Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa
File:                     0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa (raw, json)
Hash identifier:          6WkRHoWEg79w++ZJ2N3qiH39rlU3vrK2G8kTVziBWNI=
Subject key identifier:   9A:8E:58:E0:7A:6F:C1:58:4B:BC:A5:22:61:AF:D5:08:A0:77:FC:E7
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584F497423329A57F4873D2E6C00
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54103
IP address blocks:        207.199.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:23:32:9a:57:f4:87:3d:2e:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d3e7b347-d9ea-4387-b747-5508cf48608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:5f:d0:de:61:9a:7c:84:d2:60:ef:fb:11:
                    4e:a3:c7:43:c8:00:29:cb:a4:f8:95:a3:90:76:e1:
                    9c:fa:76:8f:8a:e7:c1:28:70:85:c0:ab:99:eb:43:
                    35:dd:ff:30:f3:84:b5:ba:ab:99:7e:54:01:c9:bb:
                    95:41:b3:fc:3c:9d:94:78:fa:3a:02:d4:08:9d:c9:
                    05:14:c9:5f:81:eb:0b:85:81:cc:06:a9:8d:37:c4:
                    c4:bd:f1:e6:ca:55:56:cf:a3:c3:14:fd:7a:c6:01:
                    a1:a2:fd:84:b8:e8:8e:2b:30:46:bf:da:77:6e:72:
                    07:01:1f:9f:25:f6:08:03:f8:a2:2e:90:a3:c4:d2:
                    30:7f:ab:22:09:ca:8d:85:de:af:bf:9b:00:c1:49:
                    52:ac:6e:3d:17:83:25:6c:04:62:56:8f:df:17:d5:
                    a7:96:77:15:29:4b:f0:1b:fe:18:48:98:4c:c9:55:
                    0a:26:14:86:92:9b:b2:19:d9:52:f2:1f:c7:30:ab:
                    39:e2:d3:21:00:30:ca:d0:d8:eb:fa:f0:a7:2e:05:
                    1a:ee:cd:0f:12:7f:d0:ca:37:b4:d4:89:b8:a3:32:
                    3b:46:cd:32:b1:9c:89:40:8b:d6:56:1b:c7:fc:9f:
                    fd:f3:a5:ba:91:0c:52:96:4e:bb:4d:d8:f6:91:3d:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8E:58:E0:7A:6F:C1:58:4B:BC:A5:22:61:AF:D5:08:A0:77:FC:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.199.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:16:7f:20:12:f8:eb:82:4d:da:32:de:8a:7a:53:5d:57:
         c7:7f:27:5c:41:61:a9:4c:30:17:e1:82:a9:de:98:20:21:9b:
         6c:0d:da:b0:fd:e4:6d:d3:07:1a:1a:6b:bb:92:73:b7:0b:a0:
         bd:f9:f9:e0:a9:61:ad:7f:1e:f2:f6:4c:c2:70:bb:46:ad:ee:
         d3:8d:ce:0b:a3:ed:d6:d7:43:9d:b3:ca:cb:31:aa:53:35:a9:
         0e:fa:de:ea:b5:08:a0:55:b8:d7:7b:55:a5:6c:4c:08:77:45:
         73:d4:fc:84:52:d7:71:e1:f7:0e:b0:0c:17:2e:3b:4a:24:c9:
         1e:95:ed:9b:9e:62:88:51:0e:a9:fa:a8:34:a6:4b:51:77:a5:
         2c:9d:cc:c2:45:48:d0:40:58:27:c2:52:b2:46:5e:22:52:ef:
         bb:0a:28:a1:aa:8e:db:61:d3:d0:49:39:91:08:d2:a6:17:51:
         f2:51:22:e8:91:97:e1:cd:e4:9b:5c:7e:20:6e:f9:4b:bd:aa:
         e0:ee:9e:ae:4b:f3:4c:77:76:6f:e0:ce:37:81:5c:48:f3:6b:
         57:2d:1f:41:4d:48:56:2b:5d:1e:58:ab:f6:ab:56:3a:da:b4:
         5a:12:1b:40:2a:2d:d0:aa:c8:ca:eb:54:83:f2:6c:13:2b:51:
         a2:bc:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:24:38 2026 by rpki-client