Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/002ed6c4-e61c-3a97-af55-7ffb373d99c1.roa
File:                     002ed6c4-e61c-3a97-af55-7ffb373d99c1.roa (raw, json)
Hash identifier:          8ULyTsSr8wOyDPl2uQjJL/BeVChVw/OUq1e+S2amFjY=
Subject key identifier:   B9:5E:67:5D:74:56:AE:30:16:F1:DC:20:0D:2A:09:2C:F1:F8:47:4B
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584F45428649AD043000792861C0
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/002ed6c4-e61c-3a97-af55-7ffb373d99c1.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        192.206.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:86:49:ad:04:30:00:79:28:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=1e0a707f-fbd5-4158-98a6-02061c1e5214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:c8:5a:8d:ad:f4:53:22:4e:0b:d0:65:a2:
                    54:5c:12:48:fb:cd:26:f6:20:67:dd:19:bf:62:22:
                    49:70:d5:a7:49:b6:93:35:10:3f:f6:74:74:30:c8:
                    b4:0a:cc:cc:1f:30:23:f2:01:56:e9:c4:94:02:2a:
                    5c:76:46:c8:b3:1b:94:42:97:ab:92:09:db:8c:73:
                    3f:fb:76:e5:e6:d6:73:0b:fc:43:8a:6c:06:e5:94:
                    b7:45:6a:59:f7:6c:a1:d5:e4:03:fc:59:36:17:fc:
                    a9:0f:ce:5d:0e:f9:36:51:b2:ff:7a:46:d4:db:e4:
                    01:af:d5:76:42:fd:0a:e0:7c:73:cf:cd:10:85:b7:
                    28:c4:bd:c2:b5:50:18:e0:59:be:78:7a:4f:b8:1b:
                    15:c6:77:76:bf:80:5e:a4:d3:3d:2e:4c:b0:76:14:
                    50:f8:c7:95:d2:cc:ba:8d:41:44:a4:21:55:d3:00:
                    ef:ad:09:ab:e6:9e:19:ca:23:ba:f9:7c:37:65:0a:
                    6c:c7:86:f2:25:1d:6d:7b:bc:ca:54:2d:bd:b8:de:
                    23:0d:2f:e3:8a:ba:08:a6:49:4f:65:41:57:67:b7:
                    36:f2:8b:aa:72:6f:37:d0:2a:0e:fb:b5:3f:7a:30:
                    47:cb:87:82:dd:ac:c1:1e:e9:ad:43:2d:92:ca:13:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5E:67:5D:74:56:AE:30:16:F1:DC:20:0D:2A:09:2C:F1:F8:47:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/002ed6c4-e61c-3a97-af55-7ffb373d99c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:ca:f9:02:34:9f:03:56:24:16:c3:0a:18:ad:d2:c1:29:
         50:58:61:06:e4:fc:c8:d7:81:67:65:dc:f7:f5:a6:89:f0:6a:
         21:4a:92:f6:8b:d7:ca:17:6d:74:4d:71:c8:71:8f:f3:e6:2b:
         63:27:b0:48:9c:20:49:3d:cd:d1:34:1e:e3:49:58:ee:64:2e:
         fe:d5:d7:9d:19:0b:e5:18:f7:a9:6c:f2:f6:de:4f:09:6f:e7:
         87:a0:0b:9d:99:8c:ca:7f:49:61:22:1b:3b:b0:aa:48:e4:f2:
         e9:1a:10:0a:95:11:48:77:8f:59:b9:e6:f5:cc:d0:3a:5a:60:
         e0:04:ca:39:31:15:6a:26:39:59:e8:ac:c5:5b:75:f3:5f:ee:
         f5:5b:36:22:2f:c4:ca:04:09:7e:1d:12:f4:bb:b8:c5:c2:b5:
         f2:b4:ed:95:20:bd:f0:e4:0e:9c:97:cb:4d:8a:99:9d:e0:d0:
         a6:6d:12:c8:eb:d2:38:c8:cd:79:cf:05:da:d2:ba:27:91:a1:
         b2:4b:3f:7e:6d:e9:c3:4e:44:78:9d:75:6e:ff:41:95:3e:4f:
         a1:2d:ec:63:51:b6:fe:fc:6d:a1:fc:9e:27:c9:9f:4e:72:42:
         20:41:59:38:be:17:4c:45:5d:88:61:fd:d0:8e:bd:0e:19:5f:
         78:57:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:58:11 2026 by rpki-client