Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/83a2d2e0-4d46-3b15-b785-29693e6040ee.roa
File:                     83a2d2e0-4d46-3b15-b785-29693e6040ee.roa (raw, json)
Hash identifier:          CUwrXbIM6Ln5DB2jUvM5R4NpD1pcZzjf8xgjiMdwrYU=
Subject key identifier:   2F:DA:DD:A4:C5:3F:C5:20:9E:CA:DB:80:50:B6:FD:8C:2C:10:5A:DC
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584F5767FB621F986062F8D5C780
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/83a2d2e0-4d46-3b15-b785-29693e6040ee.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     33
IP address blocks:        209.222.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:fb:62:1f:98:60:62:f8:d5:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=9241da3e-3f77-4fb2-a4c1-09ad6d6278e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:00:25:09:45:df:1f:b9:43:b0:ee:f7:c6:
                    1a:72:83:c8:91:62:b8:1c:2f:54:37:8f:8c:7d:35:
                    3d:ba:c3:d2:a8:0e:6f:73:06:e3:30:d6:91:0b:83:
                    33:3b:e5:fe:41:b7:ea:62:e5:36:4a:8f:62:0f:71:
                    25:08:aa:6b:d8:67:e9:3d:5b:03:06:68:be:aa:b2:
                    44:bd:fa:2b:52:ca:bf:4c:e0:39:0e:d3:83:99:d2:
                    0b:ef:08:e5:e3:45:aa:58:31:87:4d:70:e7:ed:0d:
                    5f:5a:a4:ca:9f:6a:ae:be:bb:9a:0f:a1:2f:a2:8e:
                    2b:38:a0:82:a6:23:b1:7f:37:cf:8c:8d:76:f0:da:
                    ea:2e:e6:42:9b:5d:fd:9a:1a:40:0b:51:ba:c3:21:
                    d2:20:cf:fb:f1:3d:3f:00:2d:29:a5:e5:f2:6f:b3:
                    b0:ba:92:98:a4:35:93:8c:e8:62:ba:e3:99:ed:ca:
                    81:98:09:af:ce:9e:7c:56:1f:48:b2:ec:1b:92:8c:
                    9d:a2:72:e9:8f:de:70:4f:1f:40:88:39:f3:2b:44:
                    d1:67:da:43:42:f1:f5:df:ed:95:39:f0:3c:4d:27:
                    42:30:f8:5c:47:fe:f9:69:5d:ab:04:0d:df:47:7c:
                    3c:6b:b8:a8:9a:a9:c6:63:88:cc:df:5c:03:33:96:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:DD:A4:C5:3F:C5:20:9E:CA:DB:80:50:B6:FD:8C:2C:10:5A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/83a2d2e0-4d46-3b15-b785-29693e6040ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bb:25:85:52:05:4a:3e:5c:7c:7a:4b:7b:d2:f7:f9:1c:5e:
         bf:78:62:8f:f6:3e:6d:14:39:e2:47:d3:b3:cc:9c:d3:ff:78:
         8a:5a:f6:dc:b1:6b:df:fe:91:01:6f:fa:f2:99:1a:c1:67:fa:
         0b:b6:99:d6:e1:c5:06:ce:30:44:c9:0e:e7:f7:5e:cc:c3:01:
         0c:6e:63:95:ff:6f:a8:6c:63:24:88:75:84:31:2b:e8:70:f1:
         4c:37:d9:e3:a6:65:50:64:f3:2d:12:bc:b7:ab:c8:b4:67:bb:
         1c:06:83:c6:b1:a2:a3:f2:6f:29:9b:e6:8d:2e:d2:20:2f:a7:
         22:fd:3e:5b:d8:c8:d5:56:96:ac:48:cd:f4:22:c8:53:0f:c1:
         f3:f4:f3:6b:53:d0:09:3d:80:72:89:f9:6e:e8:49:c5:04:76:
         47:8e:a7:45:5c:95:65:0c:b8:d4:b4:0d:1d:46:b5:10:73:86:
         b1:98:98:15:b0:5c:e9:37:71:6c:a2:a2:75:cc:df:b5:27:28:
         d7:4e:f6:ef:80:37:71:24:98:39:a5:2b:87:6e:5b:d9:4a:d8:
         55:aa:7b:79:22:4d:64:96:50:d2:3e:d8:e0:aa:d7:d3:3e:b3:
         85:1c:47:3b:e2:24:d6:e7:f6:d6:03:bd:11:b8:f8:6b:e9:4b:
         f1:18:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:50:26 2026 by rpki-client