Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/9785f7ba-f89b-3356-bd71-4c5c2c24b236.roa
File:                     9785f7ba-f89b-3356-bd71-4c5c2c24b236.roa (raw, json)
Hash identifier:          KOdIS+J8clNQoKuDHPWLHjPDq2SFTTr7tTaGHP6xlSA=
Subject key identifier:   FB:97:E0:51:F6:ED:9F:5F:F6:20:C9:70:D7:7A:05:A3:CD:9E:50:8B
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F4328584F2527A538C23EA6D819702490
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/9785f7ba-f89b-3356-bd71-4c5c2c24b236.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     64227
IP address blocks:        134.49.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a5:38:c2:3e:a6:d8:19:70:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=00ffafa3-04a6-4db1-93ca-0c6839a44b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:84:e6:06:c7:9a:71:41:39:3f:d9:c2:36:7f:
                    23:e8:a8:dc:c7:43:f3:f3:84:5a:43:f8:59:5d:b2:
                    30:87:a2:5b:38:b0:3a:8e:8d:76:f3:c3:f9:11:01:
                    86:18:45:73:a1:57:e8:f7:1b:55:d3:7e:3a:b9:b8:
                    5d:5a:2a:b0:11:48:24:58:ac:4f:2b:1c:26:ef:17:
                    e0:a7:4b:63:bb:cb:f4:9e:64:72:64:83:43:23:36:
                    94:cf:9a:89:4a:13:b8:54:11:1b:b0:06:4f:e6:39:
                    2d:c7:6f:8f:8c:01:50:87:af:cc:20:05:12:ef:a5:
                    88:44:68:23:13:13:67:f3:8e:5d:c7:bc:a6:34:37:
                    7b:45:4a:01:61:86:70:42:15:e6:a6:06:8c:21:a2:
                    cc:0a:08:22:2f:14:48:ff:40:9a:d1:69:8f:b8:e3:
                    1c:43:b7:41:c4:aa:c9:86:ab:6b:25:85:89:de:f6:
                    15:73:24:a6:c8:8c:06:9d:d1:1a:a3:69:15:e6:d4:
                    2e:88:86:77:ab:40:2e:28:68:e5:0e:44:7c:db:4c:
                    ff:2a:22:15:21:8b:08:00:46:72:be:3c:fc:86:4f:
                    3a:d7:83:73:71:8e:33:0d:5a:8f:22:14:02:27:ef:
                    9b:75:03:dc:6f:fc:71:46:91:53:f5:a3:2c:16:51:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:E0:51:F6:ED:9F:5F:F6:20:C9:70:D7:7A:05:A3:CD:9E:50:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/9785f7ba-f89b-3356-bd71-4c5c2c24b236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:74:dd:de:7a:99:86:44:80:3c:25:33:fc:da:61:f9:a2:a4:
         b6:32:ac:cd:4e:8a:9c:1f:ef:94:32:34:2c:c3:06:c8:e3:4a:
         bc:b1:82:1b:40:2f:92:ac:7c:4b:b1:8b:d4:0a:0c:3b:4e:e4:
         f4:d9:76:a3:d3:89:07:2d:7f:49:f6:08:c1:27:3e:da:bd:82:
         e0:be:0d:5a:6e:5a:d7:fd:d0:93:fc:a8:51:df:73:53:50:ba:
         4d:b8:61:c1:3b:da:dd:9d:3e:6d:b1:4f:83:89:32:78:61:93:
         1b:9a:69:fa:2b:8c:63:ee:52:8a:93:40:9b:53:94:8c:05:18:
         79:33:24:16:b7:61:7c:eb:f8:1f:e6:d2:b8:bc:ad:b2:cd:c6:
         91:bf:21:13:f4:68:c8:0a:5a:66:7a:04:fb:62:78:93:6a:71:
         fa:a2:52:b3:23:c9:10:60:fc:cf:9e:58:2d:6a:d8:a6:e7:49:
         2b:a6:d1:8f:92:28:8f:50:5e:1a:23:7b:b2:41:de:9a:14:20:
         26:da:ba:b9:58:32:18:8d:11:6d:f5:9e:4b:09:87:bd:da:f8:
         2e:b2:8a:8f:65:dd:77:93:55:da:10:20:45:db:1e:80:08:c2:
         eb:fc:d9:28:ea:91:82:fd:3e:2f:c4:40:b1:42:ae:04:8e:45:
         62:83:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:41:31 2026 by rpki-client