Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/9f91b988-d162-3495-ba12-78809fd60592.roa
File:                     9f91b988-d162-3495-ba12-78809fd60592.roa (raw, json)
Hash identifier:          V7FTVws9sfTCGj6kpw15Rmb7AomOLAqhYRk3YgWvVK8=
Subject key identifier:   ED:40:08:91:B5:52:1F:6D:36:9A:D7:49:AC:C5:1F:47:0B:47:C2:00
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584F51D2A1A6F585B27C417A7100
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/9f91b988-d162-3495-ba12-78809fd60592.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     55209
IP address blocks:        24.38.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a1:a6:f5:85:b2:7c:41:7a:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=41078008-ad88-4899-8fd0-0e332fbb1db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:f0:d6:fd:11:00:56:82:8b:68:a5:95:9c:
                    98:c5:f3:8b:55:60:b1:84:a7:87:11:28:b9:f9:d0:
                    32:e7:ce:a2:bc:81:c0:e6:13:d4:38:a2:42:06:4c:
                    33:f3:3a:43:03:19:6f:70:0b:07:a3:f9:12:cf:a7:
                    3f:19:c3:b3:2d:e7:75:c6:04:24:7c:c9:e4:5d:90:
                    d5:65:05:3c:d5:70:25:f7:73:ae:f7:e8:95:57:bf:
                    3f:6d:24:08:3c:92:24:e0:d9:9d:e6:f0:d3:53:82:
                    38:9e:4e:76:cb:62:39:32:94:6f:9c:ed:b9:1c:fe:
                    b1:5c:82:62:18:ee:f7:ea:37:fd:67:fa:95:12:1d:
                    b7:40:39:d8:13:67:13:a5:a4:e5:a3:52:7e:12:15:
                    cc:33:36:6d:96:e7:11:9a:a1:6b:87:9d:10:6b:ea:
                    e1:f6:b7:aa:c0:0d:b2:0b:56:6c:41:b0:33:0d:90:
                    d9:70:93:c0:bb:78:d3:e8:74:42:c3:2d:70:88:f8:
                    26:29:0f:7d:1a:d5:10:aa:6d:30:d5:c2:ea:ef:5c:
                    c1:9a:d3:e1:f6:36:78:2e:a1:d1:5e:90:54:97:82:
                    81:24:d8:d0:1d:5b:11:fc:bd:7d:41:dc:af:2f:28:
                    a2:11:31:f3:ae:d7:69:59:79:ed:45:c9:e8:b1:3c:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:08:91:B5:52:1F:6D:36:9A:D7:49:AC:C5:1F:47:0B:47:C2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/9f91b988-d162-3495-ba12-78809fd60592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:33:bc:06:6d:7b:ba:3f:d0:df:34:b8:77:4a:8c:9f:38:b3:
         50:2b:f9:f8:0e:66:b1:e4:b8:17:66:78:98:73:21:23:37:c3:
         41:10:20:61:23:7a:48:85:15:ba:ea:b8:f2:96:7f:0a:f0:79:
         71:64:fd:00:b7:ee:8a:84:a2:37:16:d8:f4:74:6f:1c:a1:0a:
         1c:eb:24:1d:19:51:f2:89:b0:b8:12:1a:55:61:cc:1d:1d:90:
         61:c2:d5:80:bd:9b:56:fc:60:26:78:75:72:db:4d:47:ef:8b:
         6c:a5:4f:be:4d:32:da:0b:28:d7:14:cd:b1:3b:62:ae:80:16:
         d9:be:da:bf:01:ad:b8:25:20:a3:46:dc:e1:cc:b6:55:bd:fb:
         52:9b:96:d1:08:b9:bb:32:f0:1e:4c:89:68:80:b3:1e:ee:a8:
         b3:50:80:14:78:ed:16:f4:3d:35:e9:eb:0a:30:55:c0:a6:5e:
         d5:e7:c3:a5:2c:fc:16:8d:5c:47:d8:b4:20:81:2d:63:28:6c:
         30:fe:32:a7:8d:1a:09:18:1d:d8:ac:e5:a8:53:30:fb:e4:29:
         d0:2d:bc:ec:07:f1:c4:c3:5a:4a:6c:d6:b9:9e:a5:42:a7:93:
         4b:41:c4:e7:d9:39:f9:25:0c:cd:eb:02:b5:2d:2e:9c:7d:58:
         95:a2:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:27:38 2026 by rpki-client