Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1a781228-83db-3b43-b82b-a7b7711e58ba.roa
File:                     1a781228-83db-3b43-b82b-a7b7711e58ba.roa (raw, json)
Hash identifier:          77yMTJtAh4SNGDOQtsiIRxjo97tM5uuM7atxPMbyEAI=
Subject key identifier:   F0:80:4B:EB:7F:C2:98:DD:5A:5E:40:1C:45:FD:71:BE:84:0E:07:B5
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584FA464FA76EAE52D7D2B0F5340
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1a781228-83db-3b43-b82b-a7b7711e58ba.roa
Signing time:             Tue 27 Oct 2026 14:51:29 +0000
ROA not before:           Tue 27 Oct 2026 14:51:29 +0000
ROA not after:            Mon 25 Jan 2027 15:51:29 +0000
asID:                     219075
IP address blocks:        192.48.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:64:fa:76:ea:e5:2d:7d:2b:0f:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Oct 27 14:51:29 2026 GMT
            Not After : Jan 25 15:51:29 2027 GMT
        Subject: CN=cc41b042-d6ba-421d-8f3c-46e1f86325dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:d4:6b:0b:be:b8:dd:74:10:07:b1:4c:da:
                    22:0f:86:e0:35:03:88:d0:cd:ec:15:db:21:6b:4a:
                    ca:fb:a3:57:4f:2d:3e:12:e7:88:73:3e:2e:d1:4a:
                    84:c5:74:15:26:4e:bb:8a:9e:ca:33:ae:38:66:e5:
                    47:92:c4:87:7d:fc:73:97:12:c0:64:07:b5:91:72:
                    52:ec:31:09:a6:c6:dd:61:98:57:da:e3:54:e1:2a:
                    6b:b7:24:f2:de:93:21:31:cd:1e:4b:8d:19:bd:65:
                    0d:fd:16:f1:01:d8:53:10:39:ef:51:ab:ef:8a:03:
                    c5:3d:75:32:bc:6e:17:9f:14:76:f0:ae:a0:ff:27:
                    dd:aa:84:2a:8b:0f:13:92:dd:76:e4:33:e5:f4:22:
                    53:d8:d6:15:02:9d:9c:7e:88:4b:37:78:2c:a2:35:
                    58:ad:a9:80:91:0d:67:2c:5d:3b:b0:66:35:88:e7:
                    d6:28:ff:91:e2:7a:08:45:45:6c:42:a7:15:db:e1:
                    21:ef:09:3e:28:5e:ba:e4:0f:f0:3e:ef:3b:7c:ef:
                    19:6a:0f:bb:c2:97:15:2b:a5:5f:ed:51:79:f5:d6:
                    8d:af:27:ff:72:c6:49:23:e7:07:10:13:5c:ca:7f:
                    49:3c:53:9e:d8:07:6c:f3:a2:e0:46:30:3b:9d:8a:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:80:4B:EB:7F:C2:98:DD:5A:5E:40:1C:45:FD:71:BE:84:0E:07:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/1a781228-83db-3b43-b82b-a7b7711e58ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:84:fd:e1:57:9b:c0:09:00:8d:fb:92:25:53:7a:fb:b4:83:
         18:05:73:96:95:49:de:cf:bc:f8:94:d3:21:3c:3b:a1:a0:b8:
         74:d1:0b:14:47:3f:15:68:9a:62:a2:65:bf:70:c4:b5:b7:20:
         50:80:be:63:ad:f7:a7:07:da:3c:47:4b:f0:44:ac:4a:ea:8c:
         72:02:c9:33:2f:14:a6:1a:7c:78:bc:38:f3:b6:38:9a:8d:a4:
         be:6e:79:a0:75:55:21:96:2f:9d:f0:37:a2:58:34:17:fc:2f:
         39:2c:ea:7d:39:2d:88:d5:2a:72:2f:d7:84:11:1e:cd:7e:52:
         c8:fa:d4:9d:cb:01:8d:fd:c1:69:04:5d:0f:53:22:be:02:f6:
         46:5c:f2:fd:e7:28:02:c3:32:59:7a:c7:98:18:7c:0a:73:93:
         37:f8:c1:82:4a:7a:b8:72:38:41:fc:4b:8b:85:4c:e8:0d:41:
         74:4e:0c:ae:89:f3:62:34:cf:b4:cc:19:88:72:ff:71:50:fd:
         c2:35:fd:8d:b6:fa:c0:d1:b5:9a:b4:59:9a:5c:9c:3c:06:13:
         fa:b7:bf:23:62:07:14:3f:06:0d:45:2b:89:3f:21:89:52:90:
         55:56:eb:68:69:6a:26:9a:36:08:db:72:46:90:d1:05:f7:d2:
         ef:ba:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:10:50 2026 by rpki-client