Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa
File:                     f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa (raw, json)
Hash identifier:          XGuh1FGQHWGgTAd9gwTOInggZ7X9czWG7JeeZ7WPsbU=
Subject key identifier:   6B:A1:61:15:C9:D0:7B:86:BE:22:E9:0B:7C:16:F1:FC:5D:DC:7E:E1
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584F093CECD3047CD2876C08AB00
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     3855
IP address blocks:        204.13.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ec:d3:04:7c:d2:87:6c:08:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=f8b74366-0762-4051-ac2d-4a6710bd2cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:a3:3e:16:ea:fd:25:de:db:3e:2f:ea:34:
                    29:f7:c1:89:10:98:22:ac:12:2e:f1:d1:24:d0:f1:
                    af:52:a7:a4:b7:e9:1d:34:69:11:84:71:1a:c8:6e:
                    f3:76:79:4b:bf:63:09:ef:83:28:95:8a:76:b9:4f:
                    14:fb:45:e3:78:42:d3:b8:16:6e:bb:08:e2:ab:9e:
                    d4:ed:19:ef:af:66:9c:0e:e4:e2:20:b6:cd:cb:b0:
                    40:f6:8e:8b:8f:10:c4:96:e5:51:e9:71:96:be:30:
                    dc:d8:e4:be:2e:2a:c7:5a:42:95:97:8b:d6:60:0e:
                    58:d8:83:de:3b:9a:a9:57:d5:0e:7d:eb:b3:21:76:
                    a7:ac:a0:8e:df:1e:14:3a:fc:8e:8a:f5:2d:dd:39:
                    5c:04:d3:cf:14:6c:bd:9c:e5:9e:29:f0:7c:78:4d:
                    ba:41:d9:7f:8c:85:2a:dc:80:2e:6f:85:cf:a5:e6:
                    9d:ad:a7:70:b6:cf:38:59:61:01:71:87:3a:d4:29:
                    08:80:14:6d:77:38:f3:08:28:f2:3b:5e:d3:51:99:
                    df:27:49:32:ed:e3:68:22:e6:3f:98:a7:1c:7b:a1:
                    ad:ac:80:0c:86:05:ce:3c:29:97:0c:a8:5d:f6:7b:
                    2c:e4:79:5d:8b:75:74:14:a9:0d:20:69:43:f2:4c:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:61:15:C9:D0:7B:86:BE:22:E9:0B:7C:16:F1:FC:5D:DC:7E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:b5:0d:73:b4:37:98:0c:a2:aa:36:6e:be:ec:04:27:09:
         52:73:e3:c8:d2:09:e5:bd:5e:ec:36:e2:8a:78:e3:b3:19:be:
         ae:95:f2:00:92:f9:ba:36:0a:a2:e0:23:1a:98:a2:f4:b4:91:
         97:6b:28:f3:a2:21:e8:57:53:4f:63:dd:13:17:89:bb:f8:ab:
         25:37:66:d0:e7:78:c4:68:53:a2:76:8f:75:d9:f9:0c:f0:4e:
         d0:87:67:28:9a:0e:b3:1f:24:00:4a:eb:8c:1f:e8:2a:84:6f:
         d8:11:50:6a:74:12:ff:2e:31:49:5c:10:e9:33:09:4f:97:ba:
         8b:76:e4:60:b5:71:69:fb:85:d3:89:54:f4:78:a0:92:f3:c3:
         87:23:e8:c7:27:fb:36:11:67:9c:b1:eb:14:7d:f8:5e:78:ca:
         62:09:a6:42:8f:0e:ab:59:53:bf:12:4a:30:87:31:2a:30:f7:
         78:ac:71:d3:8e:1a:21:fb:74:6e:d0:b5:65:82:35:ca:af:a2:
         d7:7d:8f:68:f8:03:dc:c8:d3:f2:ae:98:ee:d7:85:de:c9:45:
         ef:99:aa:ac:83:50:9a:33:4e:4b:95:45:ae:39:ed:d6:63:6f:
         29:48:d4:cb:a3:4a:77:b1:75:54:c9:46:02:33:4b:0f:33:6b:
         78:8f:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:58:55 2026 by rpki-client