Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/5f43d8ea-a799-3228-8d97-6979d43cd812.roa
File:                     5f43d8ea-a799-3228-8d97-6979d43cd812.roa (raw, json)
Hash identifier:          Sokkjz7KWz79HcqfgzMErEOhmFYIIjzT8hrbxP5liNM=
Subject key identifier:   C0:A2:9B:CE:BE:60:9D:78:C5:88:FD:11:CD:17:55:B1:28:C9:E0:39
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584F19FCF416260E7F267D343380
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/5f43d8ea-a799-3228-8d97-6979d43cd812.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     1403
IP address blocks:        205.210.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:f4:16:26:0e:7f:26:7d:34:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=8670bb5d-1af2-4219-960e-97e9c2c507d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:4e:8f:36:9f:47:33:4f:e6:f6:4b:34:e0:
                    41:28:5b:92:9a:bf:85:aa:1a:42:40:53:a8:ce:f0:
                    52:e6:a5:24:bb:90:5d:9c:f0:46:4b:05:c7:24:13:
                    41:a8:45:36:fe:f8:43:8a:76:c4:d9:43:e8:d5:77:
                    e1:67:b0:c5:5d:c1:d3:51:6c:46:4b:d9:33:bf:0e:
                    fe:39:e8:5a:48:fa:c8:ab:43:82:c3:7d:c5:54:9f:
                    2b:05:2d:20:aa:4f:3e:a2:ef:c0:22:e7:c6:dc:83:
                    2f:11:fb:df:66:a7:6d:17:c9:dd:23:d2:92:a6:ae:
                    eb:33:b9:34:eb:9c:5a:3f:9f:53:1b:e8:b7:04:c3:
                    09:8f:6a:eb:02:ef:3a:c1:24:72:3c:5e:8d:ce:bf:
                    76:33:cd:53:71:ba:b7:fa:40:75:05:80:83:98:6a:
                    c7:f0:b8:8d:dc:02:19:b1:f1:ac:e1:fd:81:d1:6e:
                    64:53:5b:7c:dc:3a:d0:1b:ad:63:2d:8b:52:5f:7c:
                    a1:6b:ed:03:eb:00:8a:a4:c9:eb:d1:42:cf:1d:a9:
                    ab:16:fd:c5:7f:90:21:83:f4:d7:36:5f:4c:e6:f5:
                    d0:ef:09:da:b9:08:e7:50:b7:06:24:57:82:44:4d:
                    c1:5c:27:fd:28:d5:0c:0e:16:9d:7b:e8:92:05:3d:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:9B:CE:BE:60:9D:78:C5:88:FD:11:CD:17:55:B1:28:C9:E0:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/5f43d8ea-a799-3228-8d97-6979d43cd812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:85:65:21:ad:24:74:3f:b6:b7:c5:c8:f9:aa:96:72:75:
         31:af:f5:61:96:16:00:3e:37:db:dc:e5:56:8f:63:49:b0:d6:
         da:c3:c1:e8:37:e7:f9:02:72:fd:1c:1a:d2:f6:84:80:d0:e5:
         50:6f:47:4a:b5:12:6f:66:c6:00:5d:78:f4:2f:63:cd:d6:53:
         90:3f:41:11:55:8b:9d:75:a1:d0:38:62:72:af:39:40:96:0a:
         71:82:bd:c1:3a:92:bb:ec:e3:bd:0c:da:73:84:21:c8:90:c1:
         63:ee:ed:cb:a0:74:43:9d:81:34:5b:d7:c1:85:d5:05:fd:f9:
         54:2a:97:f2:f2:c3:c1:11:78:9c:8c:3c:3b:9b:18:38:f4:f2:
         63:89:16:6f:54:70:02:79:9e:0d:51:d4:bf:7f:32:b1:93:55:
         5d:6a:f2:b6:3d:62:37:d6:c7:81:fa:e1:8d:45:b1:b4:d5:32:
         ed:53:30:97:cc:a5:f4:4e:59:40:cd:f1:63:04:39:80:c8:e1:
         c1:73:85:0f:ef:41:b0:0e:de:ff:71:42:12:a7:74:4e:d0:92:
         80:42:3a:57:cd:7b:cb:f2:cc:5c:bc:93:d2:a5:75:fc:a1:e8:
         30:ba:9e:84:9c:c5:b6:a1:da:39:c4:45:00:2c:c7:c2:b0:0b:
         95:86:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:56:10 2026 by rpki-client