Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5/3896a409-b1b5-3e6f-9a96-8122d34990b4.roa
File:                     3896a409-b1b5-3e6f-9a96-8122d34990b4.roa (raw, json)
Hash identifier:          JF/kE37TGa9EZw6BU0vghMLrA/L6S7NeAIv3PQhZEPc=
Subject key identifier:   92:66:BD:C7:6B:4A:3D:CE:B3:D4:5F:39:22:16:5F:29:EE:BB:5B:30
Certificate issuer:       /CN=aa049b6e-6edd-42e8-93fd-1b81bd68f7c5
Certificate serial:       010D0C9F4328584F331D1552DB77ECD1138B5E60
Authority key identifier: C6:09:C1:B0:62:EF:D5:06:72:A8:4F:95:7D:75:7F:36:CB:5F:5B:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5/3896a409-b1b5-3e6f-9a96-8122d34990b4.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     29863
IP address blocks:        204.246.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:15:52:db:77:ec:d1:13:8b:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa049b6e-6edd-42e8-93fd-1b81bd68f7c5
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=30d0fec3-268e-43ab-a59c-b8e02c559ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:8b:82:10:f8:55:66:13:86:a9:11:6b:40:
                    76:82:01:42:b1:a5:d9:b8:1c:ff:3a:aa:7c:96:61:
                    ab:b0:6d:60:08:41:41:60:98:aa:e0:8d:f4:26:19:
                    38:62:1d:80:73:e4:a2:cf:45:db:62:45:ed:5b:98:
                    41:ee:52:ce:04:11:ed:27:c2:60:05:59:68:d8:6b:
                    1e:a0:8a:aa:46:d4:bb:fa:b8:ea:ee:36:27:44:e0:
                    cc:1e:69:f7:eb:6a:df:fb:6b:61:3c:92:54:55:87:
                    2d:88:78:8f:60:ed:71:53:5d:50:19:a5:31:eb:cb:
                    70:1f:47:05:e3:39:d6:15:66:38:98:2d:9b:7f:29:
                    9d:d6:95:8e:c3:8d:95:3e:90:53:14:5d:00:31:ad:
                    0c:a6:20:0a:cc:b9:d3:af:b8:37:1d:fa:8d:c0:74:
                    6e:28:07:3f:3f:da:be:40:86:15:b1:87:70:8e:5a:
                    47:eb:c9:3d:cf:a9:b9:e8:13:fd:44:ee:4b:3e:8a:
                    b7:ac:a2:7c:f1:ac:ad:f6:f9:45:e8:01:b6:70:31:
                    20:a5:87:c9:6e:c4:cd:4b:98:6c:bc:bf:42:44:1a:
                    1f:2a:cd:8b:ca:95:0d:5b:75:d2:f6:8d:22:35:48:
                    2f:d8:cc:6f:ac:8f:9a:e6:de:a9:b7:a3:d4:f4:9a:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:BD:C7:6B:4A:3D:CE:B3:D4:5F:39:22:16:5F:29:EE:BB:5B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5/3896a409-b1b5-3e6f-9a96-8122d34990b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5.crl

            X509v3 Authority Key Identifier:
                keyid:C6:09:C1:B0:62:EF:D5:06:72:A8:4F:95:7D:75:7F:36:CB:5F:5B:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/aa049b6e-6edd-42e8-93fd-1b81bd68f7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:29:61:89:25:c8:d5:b4:45:71:5d:4b:3b:4b:b3:87:37:94:
         23:4e:b5:13:3a:ac:77:df:2c:86:2d:21:47:fc:ca:1c:35:8b:
         a1:14:3e:b8:40:c9:7f:b5:dd:45:e7:49:a5:1f:21:fe:3f:27:
         6d:ba:da:ad:c1:cd:2f:7e:8c:7c:22:d1:d6:a4:06:15:00:2f:
         a3:8c:88:1c:08:d6:f3:1f:1f:47:3e:05:07:ad:10:6a:59:eb:
         2e:44:04:c9:7a:66:2b:b9:30:0a:ce:df:b2:fc:aa:35:0d:be:
         50:48:09:28:f3:0f:cb:7a:a2:f8:9b:77:32:0a:ea:04:f8:3a:
         79:ff:59:7f:0c:32:62:19:2f:a7:f4:9c:5b:e7:6e:5f:64:f0:
         78:c8:c7:d0:d0:2a:92:ac:df:1a:3f:29:af:fa:41:b4:2f:12:
         77:70:b4:f9:73:b6:48:13:45:3e:43:d9:14:2a:45:59:0a:25:
         29:76:b7:86:3c:ea:fc:20:48:22:51:c1:1d:12:f6:96:14:d4:
         f8:3d:1f:83:f9:5d:ae:ea:82:50:73:cf:6c:95:5a:c6:89:6b:
         7c:20:db:9f:e4:5b:e4:61:78:0f:29:49:aa:ec:61:07:11:a3:
         52:c3:0e:2a:f4:a4:de:9e:7c:f0:0c:13:c6:ea:14:41:61:44:
         af:77:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:15:05 2026 by rpki-client