Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa
File:                     d97c6262-79f0-356e-8ec4-b007e9292f02.roa (raw, json)
Hash identifier:          LtAiOoBxL7aNmRYwEYed3qEvPazHm25s1nNjEjs8W7c=
Subject key identifier:   BD:D2:CF:4F:5F:70:78:52:07:15:A4:F0:9B:E1:78:12:51:93:10:AF
Certificate issuer:       /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
Certificate serial:       010D0C9F4328584F024223F97A6683336D85F180
Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        142.9.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:23:f9:7a:66:83:33:6d:85:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=8b94bf5b-bccc-4a0c-9c9d-9584f5e43ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:da:f0:bb:f6:f3:ae:11:1a:33:b8:cf:6d:
                    2f:70:cd:01:67:ee:b2:b6:ee:f6:4f:5c:59:27:d7:
                    17:c9:13:a5:4f:0d:46:ff:83:2c:2a:e5:4d:b2:d1:
                    b3:6c:48:21:81:eb:0d:00:59:65:e3:f5:54:a4:cf:
                    30:5e:fc:85:9a:da:13:2b:3a:26:b7:91:6d:7f:0a:
                    53:d0:d0:be:3c:6f:dc:6f:2c:73:22:45:52:e6:22:
                    00:eb:ad:31:c7:5c:ca:43:dc:77:df:70:4c:16:e1:
                    95:ca:4e:1d:9b:1c:fa:46:df:30:90:d4:fb:a0:1e:
                    9b:14:4d:55:5d:83:43:81:b8:fc:45:9b:4f:24:7f:
                    84:cc:e7:fd:c1:cf:15:f4:ca:2d:1b:53:a5:2e:24:
                    00:e1:82:48:49:20:b8:e7:06:4e:55:be:ea:aa:2f:
                    c7:6b:7f:1c:f6:6b:25:86:90:cc:db:f2:00:da:15:
                    e5:64:c3:af:49:1b:f3:92:0f:d7:01:79:45:d8:5b:
                    49:09:cc:d7:f5:36:01:25:65:dd:be:31:c1:eb:ea:
                    34:95:4b:cf:f8:1c:64:61:7b:26:0c:d0:5a:e7:57:
                    69:ad:70:d5:b4:76:87:f1:32:c9:3a:b2:c6:74:da:
                    a0:20:8b:c8:e6:92:c4:e5:44:e9:b9:65:3b:ca:3a:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D2:CF:4F:5F:70:78:52:07:15:A4:F0:9B:E1:78:12:51:93:10:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl

            X509v3 Authority Key Identifier:
                keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.9.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:6f:5d:29:9d:6f:ea:79:43:fd:fb:18:e2:ee:ef:c6:f5:
         7e:ed:f4:42:05:b5:b0:94:2d:2b:da:1b:44:a3:7c:67:1a:5b:
         3a:9d:a4:31:0b:43:38:ad:c3:f4:57:09:24:57:97:ad:84:12:
         9c:7f:f5:9c:b6:c6:a2:2b:6b:d5:e2:33:90:a3:e0:5d:5b:f1:
         74:0d:6e:87:bf:3a:35:b3:31:e1:64:41:98:28:92:e9:09:1f:
         70:6a:ee:c1:30:b0:03:3f:c6:18:fc:2a:88:93:da:3c:75:af:
         b6:cd:51:85:90:35:da:03:03:8a:12:16:f6:0a:33:09:d8:83:
         8e:10:23:7f:3b:95:5e:70:0f:c6:ea:2d:6b:c1:a4:1a:11:f6:
         e5:52:51:bd:48:ae:a7:c7:72:bb:6f:2f:87:42:93:5f:11:8b:
         a8:e6:70:ac:5d:95:b8:73:6d:52:d6:e1:00:96:ca:fc:6f:c9:
         f2:0e:0a:79:ae:91:82:c0:32:f7:ba:a4:ff:b5:7e:5d:9b:d4:
         f9:f7:f7:f4:66:f1:37:32:1e:6e:ed:f1:60:da:2a:2f:d2:ac:
         66:39:a3:39:f0:2a:ad:f6:98:38:f1:ad:e4:6f:07:53:f7:1f:
         88:ed:5f:39:58:96:a5:62:be:5f:8d:68:d8:22:59:55:df:2b:
         d2:fc:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:27:04 2026 by rpki-client