Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/eec201eb-80a2-3a8c-9d19-e062900e1d78.roa
File:                     eec201eb-80a2-3a8c-9d19-e062900e1d78.roa (raw, json)
Hash identifier:          PuBMbLG76s+POOJPVYA2uGSU7SKPQS+cwmqhW82rFKk=
Subject key identifier:   95:91:02:8E:7A:5B:CA:1C:C0:8F:79:5E:FE:BB:B4:5E:80:3A:50:AD
Certificate issuer:       /CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
Certificate serial:       010D0C9F4328584F3A17CD38ECABA95F01812000
Authority key identifier: C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/eec201eb-80a2-3a8c-9d19-e062900e1d78.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     22885
IP address blocks:        209.46.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:cd:38:ec:ab:a9:5f:01:81:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=1e37fea9-caae-474d-b59a-0488e007d125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:4d:20:3f:99:25:97:fb:2d:a0:c6:7c:7c:
                    9c:88:f8:ec:72:63:50:31:c1:b6:dd:c9:ff:a9:80:
                    b5:a5:62:bb:4c:af:16:52:44:04:a7:2b:cb:4e:a7:
                    6c:0c:5e:b9:3a:07:08:85:54:f0:7d:7e:7c:06:fd:
                    79:5f:48:63:12:5c:36:94:38:ab:51:7c:c8:60:9d:
                    79:b2:99:ee:f0:cc:94:17:43:33:d3:22:da:4f:fe:
                    eb:ad:0a:60:69:68:e7:7b:30:09:5d:b8:34:b8:23:
                    52:a5:d9:58:7f:ab:51:c7:43:8f:9d:04:34:07:e4:
                    1f:41:c5:e7:22:4c:f7:eb:35:55:98:5c:03:07:20:
                    d9:a9:37:97:77:2d:50:11:59:94:26:0e:45:18:36:
                    1a:bb:9f:86:b0:77:93:48:6f:a6:ba:a2:01:58:0c:
                    a0:fc:bd:87:3b:72:6b:11:00:81:eb:87:29:fe:1f:
                    3a:8f:4f:5c:a7:18:96:b7:bc:33:66:43:03:ae:f5:
                    8a:65:39:ab:9f:db:4e:d0:7f:7e:bc:89:ba:b4:03:
                    76:c6:1a:e0:79:3b:d2:5b:12:4a:fe:5c:5a:a8:84:
                    9e:89:13:bb:14:1a:2c:4e:12:78:e6:07:cc:70:0d:
                    06:25:47:bb:5a:41:53:3a:0f:f8:3a:11:a3:75:48:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:02:8E:7A:5B:CA:1C:C0:8F:79:5E:FE:BB:B4:5E:80:3A:50:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/eec201eb-80a2-3a8c-9d19-e062900e1d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl

            X509v3 Authority Key Identifier:
                keyid:C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:a6:4c:30:52:1b:91:be:c6:7e:a1:42:2d:85:cc:23:fc:
         7e:cf:ff:53:94:9e:15:51:d1:af:c0:7f:af:6b:24:7a:96:b3:
         f1:6c:b1:58:f2:8f:dd:ba:fa:58:cd:ed:a5:be:5c:20:31:96:
         cc:ac:a2:d9:e9:03:48:a3:43:b0:c9:ea:80:61:be:c3:77:1b:
         a1:65:13:54:50:73:ef:9e:cd:80:5a:ff:22:30:be:f2:8d:9a:
         1b:65:d3:f2:d0:17:ac:c7:5d:dc:1c:00:89:04:07:20:05:44:
         bf:d8:f3:81:a9:ef:d1:72:3a:58:f2:0f:47:24:58:22:3f:91:
         66:73:73:fd:fd:a6:df:38:ac:98:98:e7:f3:65:48:5a:b1:ef:
         9f:fa:cb:40:f0:ab:04:e0:d4:a5:63:62:22:b2:17:64:7c:66:
         77:98:26:8c:f0:8b:84:e7:6d:35:00:3d:9b:59:24:eb:3a:16:
         58:31:31:5a:47:83:dc:4a:38:07:9e:2b:1a:d2:26:ef:70:47:
         76:2c:93:59:51:c4:00:b4:ed:fe:d8:cb:44:82:70:0c:9d:3c:
         30:a8:35:9a:50:89:02:55:79:e1:9d:6f:85:41:bd:35:fc:4e:
         1c:15:bf:e1:53:14:78:e5:d7:6a:a5:7e:69:b6:02:4d:87:3a:
         63:9e:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:00 2026 by rpki-client