Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/492e17a2-ead8-3bc3-8042-dffaf439e925.roa
File:                     492e17a2-ead8-3bc3-8042-dffaf439e925.roa (raw, json)
Hash identifier:          YyLUFwSRYijPG4BS9FOdKXvQ3S8JwcNHskkG0b1VkWU=
Subject key identifier:   0D:31:0C:E7:E2:90:C8:EE:BC:F1:30:B5:29:1B:46:A2:1D:8C:F5:17
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584F267B21E5EAE9FD0F5CBCCF80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/492e17a2-ead8-3bc3-8042-dffaf439e925.roa
Signing time:             Sat 12 Sep 2026 12:24:16 +0000
ROA not before:           Sat 12 Sep 2026 12:24:16 +0000
ROA not after:            Fri 11 Dec 2026 13:24:16 +0000
asID:                     216013
IP address blocks:        209.142.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:7b:21:e5:ea:e9:fd:0f:5c:bc:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 12 12:24:16 2026 GMT
            Not After : Dec 11 13:24:16 2026 GMT
        Subject: CN=aea1757f-2d88-4aec-8ca9-c8c3d047eb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:55:51:70:ae:7e:1b:56:41:ec:dd:d8:0c:
                    78:72:e9:fe:ae:1e:b3:53:3f:28:b1:bf:bc:bf:a3:
                    bd:ff:f4:19:14:9a:e0:4c:8b:61:a9:95:54:05:53:
                    d7:e1:ce:b9:db:e2:3b:1d:2f:df:f4:bf:d7:ee:13:
                    df:cc:11:c6:c6:f4:8e:e4:b7:de:4f:6f:46:d0:d0:
                    81:07:2a:50:35:5d:2a:d7:ad:1d:b4:94:26:b9:c5:
                    fe:e7:99:85:a8:7b:a5:09:43:74:1e:02:b1:d8:c2:
                    50:2d:ce:79:2a:27:57:84:a4:45:73:6a:81:59:73:
                    9f:3c:4b:4a:7e:03:1c:32:b7:b5:3a:3f:95:a5:65:
                    b2:ad:ec:c3:04:82:ca:2c:6c:64:ba:f1:51:6c:35:
                    c2:f5:72:d1:9e:4d:b0:ef:dc:94:19:f0:a8:5f:e0:
                    2d:d7:cd:78:0b:af:a6:e6:16:52:62:61:91:6e:44:
                    b1:7d:45:6e:a8:17:d8:79:13:32:45:46:c4:72:b1:
                    05:0e:1e:6e:9f:ef:ef:67:ef:d7:37:e3:a7:e3:91:
                    72:4f:26:f2:92:bf:20:a8:fc:18:2f:0e:ef:d3:44:
                    46:12:b3:df:33:b1:fe:56:c9:c8:72:63:f9:2d:88:
                    c2:0b:7e:56:d9:21:bf:ef:46:bf:0d:d8:39:4f:5e:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:31:0C:E7:E2:90:C8:EE:BC:F1:30:B5:29:1B:46:A2:1D:8C:F5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/492e17a2-ead8-3bc3-8042-dffaf439e925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:17:9c:73:3d:77:6a:ec:74:63:56:85:9d:fc:f7:80:af:02:
         68:86:86:ee:30:51:57:1d:45:47:97:73:c7:e1:4a:25:b6:c4:
         28:c5:62:b4:5a:a1:13:c5:75:dd:15:29:ca:8e:c1:70:b5:77:
         3b:0c:00:ce:9e:60:ff:7f:a4:14:d2:a6:9d:c1:a5:4a:52:25:
         4c:4b:40:4a:2c:ff:e7:b6:29:bf:2a:a2:52:43:55:cb:c3:22:
         72:62:31:98:fd:58:d8:3b:b0:51:74:aa:16:39:6d:39:25:3f:
         9d:65:de:60:e1:e3:57:68:97:36:1c:54:34:78:74:46:06:df:
         39:f4:58:6f:e2:58:b7:04:6b:b1:3c:1a:1a:2c:6f:1a:a9:2c:
         29:f8:bf:a7:b8:f5:8f:4b:84:fa:b4:1d:1b:2f:45:7a:dc:71:
         d9:6c:6a:08:9e:65:eb:10:6b:d8:06:f1:93:d3:fd:1f:d9:87:
         ff:a5:25:10:aa:45:e7:81:eb:9f:c7:3b:f0:91:74:d8:be:d1:
         f7:96:01:05:0c:48:a8:58:1f:de:8c:9d:00:9f:57:04:fe:3f:
         64:30:28:aa:da:65:04:75:1f:09:e1:99:04:d6:6f:ad:d3:30:
         af:b7:6d:64:94:ec:f2:5d:9c:67:62:85:95:e0:16:51:9a:5d:
         f1:f2:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:10:46 2026 by rpki-client