:74:61:df:a4:9f:7d:57:a9:72:e0:23:8e:10:da:68:9c:
         c5:4f:0c:d4:24:12:24:3b:e9:98:05:14:5e:01:2e:e4:69:88:
         5e:c8:c6:7c:67:bd:1c:76:66:84:91:c8:21:05:d2:26:d4:79:
         1b:fb:9d:c6:1b:4a:8e:97:c8:27:dc:e6:c5:14:5b:eb:4f:52:
         a6:6e:cd:b0:06:2f:98:c6:33:6a:91:c7:5e:2a:33:1b:c6:cd:
         49:63:77:dd:c0:6f:14:2e:0f:7f:18:e2:93:6e:00:66:71:7d:
         53:dc:58:b8:e9:40:03:a0:86:db:04:b0:0f:f1:99:6a:88:09:
         3c:a5:22:70:ea:e1:58:ec:65:64:16:ec:c6:cc:b5:bc:d4:17:
         ee:ad:d0:62:0c:38:f3:08:f6:50:5b:c5:14:07:39:63:06:4c:
         ae:8b:2a:8f:9b:a3:cd:2c:75:2e:1c:2b:d7:11:ce:38:ab:e9:
         ce:50:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:20:34 2026 by rpki-client