Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa
File:                     6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa (raw, json)
Hash identifier:          tkL6JhaxMgXklDPXMrkZ8oPucw7br32vKYEgqq2cn4g=
Subject key identifier:   AE:CB:1E:8C:2C:98:8E:BB:7A:C0:66:12:C9:40:51:D8:19:BD:E5:42
Certificate issuer:       /CN=9efc5ee4-5178-488a-abd0-63bc19c491eb
Certificate serial:       010D0C9F4328584F1CC7A3959AF9B3EB6A9AB400
Authority key identifier: 40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     8075
IP address blocks:        199.229.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a3:95:9a:f9:b3:eb:6a:9a:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efc5ee4-5178-488a-abd0-63bc19c491eb
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=e9289828-f852-4f41-95a6-b5528da21d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:cb:57:c5:bc:81:6a:ab:ee:82:e3:cb:f8:
                    cc:5c:b8:df:09:86:85:9f:0b:38:71:8d:bd:a1:e1:
                    e8:53:08:94:a5:6d:5d:66:af:ea:f3:d1:02:27:33:
                    7a:b3:35:f4:1d:2e:97:70:1e:4c:c0:f8:31:a3:c2:
                    84:bc:22:58:0d:b7:5c:7c:ae:4d:09:68:87:9e:4e:
                    f1:a9:2a:b8:a0:b0:48:53:06:ca:27:a0:5b:11:02:
                    44:2a:e5:f6:89:23:07:da:d5:02:6f:87:6b:bf:b7:
                    fc:37:32:e7:50:43:e8:cd:86:d2:07:da:da:1b:c6:
                    10:72:aa:ca:25:59:51:96:98:e6:7b:47:2a:e6:05:
                    3a:b3:6a:f5:4f:5b:53:d3:60:d7:d7:c4:1a:60:e3:
                    4c:b6:06:3d:ab:cc:65:46:84:52:b0:f4:46:ee:d0:
                    14:c1:ae:e1:29:2a:cf:97:c9:24:34:1b:18:56:2e:
                    0a:41:af:21:55:38:aa:2f:ec:7a:78:1c:ce:83:69:
                    5c:69:18:5f:12:27:ca:ae:2d:50:c0:a2:e8:72:3f:
                    c2:bd:d5:93:92:ec:34:13:85:28:62:24:fb:d9:fd:
                    39:b6:a8:87:95:53:e2:a5:42:3e:3a:e4:3f:ce:1a:
                    d1:7f:3c:7c:8b:e7:4e:76:37:0b:26:51:8b:62:56:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CB:1E:8C:2C:98:8E:BB:7A:C0:66:12:C9:40:51:D8:19:BD:E5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl

            X509v3 Authority Key Identifier:
                keyid:40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.229.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:42:6e:6e:44:e8:c6:dc:17:db:19:30:52:1e:23:0b:b8:
         6c:58:79:8c:a2:52:05:58:8d:92:bd:8b:38:11:21:bd:1d:18:
         7a:1a:bb:24:62:64:82:0c:e6:bc:f8:aa:ee:8d:2d:65:1c:bd:
         b4:9f:2e:9c:ab:7b:4f:ce:e6:78:44:b9:ba:43:3f:71:eb:59:
         d5:ff:00:17:88:7b:a8:10:87:b1:59:a7:1b:5b:49:6c:7a:0a:
         64:b3:07:dd:ff:7a:f2:b9:bc:fa:d1:a7:e3:1e:45:20:52:39:
         15:f1:69:9c:dc:cf:f0:53:15:5f:ba:af:42:bb:8e:fa:35:b4:
         ed:19:7e:b0:0f:93:a1:3f:f3:e7:57:67:56:23:4d:2b:e2:ab:
         ab:d7:21:66:a9:40:45:31:0a:c7:de:a4:06:b8:a3:97:d9:07:
         3d:a8:b1:c4:e2:7c:84:99:28:c9:00:33:e9:57:94:ca:04:72:
         24:8a:e1:a4:54:5d:c6:c5:2a:ba:5a:4a:72:bc:1e:ca:c1:ee:
         03:3b:8f:75:33:eb:0d:f7:f0:5f:68:31:79:4d:f9:8d:50:6b:
         f5:0e:36:05:fd:92:84:5a:f1:16:95:83:3d:28:84:18:57:a1:
         c8:48:da:91:e3:27:b8:f1:e3:24:2e:87:67:d9:16:7d:dd:5e:
         2e:d3:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:10:35 2026 by rpki-client