Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/04b9269e-944f-3711-a63b-59cf216d5d0e.roa
File:                     04b9269e-944f-3711-a63b-59cf216d5d0e.roa (raw, json)
Hash identifier:          IbylqTDWN3CMmz5KBBuhWqcxs0tLFwpyivgDJUfKB5c=
Subject key identifier:   55:81:69:7C:5F:03:C3:CB:68:DD:D1:82:A8:8F:0E:79:B3:BF:E6:55
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584F1467A68ABB23B745DA2235D0
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/04b9269e-944f-3711-a63b-59cf216d5d0e.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     396982
IP address blocks:        162.138.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a6:8a:bb:23:b7:45:da:22:35:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=18bc1782-8372-4f6e-b0b5-841dfc7fb7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:80:48:ca:b9:37:1e:41:c2:1c:e5:a2:d5:
                    72:98:c9:87:64:c1:a7:7c:db:b0:b3:d2:07:7e:ac:
                    a5:b0:e1:3f:3c:4d:b6:a6:18:06:88:a2:db:3d:5d:
                    2d:9f:48:5f:b9:8d:de:c5:65:91:cf:69:ee:1d:7f:
                    38:9f:b5:27:1b:20:6c:53:39:6f:97:96:6e:98:98:
                    08:66:51:74:3a:cf:a5:3f:24:61:a6:ae:bf:51:9c:
                    66:53:3b:c6:99:92:ea:73:3c:36:b2:85:3d:ac:e4:
                    f2:7f:19:20:19:7f:61:6f:b9:f6:13:f3:13:62:38:
                    b9:39:d0:6a:73:28:2e:57:a0:08:51:2e:e1:ca:10:
                    78:24:45:3a:06:37:d3:1f:2b:b2:80:d7:05:71:ee:
                    df:c6:5e:d9:77:62:d9:67:aa:2a:76:d8:45:04:a4:
                    a6:81:2d:49:b4:c0:ea:e2:19:70:ca:0d:29:88:4c:
                    40:0b:d1:69:af:99:ce:37:36:78:26:ce:28:17:fe:
                    dd:9b:3a:8d:8d:b4:a6:6c:d7:4c:4b:a6:0d:ad:f5:
                    f6:4e:40:81:a6:41:4f:71:e1:3e:1a:9d:1b:90:59:
                    66:d4:5d:39:a9:41:ee:c3:9f:f4:f1:65:14:63:62:
                    d7:92:d8:90:44:9c:f4:c0:e0:9e:3a:3e:4f:2e:79:
                    15:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:81:69:7C:5F:03:C3:CB:68:DD:D1:82:A8:8F:0E:79:B3:BF:E6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/04b9269e-944f-3711-a63b-59cf216d5d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:72:c7:6c:b3:75:04:00:47:86:44:40:9f:9d:bc:88:22:49:
         f5:40:ef:cb:68:46:e6:77:52:0f:11:40:12:6c:1b:6c:91:5a:
         c2:f3:ba:d4:78:32:65:ac:fb:5a:fa:a4:a9:6d:c0:2a:31:bd:
         46:e3:b0:12:f3:15:19:d4:1c:3f:a8:54:f4:d6:5a:eb:e3:3a:
         0b:f8:e5:db:b6:67:50:42:6c:e0:f7:0a:a0:8b:ca:51:81:cb:
         8f:0e:e9:3b:31:8d:0e:1c:68:0f:dd:18:1e:cc:8f:85:cd:51:
         69:f3:3a:19:1c:84:eb:e6:41:6a:b7:a6:1a:d3:d7:9a:0b:96:
         7d:d8:fd:24:2d:b0:5a:31:72:1f:47:40:60:15:43:44:5d:5b:
         09:c5:da:ff:4a:8a:58:dd:9e:0e:27:20:ae:4b:4d:13:c4:9d:
         4c:e7:21:90:24:25:99:6a:3e:68:65:65:06:5c:e8:14:5b:e4:
         ea:bc:e2:27:a0:d7:ac:19:2b:b1:52:3b:07:62:66:56:bd:42:
         ff:c1:6c:bf:b2:e9:34:28:a3:b5:5d:1b:3c:25:4a:01:9d:d0:
         b4:52:6e:2b:1d:c8:10:5e:b7:30:45:3c:79:e3:b4:78:8b:87:
         85:0b:03:77:88:ec:e0:c6:f9:e4:93:bf:0c:08:46:3a:8b:81:
         5e:be:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:04:21 2026 by rpki-client