Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4c9dbb7-0cfd-3f14-ba7f-fcfae26ffbf6.roa
File:                     b4c9dbb7-0cfd-3f14-ba7f-fcfae26ffbf6.roa (raw, json)
Hash identifier:          dPSENdyMUE6MsDM24gNyV7P1UmfTi311fs2d5E5uoBg=
Subject key identifier:   EC:3F:D8:3A:68:9E:F6:1E:D7:17:EB:E8:80:79:41:90:02:BD:76:72
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F20F7CC01D746D6016007FF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4c9dbb7-0cfd-3f14-ba7f-fcfae26ffbf6.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     2914
IP address blocks:        96.126.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:cc:01:d7:46:d6:01:60:07:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=609e95c0-1a39-4c6f-9ab0-5a50410739df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:7f:b4:43:ac:2e:71:5d:5e:51:1d:0c:ed:
                    a4:bc:57:e8:36:3b:41:9c:2f:63:2d:8e:35:c0:ef:
                    29:04:05:e5:1e:21:96:fe:84:01:d4:e3:16:e3:c5:
                    e1:59:e4:d0:20:3a:04:7c:6f:59:db:01:94:1b:76:
                    b5:6a:e6:2d:a8:9a:a5:29:d5:c9:84:4b:ee:33:f6:
                    0c:84:64:3f:8e:82:09:5e:c3:66:e3:df:d1:00:15:
                    36:b6:37:c4:a4:c3:0c:59:cb:44:eb:b2:f2:72:69:
                    af:58:ad:49:0d:9a:01:ac:83:5d:ff:07:b7:56:75:
                    58:ba:41:2b:d3:fd:97:cc:48:35:f0:53:66:1d:97:
                    e2:81:a5:03:c6:96:d3:b7:4d:f4:e8:a4:a9:17:95:
                    cb:8d:59:2d:aa:03:a0:bb:0c:ba:1f:28:f8:d8:f7:
                    c0:7d:dd:5f:48:1c:65:e7:34:b6:ff:74:03:30:37:
                    f6:44:62:81:96:d3:b5:d9:24:0f:d3:3a:d2:01:8a:
                    75:04:0e:e8:13:f1:b9:d4:28:e4:cb:54:0a:77:21:
                    73:bf:dd:67:9c:24:49:97:46:22:3d:88:26:35:cb:
                    d0:14:31:da:95:23:04:2c:d9:57:3c:9c:94:ab:7e:
                    db:14:b8:b2:d5:03:ba:89:37:a1:2e:9b:f9:8a:d6:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3F:D8:3A:68:9E:F6:1E:D7:17:EB:E8:80:79:41:90:02:BD:76:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4c9dbb7-0cfd-3f14-ba7f-fcfae26ffbf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:97:d4:68:54:01:7c:99:5e:63:72:d1:7d:4c:02:0f:4c:29:
         ec:92:18:67:92:65:a7:ec:fb:a5:21:f0:73:98:23:67:ea:0b:
         b3:47:0c:c5:86:e8:08:23:3a:02:12:8f:17:1f:38:b2:58:ec:
         2e:4b:fe:07:ce:f6:f5:ae:79:35:fc:23:90:6d:10:b8:6f:8b:
         8c:6c:ef:03:b6:c8:40:a1:c7:25:9e:11:6d:57:d9:25:c8:83:
         37:d8:5f:25:68:f3:ba:aa:e3:b6:32:1c:5b:f7:f1:bc:10:eb:
         3f:ef:70:60:7e:12:79:50:d1:29:86:c6:93:e6:98:56:02:6d:
         20:bc:35:83:9d:9c:26:e2:03:a6:78:57:82:62:0b:ec:ab:4c:
         9d:37:38:56:5a:36:48:4c:fb:11:38:0c:8e:aa:22:1f:72:da:
         8b:67:09:5e:ef:f1:1e:4d:5e:a2:bd:c4:89:3d:cf:89:da:0b:
         70:7b:e9:69:96:e9:73:fc:78:6f:e1:3e:5d:3d:1b:cb:1c:3a:
         91:bf:c2:64:db:17:a6:83:92:29:59:bd:af:4a:36:8f:71:9f:
         53:de:dc:eb:27:b8:62:c6:8a:64:f6:49:b0:05:ce:0a:49:d7:
         14:50:3f:1f:81:cb:80:6c:45:22:d5:de:99:98:6f:ac:70:a7:
         96:b2:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:09:56 2026 by rpki-client