Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
File:                     b287c706-2d12-3e67-bc19-1bb937299cb7.roa (raw, json)
Hash identifier:          KKquduiqvv5CkivVPjYIqXIIwOARnUiPBJ3xne0AYMU=
Subject key identifier:   5C:B4:E4:87:A2:E3:F2:71:C6:60:67:5E:81:8D:27:DE:1E:A5:A4:EE
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584F2EED18EAC1CFC0CEAA517500
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     397501
IP address blocks:        128.211.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:18:ea:c1:cf:c0:ce:aa:51:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=4f9e0335-20cc-4018-9ed3-5c9aa8b08c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:69:58:5e:75:71:62:27:9d:9b:17:fa:2e:
                    c0:97:c0:a5:c3:aa:95:cb:85:7f:6b:a1:21:d3:5e:
                    86:ca:c6:6e:8e:42:5b:ba:ef:7b:1b:67:b4:20:63:
                    02:48:fb:6d:98:ad:12:0f:e5:10:5e:d4:7c:b0:09:
                    a2:be:e5:a4:7b:e1:09:02:db:80:a4:df:10:6d:74:
                    d3:ca:93:a4:9c:6f:dd:fb:c3:43:67:e1:ad:01:20:
                    01:db:4b:fb:a7:ab:e9:0a:ea:0d:11:9a:1a:73:41:
                    c3:23:fc:c8:06:b1:e3:e9:8f:55:c5:0a:7e:71:72:
                    20:9d:aa:bd:43:51:94:d1:9f:07:f6:51:84:76:40:
                    36:f3:9c:c8:55:99:ee:50:66:a5:a1:f8:58:3f:a4:
                    1c:2a:66:4e:ef:ef:c3:71:b2:3b:98:c6:26:13:40:
                    61:f7:15:e2:0b:60:fc:b1:06:e3:29:23:3f:25:f6:
                    65:51:ca:63:59:69:94:2d:62:5b:1d:ab:7f:d0:28:
                    17:bf:21:9a:13:8e:19:54:bf:90:80:ce:01:e9:3a:
                    8d:d1:79:b6:09:0c:8a:6d:d4:e7:d4:1f:09:c3:24:
                    8f:b8:ce:fe:7a:3a:f4:1f:c9:20:11:e3:d3:1d:46:
                    73:0b:ef:ee:fb:1a:9b:fd:b6:07:e5:d5:57:6b:e4:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B4:E4:87:A2:E3:F2:71:C6:60:67:5E:81:8D:27:DE:1E:A5:A4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.211.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:70:70:83:f7:2c:e9:f0:ae:4e:a5:5e:87:50:e9:22:b9:97:
         82:39:e9:16:a9:d3:ef:15:e2:7e:46:90:12:69:22:b0:ea:28:
         1f:84:1b:1c:e6:76:1e:63:60:9e:42:96:0f:76:0b:19:5c:12:
         a7:f8:c9:91:ed:86:fd:b8:87:95:f6:a2:11:6a:32:55:5a:5c:
         69:ac:06:4e:0d:a2:41:e8:20:36:27:db:26:d4:a0:e4:25:1e:
         00:98:06:01:d2:5e:73:d8:26:d1:db:91:20:ed:2f:2a:e9:12:
         7e:e3:f6:06:dd:2c:cb:f3:d8:75:4a:6d:5f:98:3c:b5:7a:48:
         64:f8:56:17:b9:b3:8f:2f:d1:62:6a:e4:0a:34:74:ff:e2:2c:
         b1:41:7c:a5:fd:42:16:23:03:02:38:61:0a:35:6f:63:0f:e2:
         88:15:84:16:c6:a9:2a:80:cf:94:3e:7b:8a:3c:c9:41:46:95:
         9b:00:0d:d4:97:35:14:d1:3e:aa:a8:86:57:9b:15:c6:5c:53:
         e9:54:23:e3:06:c3:41:22:d7:93:12:5e:3a:40:d2:27:9d:b2:
         fd:de:00:95:ff:5d:db:05:3b:12:52:2a:b6:2b:ed:5c:0b:5c:
         86:76:f2:db:52:61:67:63:cd:46:6a:6c:d0:9c:b7:44:22:b0:
         57:12:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:43:11 2026 by rpki-client