Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407/39712598-c12a-3825-8457-4c154d8a0d63.roa
File:                     39712598-c12a-3825-8457-4c154d8a0d63.roa (raw, json)
Hash identifier:          Mn7FuhOHaDzgEYRRLWg5mD8ChM/W2HTzPoUL5fyhI8U=
Subject key identifier:   71:7E:78:46:13:95:A1:41:5E:D3:AD:03:AE:86:89:47:48:19:E4:E4
Certificate issuer:       /CN=d83e52e8-66f7-47ac-95ea-e37ba5cae407
Certificate serial:       010D0C9F4328584F498A5E733A13FB6ADF7F50C0
Authority key identifier: 43:4F:05:0A:85:CD:BE:A8:FE:99:56:6D:9A:1D:B1:EB:8C:5D:FE:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407/39712598-c12a-3825-8457-4c154d8a0d63.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395994
IP address blocks:        74.209.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407/d83e52e8-66f7-47ac-95ea-e37ba5cae407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407/d83e52e8-66f7-47ac-95ea-e37ba5cae407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:5e:73:3a:13:fb:6a:df:7f:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d83e52e8-66f7-47ac-95ea-e37ba5cae407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=48b32c8f-c288-4472-aebf-9c3c89009b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:df:8a:62:e6:e8:c7:8e:48:97:11:45:15:
                    a5:51:22:e5:e2:f3:b1:89:09:4f:1b:a4:c5:a1:08:
                    75:7f:4a:34:88:82:ae:00:8b:63:99:ac:80:ac:36:
                    28:16:2a:62:35:f9:7e:f6:b8:87:e1:29:7f:6d:38:
                    7f:84:d3:39:50:38:e4:b1:c0:2c:93:36:5c:c2:b9:
                    2d:ca:8e:93:be:dd:48:34:1e:b2:02:17:6c:64:39:
                    71:2c:68:33:6d:1d:86:40:c0:92:c8:44:f6:b4:68:
                    bb:9d:85:fe:a2:41:f2:60:3f:20:0a:be:ff:bd:bf:
                    f8:55:11:8b:d2:01:6c:c9:64:4c:a3:0f:1d:61:e1:
                    36:fc:b2:1f:bd:d5:7c:5d:82:41:d9:26:a0:fb:b9:
                    0d:d3:7a:c0:4b:58:ce:a6:a2:f3:13:a4:45:4c:54:
                    45:1d:25:a7:6e:51:20:81:86:5c:88:41:9d:7f:9d:
                    12:6d:12:56:d2:e7:af:dc:bd:6d:72:ea:fc:42:4c:
                    6c:33:86:37:57:d8:de:1d:15:06:f2:bc:fa:f9:ed:
                    20:fd:b8:e3:56:b4:3a:af:2a:ad:6c:48:59:ba:9a:
                    f6:31:a2:0f:32:da:a5:1c:78:4d:9d:6e:30:50:65:
                    63:5b:26:7c:1d:09:25:63:df:ce:b3:4b:11:c8:f0:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:78:46:13:95:A1:41:5E:D3:AD:03:AE:86:89:47:48:19:E4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407/39712598-c12a-3825-8457-4c154d8a0d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407/d83e52e8-66f7-47ac-95ea-e37ba5cae407.crl

            X509v3 Authority Key Identifier:
                keyid:43:4F:05:0A:85:CD:BE:A8:FE:99:56:6D:9A:1D:B1:EB:8C:5D:FE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d83e52e8-66f7-47ac-95ea-e37ba5cae407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:81:d3:8d:4c:7f:fb:b4:d5:da:0b:71:84:19:3b:c1:fd:4d:
         c5:16:66:65:9e:59:51:07:8b:76:65:f2:23:8c:ce:e8:56:a7:
         6e:d0:38:12:91:bc:d0:39:94:da:8a:b2:54:82:6c:8b:61:3e:
         47:eb:ca:b5:f4:65:9c:6b:b8:eb:f0:64:70:78:96:e7:3e:29:
         12:19:bd:33:de:5b:29:0c:16:7f:d4:32:3f:11:c7:6e:9b:c6:
         b9:26:12:36:92:25:70:b0:b7:d6:d7:3d:89:22:07:e7:6d:50:
         b2:1c:69:7f:7e:74:88:9c:b4:f6:95:3c:6e:c4:f3:31:de:69:
         92:38:97:58:a0:a4:8e:a7:cf:b9:82:90:9d:a4:0e:72:64:f9:
         50:fb:95:e0:93:86:0f:6f:ad:78:41:17:a7:c6:0a:7b:54:b9:
         92:14:01:62:df:7b:0c:d4:f7:0a:44:35:af:4e:e9:13:4f:eb:
         45:d3:5b:c0:4d:4f:86:34:80:d4:71:35:cc:aa:36:9a:82:17:
         ba:49:30:b9:1f:76:80:3a:5e:eb:21:6f:92:ea:9e:44:71:8c:
         57:da:68:bc:51:f5:c5:f2:30:09:c0:91:4d:56:17:8f:fe:8f:
         42:33:b9:cb:ff:26:64:f0:43:2b:bf:9f:b0:f2:42:2d:6d:13:
         b2:b2:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:27:19 2026 by rpki-client