Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/1768c221-ba37-3864-8871-88598359edf4.roa
File:                     1768c221-ba37-3864-8871-88598359edf4.roa (raw, json)
Hash identifier:          rh7w6GuKv6CmKerrDeFo44uMgU589vEOgJ3RxrALZxg=
Subject key identifier:   58:0A:2F:24:EC:89:90:2A:9F:74:11:A8:EE:00:B0:33:87:D7:83:8B
Certificate issuer:       /CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493
Certificate serial:       010D0C9F4328584EFA129E229710B0B4C753A6D0
Authority key identifier: E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/1768c221-ba37-3864-8871-88598359edf4.roa
Signing time:             Thu 27 Aug 2026 14:38:07 +0000
ROA not before:           Thu 27 Aug 2026 14:38:07 +0000
ROA not after:            Wed 25 Nov 2026 15:38:07 +0000
asID:                     14374
IP address blocks:        209.195.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:12:9e:22:97:10:b0:b4:c7:53:a6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493
        Validity
            Not Before: Aug 27 14:38:07 2026 GMT
            Not After : Nov 25 15:38:07 2026 GMT
        Subject: CN=01ee31e1-1611-4af8-9f4f-9f84615a2754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:ef:33:d4:bd:5e:0c:b2:2b:32:5a:a0:22:
                    a5:6b:40:b9:80:ae:61:a2:c2:eb:58:06:35:39:f6:
                    3f:b3:ce:2c:23:78:19:7c:d3:ac:f5:9d:89:a4:3b:
                    01:38:7c:88:99:8e:18:e2:f5:60:a0:c3:e2:84:a4:
                    77:2d:c7:f7:b9:eb:98:17:12:9a:7f:81:9d:89:aa:
                    3a:ca:87:20:2d:27:dd:47:5e:b1:40:e0:2d:a3:0c:
                    d2:87:c6:82:18:46:9c:0b:7e:a5:2c:d9:86:ba:f1:
                    55:87:e8:c6:70:d2:c0:da:71:cf:60:49:ab:2c:78:
                    5b:71:84:c5:ec:65:f8:d0:9a:5d:19:65:e6:6e:1c:
                    d0:f8:d5:6e:47:7e:c6:2b:42:65:41:33:6e:38:f0:
                    34:3e:e2:ea:c1:22:63:ca:4b:b0:19:22:54:03:5e:
                    2b:fb:13:7d:e8:c3:a9:ed:61:ce:4f:01:00:71:9b:
                    e1:a4:f7:47:6b:42:52:19:e4:7b:9d:85:3a:ca:7f:
                    09:a5:9e:ff:13:67:37:db:11:fb:13:19:df:a5:f8:
                    50:d0:41:c0:c9:38:62:11:9e:21:ce:59:1d:d0:a3:
                    cc:21:1d:c4:38:bd:e4:66:bf:3d:f5:39:5e:ab:ef:
                    03:d4:3c:d6:51:6e:c9:2b:51:8f:28:07:bf:6a:21:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:2F:24:EC:89:90:2A:9F:74:11:A8:EE:00:B0:33:87:D7:83:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/1768c221-ba37-3864-8871-88598359edf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl

            X509v3 Authority Key Identifier:
                keyid:E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.195.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:1d:81:7d:1c:b2:9e:0e:9b:21:ec:33:09:21:f9:eb:da:
         7b:22:63:f9:33:56:a7:5a:50:96:a9:24:db:81:d6:e0:f1:5c:
         1b:48:ab:88:d5:73:4a:d5:e3:72:35:c1:8a:ab:db:ef:d7:f3:
         91:5e:02:49:d1:f8:f4:c5:cd:c7:ba:2f:ab:28:52:1d:47:a4:
         e6:c2:9f:15:58:e4:1e:14:8a:75:eb:21:d5:93:8a:bc:a3:32:
         5d:03:68:cb:79:bc:9d:d9:84:7a:0d:40:e4:a4:37:19:d1:92:
         cd:85:ce:15:4c:85:50:35:8b:b4:40:cd:75:d1:45:86:c0:ca:
         fb:a9:a1:cf:18:4a:58:82:58:35:ee:f1:3f:09:a3:31:c0:a2:
         75:6d:41:85:36:0b:8e:85:80:f5:79:d7:9d:f9:53:e0:5d:2d:
         3b:f8:1b:91:57:49:10:ed:17:9e:d8:d4:41:7d:79:dd:83:ce:
         15:87:04:a5:63:56:0f:5b:a7:1a:91:d5:6b:1e:c3:a2:d4:5a:
         82:f1:b9:78:e9:0b:69:c8:e9:af:49:00:f8:a0:5d:a9:9b:14:
         73:73:6c:6f:c1:09:9c:38:32:c0:f5:5b:16:bc:0c:df:86:bf:
         39:9f:54:ea:ee:c4:2c:34:a6:24:bd:d4:7e:ea:9f:36:19:e5:
         1b:e6:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:19:32 2026 by rpki-client