Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa
File:                     47631e88-a2aa-356e-a96a-74ad262ed819.roa (raw, json)
Hash identifier:          Hjh0QTHMIZAYK7L4MW4cdrmQZqkxsEl8T+HrUgtqOIU=
Subject key identifier:   37:1B:C7:64:DC:FA:40:B5:D1:F0:6C:17:13:72:0D:A9:82:62:45:F2
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584F497573A9931AA50A370146C0
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        150.9.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:73:a9:93:1a:a5:0a:37:01:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5187541c-a4a1-4bfa-9305-b73fdf324ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:0f:7a:05:57:2e:65:80:f2:5a:a9:fe:9c:
                    4d:83:8f:88:70:30:43:9b:29:06:bb:e4:a4:93:82:
                    b1:b0:96:3d:79:32:fb:09:4c:61:b7:38:63:9a:32:
                    68:41:ee:63:d0:17:29:ed:c6:f5:a9:72:34:c1:e9:
                    3c:00:84:68:83:ed:d4:e6:10:70:5e:81:7b:a1:95:
                    6b:55:78:cb:49:eb:dc:25:d2:a7:64:e8:6c:0f:f6:
                    e0:7e:aa:7d:7c:65:54:c3:fe:58:b1:ae:5c:73:d6:
                    10:42:7d:48:5f:78:f7:02:8e:47:89:f8:8d:09:17:
                    28:c4:5a:7e:b6:8c:85:7e:00:3e:4d:ca:41:22:8b:
                    3f:48:8d:e4:00:48:0a:3c:4f:e7:0e:ec:8b:96:8f:
                    4d:31:0b:e6:2c:f6:67:69:9a:23:33:d7:95:19:fe:
                    f0:91:ca:c5:e7:ac:42:15:a2:3c:74:e1:b7:f8:6e:
                    28:e8:01:d1:fc:46:4f:74:20:13:ea:af:59:b8:98:
                    a3:ee:be:68:89:0a:3c:9b:96:71:fd:c2:87:b1:ef:
                    55:e3:64:63:f9:7b:52:cc:29:b4:2e:2b:c9:dc:9d:
                    3c:f0:c3:21:90:9d:cd:59:9b:2e:c4:cc:42:2d:35:
                    a7:8c:e9:9a:b1:76:95:79:e8:db:c3:8d:d9:b4:10:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:C7:64:DC:FA:40:B5:D1:F0:6C:17:13:72:0D:A9:82:62:45:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:70:ff:85:be:d7:ce:1f:49:45:91:b9:77:55:bd:e4:bb:cf:
         c7:05:44:cf:bd:0b:18:8d:c6:bd:ff:37:ba:75:37:d9:69:bf:
         30:c3:84:66:f7:f2:b8:35:7c:3d:c8:45:32:83:82:d7:4a:64:
         cf:63:ac:d6:f9:e6:08:3d:81:4e:b6:72:18:78:0e:43:48:9e:
         7d:f7:2d:80:2e:69:f3:4e:7e:4d:9f:7e:0a:26:29:59:34:42:
         1e:6f:68:80:a5:f6:84:42:8a:ba:77:2a:54:ce:5d:cd:ff:4c:
         e3:68:db:14:29:15:80:70:84:c5:95:88:6c:43:98:6f:2f:fa:
         01:2b:82:2f:74:b5:fe:d7:7c:b3:8e:95:3b:37:0e:e8:e0:ff:
         a6:0f:bd:ab:59:f4:34:c1:67:92:4c:82:a5:74:e8:3f:fb:23:
         65:d4:1d:ff:a5:e7:74:29:6c:02:fc:4c:30:11:13:5d:c7:23:
         21:3f:36:f3:e5:38:b4:9d:da:89:c6:a2:e7:64:60:86:dd:62:
         35:84:95:50:e9:f6:d0:47:1e:03:ad:f8:9e:bb:19:19:8a:c8:
         38:61:e2:0c:a8:1a:fb:5b:fa:a6:2b:15:1f:44:7b:e1:98:6c:
         e7:fa:80:6b:2d:2c:f0:18:7e:c1:76:92:e1:7c:7a:49:85:44:
         60:1f:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:59:41 2026 by rpki-client