Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
File:                     301685f9-eb30-346d-a98c-6f6531412033.roa (raw, json)
Hash identifier:          9j60e0/xOFqXzzj9hhXu6QXa6VbvrLqa3awdN9usqQA=
Subject key identifier:   69:36:0B:B5:DA:6B:ED:92:27:D2:36:8C:7B:EF:56:8E:87:2D:82:D0
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584F6F22E7459693A50DA852A700
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     14618
IP address blocks:        209.114.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e7:45:96:93:a5:0d:a8:52:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=266c3802-5206-42ae-9d30-bc3ab60b312f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:e7:60:f0:be:0f:04:33:36:fd:00:38:58:
                    c9:70:ea:6d:ae:a3:1e:79:87:d3:ea:85:29:be:ef:
                    82:c9:16:aa:1c:d8:32:fa:f1:1f:a9:6f:5e:25:f2:
                    87:2e:4d:23:3d:bc:21:4e:3d:bf:84:42:02:f4:fb:
                    b8:11:b0:3e:de:5e:62:69:50:40:2a:dc:c1:9f:c6:
                    c7:6a:38:7e:43:cf:91:b0:ad:68:84:84:d4:95:61:
                    3c:6d:21:2d:75:b1:9b:ca:33:c9:42:67:66:3f:1e:
                    4c:9e:e6:e8:44:e8:b5:08:e4:1e:33:31:3e:03:ac:
                    c8:8d:37:a6:84:6b:19:5d:f6:52:1e:c1:6c:ee:9d:
                    5a:7d:f3:8d:48:ef:3a:47:70:6a:dd:ed:57:22:48:
                    9f:4e:ca:76:15:86:29:85:28:60:05:4b:1d:71:42:
                    bb:8b:eb:bd:e1:0f:02:ae:b1:14:df:7c:7a:ea:78:
                    4a:69:23:9b:8c:65:a2:f4:57:6e:22:5f:ed:c2:18:
                    a8:8c:cb:dd:95:83:6b:ef:8d:1a:0f:4c:76:2c:d1:
                    c3:d1:8f:9b:48:72:0d:97:c6:c9:d2:85:ff:af:20:
                    ad:14:28:63:ea:64:dd:3f:a0:13:14:ba:aa:34:d4:
                    a5:d4:74:ad:c1:6a:f7:19:42:02:74:f6:5c:b6:90:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:36:0B:B5:DA:6B:ED:92:27:D2:36:8C:7B:EF:56:8E:87:2D:82:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/301685f9-eb30-346d-a98c-6f6531412033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:60:83:dd:25:10:c6:9a:da:37:62:cf:a5:e0:65:92:3b:28:
         52:82:c2:97:e9:ff:24:06:3f:30:06:60:be:b8:a8:74:ac:2a:
         a5:9d:2d:71:83:ac:7c:32:b7:7e:fe:ab:3a:8d:fd:5a:cb:d4:
         7c:6c:ce:6a:6d:cb:32:b8:9d:cb:73:50:2d:89:eb:2a:1d:6e:
         11:9c:3f:06:e4:e6:43:e4:15:69:f9:4e:cb:e1:7b:22:57:0b:
         5d:b3:bf:9e:ae:7d:3d:05:fc:6e:18:a4:af:87:ac:d3:52:4d:
         b9:57:65:08:df:68:e3:8a:d3:f2:9d:73:32:86:69:a8:e2:71:
         83:4d:0c:e2:1f:84:c2:85:23:c3:cd:0e:cc:28:85:e6:89:2a:
         ed:0b:24:71:84:38:a3:51:f1:2f:0c:70:fe:7c:82:f5:8c:6c:
         99:94:34:54:c6:5d:05:84:cf:5d:ec:b7:28:c0:58:30:0f:85:
         4a:52:0b:ab:fd:33:56:6a:8b:33:89:61:cb:6f:68:38:e7:86:
         03:00:80:3a:c6:66:98:34:c6:3e:b3:69:ed:67:99:09:54:a9:
         f0:33:58:a1:fc:25:26:17:aa:df:4d:95:88:26:97:57:c9:c4:
         ba:3c:a8:8e:88:69:a5:88:91:ea:63:b2:c5:47:54:5e:69:82:
         58:ef:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:10:29 2026 by rpki-client