Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/55f2dabf-b4f4-3f64-bb0c-ddcc7128f75e.roa
File:                     55f2dabf-b4f4-3f64-bb0c-ddcc7128f75e.roa (raw, json)
Hash identifier:          k99BSLpdSLKYzMJv6cJoVzMsc29LZk+2hu+6NY70Z2I=
Subject key identifier:   D0:A2:DA:17:C6:35:45:3E:F4:FC:87:50:10:E8:79:F7:8B:DD:72:70
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584F288E90CDEBCE34ACCBC13F80
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/55f2dabf-b4f4-3f64-bb0c-ddcc7128f75e.roa
Signing time:             Sun 13 Sep 2026 06:15:02 +0000
ROA not before:           Sun 13 Sep 2026 06:15:02 +0000
ROA not after:            Sat 12 Dec 2026 07:15:02 +0000
asID:                     11179
IP address blocks:        146.12.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:28:8e:90:cd:eb:ce:34:ac:cb:c1:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Sep 13 06:15:02 2026 GMT
            Not After : Dec 12 07:15:02 2026 GMT
        Subject: CN=dd46184b-6218-40ea-bff7-dc3069b3da41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:56:b2:e5:22:b6:fd:e2:04:02:2f:b1:96:
                    d5:51:95:dd:c4:42:6f:63:62:b1:fb:05:b2:f1:9e:
                    41:d0:b2:89:00:c1:82:4b:2f:44:a3:de:85:fb:0e:
                    f5:0b:7d:27:79:3e:38:d9:94:0a:f7:f1:69:78:28:
                    06:64:88:06:bb:5a:9e:d9:46:9a:3f:09:02:cc:c6:
                    0c:a0:2e:20:29:ee:cd:96:78:d0:d8:c4:5f:f7:30:
                    3a:c5:67:d9:89:f2:3e:4d:d8:be:8e:4b:a8:5d:14:
                    a0:bf:1e:4f:86:62:1a:43:6b:ac:fe:c3:b5:7a:96:
                    56:bb:fa:f1:22:c7:2b:25:b3:46:2f:ec:23:59:da:
                    8c:99:64:3a:74:24:37:82:bc:ff:13:04:21:3b:5b:
                    c1:df:e3:e5:18:bf:d5:bd:b9:28:11:a7:22:1a:55:
                    08:b7:fb:56:a2:ad:9a:b4:8c:34:d6:f3:01:6b:b3:
                    6e:ef:18:4f:00:fc:45:57:22:31:6a:ce:1f:27:1e:
                    ca:51:65:f1:a9:46:f9:57:66:27:41:cf:63:1d:cf:
                    4a:07:4f:1a:de:fe:36:68:75:4c:dd:2f:65:b1:b3:
                    18:73:b0:45:9b:2b:ad:da:22:4b:8f:72:a9:1b:ce:
                    4a:5c:04:d8:4e:65:55:3c:15:5d:60:87:9d:f0:57:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:DA:17:C6:35:45:3E:F4:FC:87:50:10:E8:79:F7:8B:DD:72:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/55f2dabf-b4f4-3f64-bb0c-ddcc7128f75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:45:9d:bb:b6:b0:75:6c:7b:3a:14:fd:0e:ef:66:85:24:c2:
         6d:86:3e:dc:e8:43:f0:04:92:4c:26:7a:90:be:4e:00:8b:55:
         c3:4c:55:ff:34:f7:8a:0e:04:68:c5:60:51:78:b2:ea:70:66:
         ca:6f:ff:2c:c0:7d:9a:f9:a1:c4:91:ad:ae:73:de:e8:db:76:
         36:4b:4e:df:94:f3:f4:90:f0:11:66:0a:35:51:dd:f4:46:89:
         40:5e:f1:d2:7d:aa:05:96:55:7b:2b:b3:81:86:ce:d7:25:1a:
         07:cc:0f:2c:da:88:cb:1f:c5:4a:57:c7:bd:81:eb:10:d1:13:
         11:b8:21:ba:84:0f:2a:0a:fe:c3:dd:0f:a4:02:de:2b:22:95:
         99:b7:a7:38:08:ab:c5:cc:66:10:a2:cf:38:22:66:7f:ae:8b:
         45:ef:44:46:b5:5e:79:a2:da:00:1a:eb:20:b2:1d:4f:b1:bb:
         ce:37:29:cd:16:f8:a8:d9:81:fa:a2:11:54:73:eb:4f:a2:6b:
         d0:83:b4:dd:b4:1d:ee:99:b3:ad:84:c5:e2:d2:81:69:94:2e:
         61:50:0a:41:36:6d:ad:7a:7e:ac:09:92:56:09:36:67:57:57:
         fe:09:34:60:27:10:2b:07:06:6a:db:27:d6:7b:25:e0:13:3a:
         a6:28:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:57 2026 by rpki-client