Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/e4aab9f9-0103-3671-b8ce-114e2afd8b14.roa
File:                     e4aab9f9-0103-3671-b8ce-114e2afd8b14.roa (raw, json)
Hash identifier:          Kf1tYelZITY/H6vBmGP9ykN/N3pPjRiy5V66yVdljis=
Subject key identifier:   7B:C9:7B:6A:5C:A5:09:57:9B:2A:1D:BD:DA:38:5A:DC:87:28:EF:EE
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584F1467AF4546E32427AECE33A0
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/e4aab9f9-0103-3671-b8ce-114e2afd8b14.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     21669
IP address blocks:        209.212.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:af:45:46:e3:24:27:ae:ce:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=225a55f3-f94b-4cf0-84b4-9bfd80eb002e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:c0:36:f7:e5:4a:f6:ba:aa:b2:f7:c4:a8:
                    56:17:77:6e:7d:8d:a3:c9:7c:1d:49:e9:05:14:e1:
                    54:f4:a2:5e:7f:a0:4a:70:8a:05:cb:25:5e:fe:23:
                    2c:f1:9b:0b:b7:77:9a:ed:3b:95:e4:fc:d9:4c:f4:
                    1d:0b:2f:87:dd:48:a5:8b:bb:18:dc:66:49:93:c6:
                    fc:81:63:43:94:ec:11:85:07:f6:a7:ce:33:5e:6f:
                    97:34:34:ee:15:e2:a3:b5:b2:27:c8:db:13:4a:9d:
                    31:31:ba:bc:4b:04:31:97:93:72:98:a4:b2:b7:17:
                    63:35:47:8c:3d:17:f3:3d:40:31:ac:64:26:79:95:
                    b5:22:bc:bc:dd:98:ee:ff:8e:eb:df:e9:fb:89:ba:
                    03:93:22:8c:d9:21:a1:1e:2d:f0:f8:b3:9c:b9:ba:
                    61:bb:b0:be:d2:18:1f:29:f1:0e:66:4b:0f:e1:9b:
                    9c:9f:b3:67:96:93:f8:06:d1:93:57:d5:14:f4:76:
                    ae:05:e8:b6:9c:9b:f4:1a:ea:30:96:a9:5f:52:5d:
                    02:9f:9e:7d:29:b7:f8:a5:a9:bf:08:04:8f:ed:a9:
                    ea:dd:fb:6a:8c:68:38:62:46:9d:c4:c6:b3:bf:08:
                    17:94:7c:24:66:98:72:a5:24:43:0f:68:c0:b7:b5:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:7B:6A:5C:A5:09:57:9B:2A:1D:BD:DA:38:5A:DC:87:28:EF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/e4aab9f9-0103-3671-b8ce-114e2afd8b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:44:d6:c2:2d:18:49:7a:6d:20:1c:da:f5:df:75:3a:6c:e0:
         37:34:33:a0:fa:04:d8:4b:c0:f5:9b:66:ac:9c:c1:54:b0:c8:
         82:a2:1c:a5:63:2e:3f:bb:4e:40:65:80:36:0f:c2:6f:d3:22:
         fb:ee:6d:d1:4e:ef:e7:e6:79:e3:1e:ef:f1:9a:1e:bd:3d:21:
         5b:ee:f7:2b:26:23:01:ea:3d:48:3f:b6:a4:b5:ee:12:1a:57:
         e1:43:f8:ae:30:be:c0:1b:ec:d0:ad:68:cb:62:e3:b6:79:64:
         11:20:c5:04:82:e3:7a:be:50:e7:6c:7d:3c:95:fd:63:59:53:
         37:ea:a7:bd:b4:1d:5f:b9:dc:6f:f1:f3:c0:18:e0:5e:e1:78:
         c9:42:2e:04:a3:b3:53:00:aa:96:30:b9:fb:43:21:31:6b:22:
         18:27:bb:68:8a:f4:11:9a:8c:de:ca:27:97:e1:2e:39:f6:b3:
         e3:f3:84:a8:55:fc:bd:7a:64:1a:69:a5:bb:2b:8f:cc:71:98:
         bc:80:35:a8:55:32:e9:f9:fc:b8:b8:fd:37:f2:8b:d4:29:f4:
         3c:93:57:a9:69:56:af:d0:d2:69:6c:1a:fe:65:5c:8b:bc:30:
         3e:ed:1a:24:d9:44:21:26:e0:b2:65:ea:18:51:24:1f:52:f2:
         ce:72:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:02:52 2026 by rpki-client