Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/1ac70efc-7226-3fd3-8135-b2bc19989620.roa
File:                     1ac70efc-7226-3fd3-8135-b2bc19989620.roa (raw, json)
Hash identifier:          Uv7VC70OdQlEJPgv3UUIjhJujX2oKS0FCsJMXF7jP4k=
Subject key identifier:   9D:6E:68:32:02:E2:57:11:DE:1A:52:52:A7:23:8F:B8:A4:E8:AB:2B
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584EF5B20785047EC9A9D7341200
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/1ac70efc-7226-3fd3-8135-b2bc19989620.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     812
IP address blocks:        209.103.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:07:85:04:7e:c9:a9:d7:34:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=5e81e1f4-b2f6-494d-aceb-56089734789e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:15:0d:db:ac:97:51:69:30:1d:97:e4:3a:
                    91:ca:38:64:d4:31:bc:68:94:18:b3:86:d2:72:f4:
                    f6:01:82:7c:80:6e:b5:cc:49:7d:00:3c:37:85:f0:
                    13:3f:f8:68:b6:d8:6a:0d:54:a5:f4:6a:3e:15:56:
                    67:57:fc:3f:4a:b8:24:aa:95:3a:b1:a4:9d:03:9a:
                    59:13:c3:89:ab:d3:75:e4:3f:02:cd:16:f7:20:b7:
                    52:ab:fd:d8:99:84:d4:e3:06:b2:4a:bf:2f:25:22:
                    89:f0:d2:88:eb:b1:b6:f6:d2:db:17:f1:8a:55:33:
                    b1:e2:95:e9:c2:83:d6:37:e1:af:e6:0d:4b:8a:1f:
                    81:9b:39:44:2d:3d:e6:41:3b:ef:cb:57:7f:7c:ea:
                    62:43:b6:80:a5:b8:c2:96:0e:01:ef:66:75:d4:76:
                    9a:9d:74:dd:d8:e2:b4:6c:b1:27:a8:05:39:1c:b5:
                    17:52:87:a8:c1:92:b7:02:d8:83:65:12:86:bc:8f:
                    7a:36:0c:12:59:c9:06:3e:c0:15:bf:01:c9:30:6d:
                    3b:3a:ac:88:1c:9a:54:71:64:92:6d:4f:de:f3:50:
                    fe:a3:19:84:43:52:3c:98:bb:94:7d:0a:0a:a8:8d:
                    64:39:3f:d5:8d:f2:64:f7:f4:12:c1:d6:ae:26:79:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6E:68:32:02:E2:57:11:DE:1A:52:52:A7:23:8F:B8:A4:E8:AB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/1ac70efc-7226-3fd3-8135-b2bc19989620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.103.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0f:6c:0d:d2:6a:06:db:13:2c:32:62:b6:b8:fe:0c:25:82:
         7e:2d:13:69:98:ee:95:6a:30:b2:51:89:42:01:f6:ac:c5:e8:
         b8:dc:0c:fb:14:01:c9:5f:35:5e:0a:41:e4:bb:f7:d5:ee:6e:
         4d:11:df:f9:72:76:9d:65:30:2a:1c:f9:1a:82:5c:54:51:c6:
         7f:c7:a8:ea:56:97:e5:b6:ea:4f:bc:8d:68:08:b3:5b:5f:8c:
         61:ea:d4:c9:c8:8b:b8:57:5d:54:25:13:10:f4:d2:06:58:83:
         3b:d3:8c:c2:a4:6b:39:d2:c8:1f:e1:9e:50:f1:ea:6d:e8:86:
         b8:f8:4e:8f:25:23:28:35:3b:28:e3:00:75:a7:c5:86:51:03:
         bc:4f:eb:f4:29:b6:3f:84:52:07:3d:24:a9:e2:28:41:8a:eb:
         ee:25:9a:59:7e:2a:64:53:04:f9:e3:6e:71:4e:25:13:af:42:
         c5:e6:9d:36:2e:15:9c:d4:0e:59:46:7b:dd:9d:22:1c:03:eb:
         e5:da:8c:c5:48:9b:43:8f:4d:af:91:e6:90:d9:96:d8:55:de:
         5f:0c:2d:ea:e9:0f:00:8b:76:bf:53:e4:5d:c2:dd:5f:11:33:
         c9:86:97:d4:69:7c:ba:96:aa:c4:21:82:59:35:f4:45:ad:3a:
         59:c9:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:28:24 2026 by rpki-client