Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa
File:                     942664f6-20be-3e59-9c12-35186f7f5c0c.roa (raw, json)
Hash identifier:          qFFbpSBJOePntw+PSebNnlxsx6nsnx8pUQSFUedGTVc=
Subject key identifier:   50:8C:44:D9:EC:52:9B:A9:53:51:F6:EB:34:B2:62:02:1F:51:65:99
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F4328584F49755783FB6CFDBDD0CF8A80
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393981
IP address blocks:        204.239.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:57:83:fb:6c:fd:bd:d0:cf:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4723591d-2364-41c3-8be8-5ab734322d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:ad:c5:1d:7e:3c:a3:68:8a:7b:e1:e5:1f:
                    75:4b:c8:6e:bb:6f:49:5a:58:cf:59:28:be:f5:d2:
                    ba:ef:c5:bb:88:c3:c9:36:65:9e:75:93:91:7a:a1:
                    b0:1b:8a:52:65:78:bd:a6:05:f0:4c:8a:0c:c3:97:
                    ed:8f:21:39:4f:c3:b0:98:74:16:bf:81:64:68:86:
                    d3:c9:d5:03:2c:62:17:ef:28:07:26:fc:21:1d:4c:
                    c2:c3:5c:5f:6f:73:f9:cb:fb:77:6f:a9:93:21:8e:
                    e6:8b:52:8c:cb:5a:8c:e3:7b:d0:7e:eb:d1:1b:11:
                    9e:ed:a8:60:6e:a1:78:17:79:a0:01:63:28:26:1d:
                    0c:5e:9f:86:a8:bd:c3:4e:e7:08:7d:95:a8:8b:a2:
                    28:d7:3f:90:4c:17:da:71:99:7b:9c:e3:5d:ad:47:
                    20:27:21:a3:f7:a0:92:47:19:a5:dd:c0:e9:b8:7e:
                    bd:87:91:dd:b2:6f:1b:d2:a3:1e:d8:5d:11:5d:b9:
                    c3:c4:dc:0c:3c:07:94:71:33:e9:1e:a3:27:a5:1d:
                    16:9f:ce:28:48:15:bf:29:d6:08:eb:1d:8b:52:06:
                    d5:32:f9:b5:76:64:57:79:dd:05:ba:c8:26:84:35:
                    7a:89:79:49:b2:71:12:01:c9:e0:71:4a:ef:44:3f:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8C:44:D9:EC:52:9B:A9:53:51:F6:EB:34:B2:62:02:1F:51:65:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/942664f6-20be-3e59-9c12-35186f7f5c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:e7:f6:e1:1d:86:cd:1b:b1:5b:d6:53:d3:55:0a:4f:02:
         16:1c:90:5c:2d:f9:b9:8f:b7:41:75:22:63:e0:ff:5d:cd:b1:
         94:cc:63:03:b6:a7:ac:40:e3:b8:4f:cb:30:03:31:ea:c9:75:
         7a:51:9d:c0:55:e7:92:1a:9d:55:6d:5b:f7:cc:9b:8b:fb:06:
         9d:49:53:1b:0d:f2:86:39:2f:df:49:23:69:91:8a:0a:39:73:
         df:f3:fd:fe:5e:c7:b4:cb:ff:2a:b1:7a:a8:b7:ed:ae:03:3f:
         51:eb:f9:d1:77:93:da:a7:db:36:4d:20:97:dc:85:6e:86:58:
         ff:2e:f6:00:cc:79:84:54:8f:41:26:57:9c:9e:51:cb:67:4e:
         3d:c3:21:ec:61:ad:03:f0:b8:18:88:ae:42:f4:a5:48:94:9d:
         ed:1d:5d:1b:ff:53:ca:24:be:64:85:c7:78:a2:26:97:de:79:
         5b:f7:85:09:29:eb:85:c0:de:ba:3c:e9:54:2f:c0:09:bd:80:
         15:31:1c:fb:89:f1:6d:01:45:68:e7:b5:75:b6:ba:db:cf:82:
         04:05:54:32:b9:9d:17:a0:d2:74:57:66:15:46:1b:f3:e2:86:
         e2:7d:36:90:c7:d4:1b:7d:b2:af:ff:fd:13:e0:af:ef:96:66:
         ba:e2:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:08:07 2026 by rpki-client