Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/79617b63-ff9c-3d46-9b08-2cbadfbafb02.roa
File:                     79617b63-ff9c-3d46-9b08-2cbadfbafb02.roa (raw, json)
Hash identifier:          H/E7zXqvWBcIGqS1O6NGa6iC/3MhYzuvxaGh+aKjDqI=
Subject key identifier:   1C:B8:2C:36:AC:81:B7:66:BA:B6:5D:04:B2:1A:6C:9F:F2:7F:CE:39
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584F289DE73FB44AFA62CC454F00
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/79617b63-ff9c-3d46-9b08-2cbadfbafb02.roa
Signing time:             Sun 13 Sep 2026 06:45:56 +0000
ROA not before:           Sun 13 Sep 2026 06:45:56 +0000
ROA not after:            Sat 12 Dec 2026 07:45:56 +0000
asID:                     11179
IP address blocks:        146.12.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:28:9d:e7:3f:b4:4a:fa:62:cc:45:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Sep 13 06:45:56 2026 GMT
            Not After : Dec 12 07:45:56 2026 GMT
        Subject: CN=bd720357-05df-4dc1-af54-626c72035e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:bc:35:b2:79:67:fe:60:1b:40:f5:53:b1:
                    7c:07:55:1a:fd:24:65:a0:a8:d6:b5:b7:a8:fe:fa:
                    d2:29:6e:5b:27:0e:05:6e:64:04:77:15:a8:b5:dc:
                    f3:44:69:03:e6:07:fe:b4:da:de:da:f7:ab:d0:e3:
                    13:73:38:80:fa:0e:95:cc:85:0a:f3:68:4a:61:c8:
                    9b:af:f6:ab:04:e5:a1:2e:d8:ef:e8:54:dc:98:2d:
                    59:f8:f4:c4:e5:93:00:18:4d:90:9f:09:b9:d6:c2:
                    2c:a5:0b:2e:1e:7b:d7:ed:85:15:29:65:6d:a7:a2:
                    21:82:5a:4b:a7:43:e6:2f:6f:76:2f:c7:43:f4:4a:
                    63:4a:01:b1:d8:eb:41:d4:ec:5b:34:95:6a:1f:15:
                    f2:44:74:44:51:06:ed:d7:10:4b:3d:99:7b:ec:9e:
                    cc:93:9b:9c:5f:ad:6c:62:67:72:af:1f:06:1e:8f:
                    d5:f2:75:05:2c:8e:ef:1f:9f:5e:a9:9f:31:71:e7:
                    81:00:3e:ca:54:54:6d:e5:5e:61:81:4c:c9:74:4d:
                    42:be:f4:0b:e4:08:97:be:97:c8:29:05:47:15:f6:
                    a7:69:f7:52:ca:1c:00:89:e3:91:ae:da:c0:46:cd:
                    41:f1:18:51:35:38:66:4d:34:b7:d0:13:3e:6d:d2:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B8:2C:36:AC:81:B7:66:BA:B6:5D:04:B2:1A:6C:9F:F2:7F:CE:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/79617b63-ff9c-3d46-9b08-2cbadfbafb02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:3c:58:46:92:c6:d7:b8:dc:53:d0:ba:81:2c:4c:f9:e1:
         a9:6e:93:78:b4:0b:8a:cb:17:e4:87:35:c2:f9:5a:f5:a5:bb:
         a9:e0:e3:1d:ef:59:a3:99:d0:88:a3:ad:6c:c2:89:54:92:38:
         d8:2d:29:93:e4:f7:37:1d:e8:2a:27:27:bb:8e:e6:98:db:41:
         46:97:a9:a1:81:f1:85:92:97:1b:d2:ce:9c:4e:0d:c2:50:d4:
         de:e9:39:90:8b:fc:6a:bd:8a:a3:57:3b:17:7e:d1:75:13:b4:
         dc:4b:d1:47:8e:33:3b:53:d5:e9:9d:1a:34:64:b8:8c:31:97:
         94:29:6b:57:30:99:37:c6:4d:a6:f2:1f:34:e5:04:6b:65:96:
         4f:73:c1:49:50:11:f1:ad:30:a1:79:00:88:4e:ef:13:38:ab:
         a0:52:fa:45:02:df:9e:97:23:7e:b3:c3:fb:ee:29:89:d5:57:
         82:07:62:96:fd:b4:19:13:82:d7:0e:36:58:50:bb:d8:13:c1:
         d1:d4:73:4e:6e:5f:a7:9b:8c:90:9a:2c:eb:94:55:a5:49:ef:
         3e:25:83:ac:9b:96:3b:a1:13:56:05:13:8b:4a:25:d4:e2:fb:
         3d:22:c1:f2:cd:2c:4b:fb:2f:7d:9d:df:72:be:5b:c6:1b:2f:
         e3:b5:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:38 2026 by rpki-client