Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa
File:                     8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa (raw, json)
Hash identifier:          k10fOsZfISstz0uN0HM33D5cPNwX7iKuGJLkO8rT8Gk=
Subject key identifier:   7A:1A:8D:D2:CF:90:B7:8C:58:C3:FC:67:6B:8E:86:42:1D:1F:62:F8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F497331DF261D5D2196EA5880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54253
IP address blocks:        134.185.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:31:df:26:1d:5d:21:96:ea:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9da935be-72aa-468c-b8d6-d2692d01b59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:4e:6d:53:03:5c:95:8b:51:db:db:27:e8:
                    d9:29:e1:3d:5e:74:4a:68:9e:21:7d:f6:06:6e:dd:
                    20:48:62:a8:b0:ef:de:00:d6:41:28:83:1b:59:dd:
                    2d:ac:c0:10:84:98:df:12:03:a0:40:df:17:a1:df:
                    29:f7:bb:4b:f4:b8:a7:18:9c:0f:6e:d1:93:bc:13:
                    d0:57:3a:28:66:0a:3c:4d:e4:5a:64:33:43:93:78:
                    e0:b4:cc:be:86:04:a7:74:31:77:8a:5f:6f:79:bf:
                    d6:de:ef:6f:1c:1c:77:57:fa:02:ce:f5:d6:39:9c:
                    a7:40:86:3f:ed:d1:49:5a:7b:08:c8:0f:80:52:c9:
                    1f:91:ab:21:03:fe:07:e8:f4:64:58:e4:24:9a:42:
                    5a:cb:89:c3:2c:1f:e4:d5:73:fc:84:04:dd:3d:ae:
                    7d:43:28:1a:cc:df:cb:60:43:14:e2:a0:22:05:c0:
                    4e:7a:0d:36:9d:22:a5:b2:58:b4:ce:a7:a2:c7:7c:
                    6e:9d:f3:fc:74:d9:70:c9:c9:ea:0a:03:eb:44:85:
                    5c:5d:56:e3:2e:fa:9e:80:9f:b4:49:15:21:77:4a:
                    49:db:88:8e:01:84:a9:97:16:66:07:da:72:fc:6c:
                    53:76:7c:5f:38:79:93:74:8a:fd:bd:ea:7b:20:9a:
                    5c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1A:8D:D2:CF:90:B7:8C:58:C3:FC:67:6B:8E:86:42:1D:1F:62:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.185.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:ae:12:4c:e8:f4:9d:5b:09:30:de:d6:d9:ca:9c:da:13:
         23:ed:9f:01:39:e1:21:5c:0c:5f:35:68:72:49:40:28:75:c7:
         96:11:16:de:43:1e:c2:ec:8c:8d:18:b7:2a:e5:7f:3a:9c:5c:
         a1:04:33:d1:47:1c:1d:44:a4:fb:16:bc:1c:ab:06:7c:17:b6:
         38:23:31:c6:86:79:30:12:d6:bb:3a:e6:b9:55:b1:51:53:d8:
         fe:ce:57:c2:36:21:24:1d:2e:6d:26:25:c7:b6:95:3e:c1:4b:
         e6:10:04:c2:b8:2d:77:19:47:85:10:af:8f:44:35:54:4c:a9:
         38:c1:a8:70:56:9b:1b:a3:77:97:6e:80:89:41:f8:a1:ab:4d:
         35:0f:38:22:dd:49:ed:f2:d3:df:d4:b2:1f:01:d1:6e:05:dc:
         41:64:41:95:1b:89:82:00:cb:68:c1:85:64:f8:2f:2f:c8:37:
         76:3c:b2:7e:a8:85:58:94:b6:47:d1:5a:59:b2:5e:de:2f:96:
         40:4e:86:70:a8:23:4e:5e:75:69:aa:54:04:39:b2:3b:09:23:
         73:c6:be:f1:e4:fb:1d:0b:68:c9:40:f1:a7:ad:0d:7e:64:cc:
         08:84:81:b4:ba:1f:62:da:6e:52:e7:02:7f:25:b6:cf:44:fa:
         f2:67:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:07:55 2026 by rpki-client