Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/9ef4612d-7b7a-351b-8aef-e70168dc2292.roa
File:                     9ef4612d-7b7a-351b-8aef-e70168dc2292.roa (raw, json)
Hash identifier:          gleGWr/hdwLVDH0zZF0VdzRYOD9MWWu1365YPw074Rk=
Subject key identifier:   E0:A5:82:22:DC:94:63:B8:06:30:D7:CB:5B:D7:6F:26:5C:52:F4:D7
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584F2EED0A7205B0A99E203A7C40
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/9ef4612d-7b7a-351b-8aef-e70168dc2292.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     133145
IP address blocks:        155.63.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:0a:72:05:b0:a9:9e:20:3a:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=49977b58-58a0-4eac-ba25-7e36e55f6a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:20:e5:dc:ce:3d:2b:d3:7c:b4:43:a9:55:
                    b1:4b:f6:af:af:e7:29:16:f5:90:89:fd:52:9a:2d:
                    11:11:a6:55:47:02:07:18:35:50:29:7b:f5:3e:bf:
                    90:fa:58:95:d5:04:0c:92:cc:9a:0e:96:ca:2a:fc:
                    ec:79:2d:dd:de:d5:51:6c:58:77:c5:54:d3:10:89:
                    19:fb:35:47:81:e7:63:41:8f:33:e0:4b:db:65:84:
                    3a:7b:6b:8d:86:cd:7b:f1:73:89:2f:e0:e3:6e:93:
                    40:ea:21:bc:81:0e:ee:9b:50:87:13:9e:3a:6a:49:
                    40:a2:38:3e:51:eb:e9:61:df:e9:5b:fb:4f:29:9a:
                    3a:40:8f:2d:e4:10:db:c8:3c:63:42:3c:1d:0b:88:
                    0f:f3:99:5e:3c:ab:af:a5:0a:0b:cd:5e:de:87:7c:
                    18:a9:ae:bb:9b:33:e4:82:89:42:c0:46:0d:d3:e0:
                    eb:d7:88:33:ef:d6:af:25:18:ae:31:d2:c3:4b:5d:
                    d0:df:90:c1:c8:2c:b4:67:be:82:ea:ec:0e:08:aa:
                    22:f2:40:08:e7:18:16:ac:a7:c4:87:88:4c:9c:ed:
                    e5:3f:88:96:da:9d:6b:ed:aa:75:98:5c:55:1a:f2:
                    97:09:16:fc:5a:1e:c5:b8:dd:b5:4a:89:84:44:cb:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A5:82:22:DC:94:63:B8:06:30:D7:CB:5B:D7:6F:26:5C:52:F4:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/9ef4612d-7b7a-351b-8aef-e70168dc2292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:df:39:44:fe:ea:a8:ad:64:68:ab:46:77:22:45:7f:73:9d:
         51:6c:83:6b:2e:f0:e7:d0:84:26:d8:09:52:df:9a:0e:2c:75:
         c5:fc:71:ad:d6:58:69:e6:e4:3a:5c:30:d0:ac:3f:19:d8:ee:
         10:0c:f9:ec:ce:53:df:ba:0d:0b:41:ae:dd:94:ba:f3:3b:e0:
         23:80:f9:41:2d:50:d9:4a:67:6d:83:f3:5a:7f:33:42:e2:75:
         35:50:5f:71:b9:cc:82:ec:3a:aa:bb:7d:f0:56:70:c9:7a:de:
         89:fe:cd:6b:15:cc:2d:cf:f3:30:58:96:5f:17:0b:91:00:d9:
         fb:5b:28:b3:ff:54:b1:83:31:6a:30:f9:4b:03:9f:d8:c3:bc:
         5a:a5:ab:8d:4a:9d:c0:42:7f:11:b0:60:f5:f7:b4:7b:76:68:
         ea:e8:4d:12:51:fe:aa:f4:96:89:fd:ff:71:61:2e:51:70:87:
         71:64:6d:8a:0d:e7:e5:2c:ec:e9:9c:a3:56:ea:6d:ce:4b:a6:
         24:8f:4c:0f:21:84:94:8a:04:ed:c3:80:6f:86:27:ca:c9:23:
         ca:f7:e2:c3:b8:66:80:b8:3a:73:46:38:a6:16:82:6a:81:03:
         8a:d2:26:01:05:b6:9d:d0:3d:f0:06:6c:49:da:ad:4b:2a:32:
         38:d8:47:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:40:57 2026 by rpki-client