Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/7fc32f5e-f5ce-3151-b468-61099278f9dd.roa
File:                     7fc32f5e-f5ce-3151-b468-61099278f9dd.roa (raw, json)
Hash identifier:          e91yESYNs/W0ZFvdTppgMSCAHFVZmjZuXQ0HIafNApQ=
Subject key identifier:   E7:1B:1C:2C:63:D2:DF:CA:B0:19:1A:69:F3:13:39:03:09:20:64:2D
Certificate issuer:       /CN=f9bc2011-5153-496f-bab6-66966f6f0df9
Certificate serial:       010D0C9F4328584F130242025CDA04DBC2864C40
Authority key identifier: 10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/7fc32f5e-f5ce-3151-b468-61099278f9dd.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     29721
IP address blocks:        192.231.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:42:02:5c:da:04:db:c2:86:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9bc2011-5153-496f-bab6-66966f6f0df9
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=6dc64cbc-cb1a-47df-93c0-1b89172a9427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:85:3c:bb:f5:44:7c:45:11:73:3f:23:cc:
                    f8:6d:97:f0:ac:11:83:6a:7a:2d:7f:55:b6:52:ef:
                    62:9f:bc:be:6c:91:e6:1f:c2:8a:0a:13:4b:81:01:
                    4d:2e:f8:09:82:1a:81:52:89:1f:79:6a:55:25:a7:
                    e5:f5:b2:0a:89:5a:67:8b:11:d5:06:80:76:34:bc:
                    e2:63:fe:8d:df:10:15:98:87:25:46:4b:b3:0a:91:
                    d0:fc:64:8b:a9:8a:4c:aa:e2:23:03:c7:b4:80:6a:
                    8d:52:d3:d4:fd:b9:69:4e:f0:05:b8:73:ac:9d:51:
                    82:7d:67:59:90:48:fb:16:c3:85:ce:76:f1:fe:05:
                    86:aa:34:32:12:be:81:3a:e3:8a:d0:92:7a:46:cd:
                    4f:8f:15:ca:9a:0f:f5:85:17:fc:98:f4:d8:5d:a5:
                    25:de:ad:b4:f0:5b:1e:34:78:63:39:89:3a:88:44:
                    62:2c:e2:9d:77:40:94:95:ef:db:8c:f8:99:35:bb:
                    42:e8:8d:dd:b4:82:9b:5d:32:98:b8:a0:e9:ca:87:
                    dd:b0:8c:96:35:22:ab:cd:22:a8:9c:27:36:e4:38:
                    f1:11:e8:67:56:41:5d:b3:7b:b7:c7:0e:48:98:4f:
                    2d:58:ce:7f:cb:e5:9c:a2:51:11:5f:a5:ed:f2:48:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:1C:2C:63:D2:DF:CA:B0:19:1A:69:F3:13:39:03:09:20:64:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/7fc32f5e-f5ce-3151-b468-61099278f9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9/f9bc2011-5153-496f-bab6-66966f6f0df9.crl

            X509v3 Authority Key Identifier:
                keyid:10:17:1F:F6:98:19:30:73:51:1B:32:CA:14:5D:C7:14:FD:FC:02:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f9bc2011-5153-496f-bab6-66966f6f0df9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:bc:59:9d:94:5b:91:ea:9d:d5:7e:0d:ff:71:d0:c6:1a:
         ff:03:52:06:ee:1a:fb:08:1d:7c:4d:df:4c:5c:9c:a7:fc:cc:
         5e:07:0d:2f:09:00:65:5c:cd:b5:9a:65:ed:35:50:e9:06:d9:
         70:26:23:6b:5c:0d:c0:a6:4b:e3:73:d3:dd:f9:90:43:34:29:
         3a:1b:4a:5e:16:79:64:00:a9:85:5f:97:fa:1b:d3:a5:97:5c:
         d8:ec:00:47:ff:c4:d3:ea:ce:ea:8e:b1:dc:e8:ec:db:aa:1e:
         4c:bf:5d:69:01:ae:14:70:9e:fa:bf:a0:f8:23:7c:3f:16:bc:
         6a:b8:92:d8:2c:22:95:3d:39:17:5f:6b:6f:91:5c:28:e9:99:
         79:a8:36:59:95:85:9a:6f:78:db:58:e9:76:a5:cd:3f:3a:47:
         ff:36:18:0c:9c:1f:45:b6:c1:f5:1c:96:bb:71:e1:96:bc:ba:
         b0:5f:2b:e7:31:59:31:0e:36:fa:37:bb:25:5e:20:c1:5d:eb:
         fa:dd:7c:6f:02:2e:95:a3:ba:7a:c2:72:89:08:17:6e:9b:8e:
         4a:c4:ea:13:75:50:5e:fe:a4:06:78:0f:08:a7:5e:37:7c:49:
         d9:49:f8:67:ca:82:64:3d:ab:e7:79:ec:45:ac:35:4c:94:11:
         b0:6c:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:14:27 2026 by rpki-client