Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/39ff7302-b1eb-394f-8a81-a0ef4ef9bbbb.roa
File:                     39ff7302-b1eb-394f-8a81-a0ef4ef9bbbb.roa (raw, json)
Hash identifier:          u0b9DG1Q0yNLXK6IXvTY4mBTe7AEMAhdPO1P3ZMULNA=
Subject key identifier:   82:FF:17:10:F7:4E:D2:41:9B:76:C8:05:00:4C:05:8E:83:DF:54:58
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584F119D17F27CC0373EF4B274C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/39ff7302-b1eb-394f-8a81-a0ef4ef9bbbb.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     26744
IP address blocks:        206.180.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:17:f2:7c:c0:37:3e:f4:b2:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=83b2d6ce-2795-43ff-9f1a-278b1b6fd0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:5b:95:50:5d:2e:70:04:49:a1:01:14:71:
                    2b:22:16:ab:fa:81:6b:45:59:3f:d3:4f:04:1e:f1:
                    dd:80:f5:4a:bd:ff:d6:0d:20:cc:bc:6f:da:d2:a5:
                    98:8c:7d:46:b2:9b:0e:62:5e:f7:14:e4:ed:64:59:
                    2c:03:a3:d9:2d:ef:ec:a0:d4:3d:21:21:7b:b1:42:
                    7a:2d:b9:94:3f:68:81:51:b9:e4:71:8b:f8:ff:98:
                    ad:3e:1b:cc:71:b3:aa:a9:f8:7a:59:33:c1:17:af:
                    8e:c4:f1:b0:ca:a1:4f:23:a0:00:e2:d4:c8:a3:52:
                    b0:d1:f4:31:e8:9b:9c:3e:8f:ec:cd:f9:bb:95:d7:
                    c8:18:d9:b6:dc:26:83:e1:f2:2f:a7:9f:ec:b7:ac:
                    d5:2d:56:23:eb:b8:b9:b6:57:61:6d:15:21:73:84:
                    cf:de:b9:10:f4:d8:6a:2d:92:a2:6d:78:2c:0d:43:
                    45:4f:d9:c0:42:b9:98:7b:8a:0e:c3:bb:b4:33:b4:
                    15:5c:c6:7e:7c:f3:32:2e:91:e7:81:f9:cb:b5:0e:
                    a5:e7:96:22:f1:d9:36:2f:d0:c9:92:91:ad:bd:33:
                    f4:97:08:12:4f:d2:72:72:27:a3:4f:3f:b8:a9:13:
                    97:8e:aa:af:68:d3:74:21:12:8c:d4:0a:df:82:54:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:17:10:F7:4E:D2:41:9B:76:C8:05:00:4C:05:8E:83:DF:54:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/39ff7302-b1eb-394f-8a81-a0ef4ef9bbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:b5:0a:0b:c8:ec:fb:b8:3d:27:89:cc:4a:89:db:2e:e4:
         f9:ef:5a:1f:8c:a7:ef:75:f7:87:0a:d1:16:ea:29:b6:29:7c:
         55:8b:64:db:66:14:9f:f2:ca:39:2c:12:20:68:8f:63:e8:e2:
         b9:f1:67:17:18:b0:a2:d4:b1:f7:63:a5:66:31:b9:b2:de:12:
         50:66:fe:91:aa:16:c2:dc:87:47:4a:cd:3d:55:4e:11:ae:48:
         c6:67:68:4b:b8:ac:02:83:d8:52:ad:a2:2b:c4:5f:a3:81:52:
         52:06:84:96:c8:f8:bb:f4:2f:89:37:5e:53:92:23:0c:61:c6:
         1d:0d:54:9d:e9:bc:a5:62:83:04:9c:6d:cb:27:50:2b:12:06:
         57:3a:56:b6:bb:3b:c4:ab:60:40:be:54:15:26:aa:76:2c:f8:
         ce:0f:c7:48:fd:ab:42:ed:a8:81:0e:1b:d6:3b:ea:e6:57:ff:
         5d:12:7c:4c:9a:92:a2:77:67:01:1a:75:70:c9:5f:d8:c7:6e:
         51:e9:2f:b0:1b:aa:c7:e6:e9:c7:be:52:8f:28:28:f8:c5:ef:
         ce:67:ef:12:fe:74:bc:ae:33:dc:ca:eb:25:02:1a:d6:06:6e:
         a8:f0:97:13:46:f0:55:56:ad:8e:56:07:8b:c9:bf:d4:18:7e:
         76:6e:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:08 2026 by rpki-client