Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ce06438-0ff9-350f-a20b-50d2646970f2.roa
File:                     1ce06438-0ff9-350f-a20b-50d2646970f2.roa (raw, json)
Hash identifier:          Ptwxx+mrcBkvyR91T+rXyzEyvxbV6piLStsLXecfaSo=
Subject key identifier:   37:6A:79:91:83:8E:FF:35:F1:B4:50:3E:9A:C1:02:EB:53:0F:49:FE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F0F984B773647FE23C9028100
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ce06438-0ff9-350f-a20b-50d2646970f2.roa
Signing time:             Fri 04 Sep 2026 07:39:26 +0000
ROA not before:           Fri 04 Sep 2026 07:39:26 +0000
ROA not after:            Thu 03 Dec 2026 08:39:26 +0000
asID:                     27411
IP address blocks:        173.234.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0f:98:4b:77:36:47:fe:23:c9:02:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep  4 07:39:26 2026 GMT
            Not After : Dec  3 08:39:26 2026 GMT
        Subject: CN=c7c3cee8-5f73-4637-ae52-e76203460786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:38:43:95:b7:02:01:3f:d1:05:50:2c:fe:
                    85:11:0d:10:66:03:82:77:a8:16:83:25:a1:38:cf:
                    ea:0f:1e:6c:e4:d0:aa:db:08:fa:c6:a4:22:cc:5b:
                    e3:0c:ee:9b:03:67:75:26:14:fe:dd:50:77:aa:ae:
                    f8:bf:ae:19:43:51:b3:78:e1:02:4a:23:b6:39:a5:
                    14:81:65:af:3d:43:21:71:4e:7b:8b:8e:65:7e:12:
                    df:36:3d:90:76:6c:fb:6d:8e:07:e3:38:aa:c5:04:
                    c9:42:a2:41:40:c9:5d:98:e8:a3:cb:68:9a:4a:ed:
                    ec:89:17:91:55:7b:ed:ec:c5:46:44:52:c6:d6:fd:
                    57:39:da:f3:35:bf:30:5b:3b:c2:5a:69:c2:9d:ab:
                    7f:59:d6:78:ab:bc:02:4d:4a:40:d8:96:fe:aa:f9:
                    41:43:1d:e8:d6:8e:2d:c8:1a:53:6c:fd:3d:25:0b:
                    90:45:07:33:a2:9f:6f:82:7e:d5:68:04:98:c1:89:
                    86:40:af:51:05:51:aa:c3:b4:ee:47:84:35:8e:6c:
                    56:00:82:bf:37:4b:8e:f3:14:a8:61:3f:8d:09:49:
                    84:83:22:03:fe:d2:1f:cd:1d:c7:34:16:e9:85:d2:
                    d1:4c:b4:8e:c1:77:32:13:eb:a7:67:73:99:1b:ae:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6A:79:91:83:8E:FF:35:F1:B4:50:3E:9A:C1:02:EB:53:0F:49:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ce06438-0ff9-350f-a20b-50d2646970f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.234.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:49:b3:b5:be:c1:d6:bc:40:ec:87:fe:df:be:cb:05:8b:
         27:7b:b9:b4:ab:d5:54:75:ba:f7:e5:ec:59:29:15:74:9b:a9:
         f6:72:f2:d4:12:be:ff:98:be:f2:6c:ca:de:c9:5e:aa:b0:c9:
         8b:19:49:84:ff:aa:7d:06:cf:bb:c9:0b:f9:94:8e:65:f8:fb:
         e2:a3:87:b2:a6:b7:39:c7:84:19:07:11:bc:9f:95:22:28:cf:
         95:60:8f:f2:40:14:c9:c7:75:a8:43:e1:6d:71:00:2a:bf:8d:
         a6:5c:a5:f1:33:cc:de:55:82:42:ff:9d:92:6c:03:e7:ea:a1:
         6a:29:bc:03:64:6b:bc:9a:e6:21:e6:d7:b2:9e:c9:90:a4:de:
         0f:01:ff:bd:b7:0c:2b:64:d3:27:3a:2f:9d:90:e2:94:52:fd:
         92:fb:5e:64:d8:27:8e:88:15:cb:86:30:7a:58:df:e7:a2:25:
         9f:ed:38:1c:6f:ff:6b:b9:89:5c:8d:bd:09:af:75:8a:78:42:
         e8:96:96:19:36:fd:68:cd:e0:d6:5c:17:98:2e:52:92:f7:24:
         a1:84:c8:49:da:89:ce:f2:b5:1a:93:05:fb:94:d6:11:73:f5:
         89:c4:52:fc:0d:1d:a0:4a:58:e1:5a:fd:28:91:33:3a:9a:3e:
         6f:76:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:10:07 2026 by rpki-client