Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/39133d92-2a3c-3f0b-bf89-d5aa6548c9f5.roa
File:                     39133d92-2a3c-3f0b-bf89-d5aa6548c9f5.roa (raw, json)
Hash identifier:          WzwL9fJYZbz8Md0rrd50fQ+22lQqFG4KQHcy4CDMpoc=
Subject key identifier:   6E:74:BC:7C:26:33:C3:60:B8:A6:44:67:4E:3E:4C:5E:00:EF:BC:1B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F4F080BBF5BEBA7B2E1365300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/39133d92-2a3c-3f0b-bf89-d5aa6548c9f5.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        140.209.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0b:bf:5b:eb:a7:b2:e1:36:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=2e9b75f5-7bfe-4a02-91a1-ca30f0a1fab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:8b:3c:ed:af:38:04:ee:90:c6:e8:fa:6b:
                    39:7a:5c:b9:5a:ac:53:d2:a0:4b:46:b2:fc:ef:2c:
                    36:3d:23:7e:80:ae:f1:eb:d9:ad:e1:56:e7:36:dd:
                    2a:f2:06:ee:e4:b6:f8:a2:83:91:9e:cf:1c:a8:86:
                    8e:a8:26:1c:41:30:2c:ed:72:b5:c5:7a:8e:d8:90:
                    17:65:c6:29:a3:c7:58:be:39:fb:38:ae:95:15:7c:
                    12:4f:25:34:e6:d5:e3:ce:89:85:37:3a:60:8d:6c:
                    74:dd:99:28:3d:6a:91:19:72:35:1e:45:ad:9b:53:
                    70:80:1a:e6:38:69:d3:35:01:85:2a:42:28:80:9f:
                    d7:ee:96:41:80:7b:ad:6d:1d:16:63:13:ed:c6:d4:
                    f3:2a:ad:7e:17:5c:f4:8d:05:36:00:89:0e:bd:80:
                    8f:b9:00:41:a3:89:50:8a:3a:76:6a:44:dc:95:c2:
                    75:21:a0:17:8a:da:66:a5:41:09:89:b9:58:b5:ed:
                    87:c8:70:ba:e1:3d:9b:78:f0:3f:4e:56:30:e2:61:
                    27:e5:29:3c:b4:18:b8:4a:0f:90:7e:7f:1c:27:ec:
                    b6:18:76:72:95:63:ab:88:b7:2e:62:3c:f9:de:20:
                    ee:cb:7a:fc:30:ea:e8:76:a9:92:be:33:76:af:f1:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:74:BC:7C:26:33:C3:60:B8:A6:44:67:4E:3E:4C:5E:00:EF:BC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/39133d92-2a3c-3f0b-bf89-d5aa6548c9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:61:85:09:81:c9:46:60:4c:68:31:51:da:95:81:b4:f8:
         2f:bf:f3:aa:4c:a3:dd:ae:fe:a5:e2:2f:79:44:f3:50:17:13:
         56:40:3a:a9:52:09:e8:df:64:71:d5:b3:db:63:ff:f4:dd:43:
         2a:76:6d:96:35:f2:80:30:5f:6f:7f:00:f2:a0:92:ec:52:83:
         2b:05:a0:21:4d:48:59:c0:c5:4b:cf:aa:9b:c8:33:eb:8e:75:
         7b:74:88:ac:55:37:c4:30:ae:96:a2:a9:f2:ff:a1:d4:d2:49:
         8b:a4:03:71:40:b0:24:66:c3:fd:cb:c8:53:3c:dc:b4:1c:6f:
         79:cc:40:83:b9:7e:d8:55:4a:f3:f3:4d:cf:a9:7e:3f:e8:f6:
         dd:e0:cd:38:f3:03:de:0b:90:2d:15:65:8c:14:00:27:50:b8:
         6c:99:c2:7a:89:78:ac:7b:dc:5a:6b:a6:2b:eb:70:ff:93:f9:
         91:98:c8:8b:96:78:17:3f:19:c2:6d:1f:a1:06:f8:4b:30:1f:
         d5:f3:57:ea:91:65:aa:89:e3:32:33:12:b4:19:f8:30:83:15:
         e9:15:64:c6:45:33:97:86:56:a5:6a:0b:c3:44:6c:03:d8:29:
         bd:62:fd:57:61:80:9f:a9:59:e5:e4:66:a3:8a:1e:50:25:b4:
         8b:b8:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:22:21 2026 by rpki-client