Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/325d9e04-b34c-3cd7-9f94-b8199d126500.roa
File:                     325d9e04-b34c-3cd7-9f94-b8199d126500.roa (raw, json)
Hash identifier:          pEmbXTb4yWwinNZ3TEn0Ez7BzFssbtJzmJBlNBxGlw8=
Subject key identifier:   D6:89:E7:73:4E:6C:11:45:A2:5A:40:86:F1:C1:16:1C:02:34:56:E6
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584F51D2A2ABB0CEE69143977800
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/325d9e04-b34c-3cd7-9f94-b8199d126500.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     13652
IP address blocks:        108.179.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a2:ab:b0:ce:e6:91:43:97:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=5dcc4851-1855-4ab7-8a92-0b71ccf5c36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:83:a2:06:e0:a1:ef:9e:3c:8f:dc:1e:43:
                    e7:89:bf:93:b9:73:3f:6f:ae:b3:65:5f:71:35:72:
                    47:31:d6:dc:79:ff:4d:f8:e1:3e:c0:b2:3c:83:f4:
                    5e:be:75:31:a6:09:50:0a:f0:e0:d8:c6:7b:eb:47:
                    e0:86:1d:9e:f7:ac:a6:40:c6:d4:e7:71:73:3e:e5:
                    35:93:34:a4:43:63:ac:92:eb:28:28:7b:9a:de:66:
                    48:34:0f:d1:46:cd:ca:44:fb:13:e7:b8:21:dc:34:
                    b3:ac:58:2e:09:0a:41:51:c0:45:f1:54:aa:01:46:
                    79:5f:f8:e0:8f:91:49:bd:07:36:4c:f2:47:16:7c:
                    e2:69:69:11:ae:88:d8:b3:5b:df:b9:64:84:7e:fa:
                    af:2d:ed:51:2c:fb:b4:82:15:65:4b:ec:b3:db:df:
                    7f:2d:26:4f:bf:3d:b0:0a:58:fb:31:94:b7:57:e4:
                    5d:dd:48:cb:ff:5d:f2:02:4e:55:0e:b5:25:25:4b:
                    8e:5b:34:30:3e:89:8e:f5:4f:eb:1d:62:cd:65:2e:
                    14:f7:f2:ce:17:1a:8d:e0:22:11:65:26:4e:29:4c:
                    27:40:b9:e4:15:aa:b4:aa:f1:14:24:42:2d:29:c1:
                    49:f7:0e:86:02:cd:8a:8c:26:aa:59:b9:62:88:8f:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:89:E7:73:4E:6C:11:45:A2:5A:40:86:F1:C1:16:1C:02:34:56:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/325d9e04-b34c-3cd7-9f94-b8199d126500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:05:35:f8:11:27:20:20:6e:22:11:09:28:cb:8a:21:3b:
         f6:64:dc:76:9d:c5:69:f3:f7:67:81:24:e1:c8:70:29:81:11:
         51:25:e4:ca:7d:24:56:be:81:5d:59:3d:f6:85:18:77:6b:1b:
         41:df:92:0e:1e:cd:ff:92:b9:8b:90:47:b4:ed:15:17:be:14:
         07:c4:38:90:2b:ce:5b:f1:35:1c:36:a7:ae:e3:36:f8:0f:26:
         6f:33:e3:ef:a7:d7:5c:28:0f:6d:17:ff:46:3e:ab:ca:e2:15:
         d2:88:ab:ca:45:b4:69:86:5e:35:f9:cc:22:3d:58:11:fd:45:
         00:ee:22:03:05:cb:f4:7c:24:cd:e6:e6:5e:d2:4b:0c:db:c5:
         b5:69:08:b7:4c:27:a7:23:62:02:74:a2:7b:b2:53:de:14:dd:
         59:86:ae:e2:5b:ce:67:34:ef:11:66:f9:7c:58:7c:9d:79:7c:
         88:a7:36:1a:3d:3f:c4:3f:f0:cc:b9:d6:86:8a:93:e7:36:ed:
         74:e7:de:94:2c:c4:92:f7:ae:b1:51:81:b3:3e:35:27:ee:12:
         7a:8b:18:23:cb:46:33:11:c9:0f:87:64:7e:99:90:6c:6d:4b:
         d3:4c:ed:21:1b:bb:03:15:ed:26:af:a8:7a:b4:74:f3:23:08:
         55:27:cb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:29:59 2026 by rpki-client