Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa
File:                     73943a2d-24f5-3619-b3a8-476b23f5bbce.roa (raw, json)
Hash identifier:          UNm79EcTqRJwQIBsn/W1tw2qlabFqZ7tyOGyX6GKJ0s=
Subject key identifier:   08:0C:66:ED:AB:1E:47:33:D7:C5:D3:0F:F5:4D:F1:91:35:53:90:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF87CD91DE153DD4B91365C20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     7342
IP address blocks:        209.131.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d9:1d:e1:53:dd:4b:91:36:5c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=6ee04463-757f-4f43-a8b7-6350c269dfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:ea:a3:fd:16:98:b5:91:1c:bb:aa:40:02:
                    40:d9:a4:71:e7:d8:78:86:df:7b:1e:61:49:49:12:
                    41:b1:4e:f2:f1:52:d4:43:5c:f1:35:7f:26:95:36:
                    8c:cd:7c:7c:ed:cb:aa:c4:91:1d:01:cc:7a:ab:86:
                    66:38:9b:32:64:2c:59:47:e6:4a:ce:23:db:9a:70:
                    1b:8e:b3:a8:f6:2f:66:0d:45:de:8e:34:1c:ad:fe:
                    76:87:b3:f0:09:0c:38:9e:1e:2a:f4:82:74:f4:e2:
                    89:1a:4f:d5:9a:2c:5d:00:ed:e5:cf:4a:fd:0f:7e:
                    30:6a:8c:bb:a5:ce:94:af:c8:42:ca:98:38:7b:43:
                    58:b8:52:0b:0d:4a:ce:3c:fd:fb:ca:18:05:17:2d:
                    68:90:b6:3c:5a:64:80:d8:8e:7d:de:93:52:cc:ce:
                    6c:2a:d2:00:6f:49:cc:b0:29:91:67:18:8d:45:5b:
                    a5:f1:c4:2a:25:21:c4:ec:ab:d3:cc:c5:19:f5:45:
                    b1:c5:da:26:a2:35:6c:23:fa:c5:33:25:69:7d:e8:
                    c9:b0:43:d5:26:47:1f:a7:60:bb:46:cd:c7:bb:92:
                    ad:c6:cc:8a:bb:94:ac:68:14:5b:5e:ad:c1:f1:d4:
                    2c:4b:5e:b2:b3:93:f6:28:82:9a:66:e8:47:97:6e:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0C:66:ED:AB:1E:47:33:D7:C5:D3:0F:F5:4D:F1:91:35:53:90:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:b5:f1:c2:2a:80:04:8f:d7:13:32:ee:8c:d0:48:44:8e:
         59:30:09:4a:89:bd:ec:6c:ca:54:b3:b6:3b:29:3b:09:ae:f8:
         3e:5b:fb:ea:01:40:a5:ab:09:be:92:86:4e:bd:fa:06:50:9c:
         f3:2c:b1:50:69:9f:ec:71:0e:16:10:d8:63:5a:b6:f1:c3:a4:
         f5:1e:47:6f:2f:5d:90:8c:92:23:45:57:2f:fc:92:73:c8:7c:
         ea:63:3a:9c:88:9c:50:9b:84:7f:b0:f8:5f:b0:b6:17:ac:a5:
         f3:71:7b:4c:d4:98:ce:6e:ba:39:01:d5:58:10:38:af:bf:e9:
         74:83:ca:5f:9a:2d:f0:ad:3e:71:04:74:d1:27:b0:1b:d1:c8:
         49:02:c0:2b:7b:7c:8e:82:bc:64:35:ae:0b:08:cb:f8:21:88:
         b8:fa:d6:ed:bb:7b:ee:9e:22:53:d2:56:32:f2:2b:f3:65:c4:
         f0:2e:e3:81:99:81:8a:21:d5:e7:21:64:a8:4d:4d:3e:c7:fb:
         90:a0:ad:93:2a:68:54:67:db:5e:dd:8b:05:8d:90:46:f3:e3:
         9d:ce:bc:ee:58:97:a9:56:ad:e7:cd:00:18:26:ba:96:37:68:
         bc:a4:20:b1:2d:bf:e1:e0:f3:36:ea:c8:16:58:52:5b:88:28:
         85:8b:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:00:33 2026 by rpki-client