Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa
File:                     45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa (raw, json)
Hash identifier:          VRaAOUgksu/CdYwji9pBFh/AXfRUB1m5uIfgYcLoPY0=
Subject key identifier:   A5:C7:74:08:31:EB:F8:40:4C:A3:A7:E7:30:7F:55:04:23:1E:58:96
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584F497D0E5D4C664D0FC5FAB380
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        209.107.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:0e:5d:4c:66:4d:0f:c5:fa:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=69873312-2b06-4fd7-9991-805496b0183b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:7e:15:be:ee:42:af:af:59:20:74:06:4b:
                    7f:ab:02:5a:39:55:97:6a:3d:91:cc:99:39:7d:6e:
                    47:36:13:7b:0e:1c:ce:ef:80:14:59:2d:43:16:1b:
                    a0:dc:17:37:65:95:18:6a:b9:59:5f:7f:40:15:5b:
                    50:ff:16:18:f8:b9:0f:85:14:e7:b5:d7:5f:a1:8b:
                    fd:81:19:47:2a:49:d7:86:23:9d:81:78:9f:2d:19:
                    6f:a3:d1:35:ac:b0:22:c7:f7:b3:91:72:3c:70:b5:
                    42:46:bc:bf:ec:fd:8b:bb:ea:46:ed:a2:15:fb:34:
                    ad:e9:df:c5:00:08:8a:fe:f9:c2:38:8d:30:30:04:
                    20:c9:b3:bb:f8:ec:d4:ad:9c:26:ee:5a:da:20:99:
                    d6:35:03:a6:70:28:d3:e6:6b:b1:86:fd:d4:20:d9:
                    39:a4:90:c9:78:77:7f:fe:ad:66:7c:e9:30:56:0d:
                    ec:e2:1b:94:3d:14:f8:35:29:eb:77:f7:87:88:bf:
                    f8:c0:70:56:89:0d:18:07:17:bf:a7:1e:7b:7a:97:
                    36:4d:b7:9d:de:24:b1:8e:eb:c8:e5:bc:8e:0e:5f:
                    e4:78:e3:89:2b:77:25:2e:79:01:88:29:50:60:5d:
                    51:2f:06:dd:45:f1:ca:0b:2f:3c:cf:7d:13:bd:88:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:74:08:31:EB:F8:40:4C:A3:A7:E7:30:7F:55:04:23:1E:58:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:97:b6:9b:d9:3d:cd:33:c7:ba:a1:cc:46:d2:9d:68:47:
         7f:7b:7d:cc:19:92:8d:ad:ca:a0:91:79:94:4e:0f:e8:32:4e:
         21:7a:9b:8d:f8:79:f0:54:82:8a:d1:81:5b:3d:ed:7b:ff:a1:
         16:0b:82:d7:d2:53:03:cc:6a:07:d3:41:b2:cf:78:fb:21:ee:
         4a:b6:65:a4:76:33:a8:d4:a2:a1:26:ce:b3:a0:68:81:ce:cf:
         10:a1:23:9c:04:50:65:a9:b0:a6:5d:8e:f5:04:ab:d0:79:49:
         05:d2:3d:d8:bc:a5:b0:83:f0:36:32:fa:e3:73:7a:b6:b6:b4:
         ae:9d:d0:4c:62:b0:26:be:ec:d0:f8:23:39:18:ec:c6:37:9f:
         58:49:db:5f:9d:be:af:1f:dd:9f:31:ba:13:ed:24:9c:dd:02:
         1b:76:a5:db:b4:f3:e0:83:64:84:e6:5e:76:73:b8:25:d7:9a:
         f0:a2:06:6f:b7:f5:c3:22:cb:e2:a2:ce:85:ec:48:e9:1a:20:
         6b:36:66:8f:8b:bb:14:4e:33:e5:45:3d:c0:1d:90:0e:76:55:
         3e:9f:d5:5c:09:6a:42:49:30:90:10:e0:67:35:c2:1d:ed:4d:
         a3:ef:e7:7f:f1:9c:da:ec:c8:d6:70:65:66:6c:92:39:d0:71:
         ca:99:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:30:01 2026 by rpki-client