Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/fc2c5976-534b-3069-9c67-33797f1774cb.roa
File:                     fc2c5976-534b-3069-9c67-33797f1774cb.roa (raw, json)
Hash identifier:          WQEY/6G38ajjP9ziWLYdK6E9zdt9knZdzOH8q5hb4r4=
Subject key identifier:   2C:88:63:BA:C6:4E:22:0D:6D:F1:80:C7:08:63:50:16:A4:D4:52:19
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584F3FAD2C207767014FED88BA80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/fc2c5976-534b-3069-9c67-33797f1774cb.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        209.142.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:2c:20:77:67:01:4f:ed:88:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=b187ccda-57fc-4f21-b1c2-6a9f78a4c1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:ea:84:d9:75:8e:c6:6c:6f:c5:65:c1:6d:
                    38:33:8e:80:12:ce:d0:d9:59:20:19:f2:dc:a9:96:
                    2c:3b:17:58:4b:5f:18:2a:61:0e:03:34:29:01:14:
                    b3:f3:e9:97:85:78:c4:88:80:75:25:82:38:44:61:
                    a0:90:e2:75:b8:5f:1e:16:bf:e4:0a:f3:c1:42:9c:
                    53:ff:ef:56:61:29:a9:d3:f7:6b:50:e7:ec:19:e9:
                    4e:56:86:b3:5d:38:af:d7:6e:7e:4c:37:cc:97:1b:
                    5e:66:3d:20:e5:f9:98:be:86:82:ff:5b:5d:cc:98:
                    dd:07:db:f8:43:f7:e3:81:0a:b8:44:18:ad:c2:16:
                    61:b0:d5:52:74:cb:27:be:2c:32:07:0b:a7:a2:ed:
                    c1:46:21:af:06:31:fc:45:9a:a0:a9:a1:40:e6:8f:
                    a0:05:9d:e6:3b:cb:ad:36:01:5f:71:5d:c6:e5:e3:
                    b5:70:f7:19:ef:23:8b:ff:2b:31:de:51:98:04:90:
                    e4:e4:cc:ae:a1:ae:df:fb:b6:c1:fb:e2:f0:01:1d:
                    84:82:60:40:8e:1c:a9:3b:32:8a:61:7e:72:08:3e:
                    c1:cd:eb:07:89:cd:94:72:0a:4f:09:83:28:32:41:
                    2e:82:50:57:df:43:31:8a:e4:22:b3:f1:9c:97:3e:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:88:63:BA:C6:4E:22:0D:6D:F1:80:C7:08:63:50:16:A4:D4:52:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/fc2c5976-534b-3069-9c67-33797f1774cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:9c:30:28:86:83:b0:e8:64:f1:ae:ba:3b:18:02:09:5f:
         61:5e:9a:e2:75:9e:3f:e8:b4:15:da:c6:0d:18:86:b1:99:14:
         16:6d:a9:70:6d:ef:1f:3f:33:1b:6a:ea:79:cd:9d:de:fa:2b:
         e6:39:7a:80:2a:43:fe:44:82:b2:99:9d:25:ee:a7:b8:d1:be:
         4e:0e:bb:4b:e3:03:13:2f:09:87:93:dc:74:3d:80:ce:1a:cc:
         d5:7d:b6:aa:8d:bb:04:eb:6f:8f:d4:99:b3:86:6f:14:4a:be:
         52:fb:48:ce:24:f6:7d:35:58:61:ff:9f:b7:18:f5:1a:ba:77:
         47:30:72:78:7d:37:94:e5:6f:b4:67:32:d9:ad:1f:6d:b8:0e:
         b5:75:5a:de:fd:ff:64:6e:70:d5:3d:e4:51:9d:b5:1e:8f:03:
         90:45:59:cf:ed:3f:7d:bd:21:74:54:d0:4d:97:55:fc:f9:c5:
         a6:d8:59:42:a3:66:76:f1:5c:85:fa:df:8d:59:c0:ca:3c:0f:
         54:69:65:fb:d5:7c:57:c1:19:80:9f:e9:82:85:df:16:92:a5:
         02:c1:1d:e9:07:d4:c9:85:f0:a8:88:1b:35:d1:aa:97:2b:70:
         4b:28:37:30:69:51:a3:01:c5:91:23:ad:6b:94:71:1d:fd:44:
         6c:fb:b6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:48:34 2026 by rpki-client