Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e67e160b-2ad0-3cb2-9b9a-3a0a5d068df3.roa
File:                     e67e160b-2ad0-3cb2-9b9a-3a0a5d068df3.roa (raw, json)
Hash identifier:          CvDjFprZ4WELjaFB+ISWbHGnW+3G2xtpxrlyvlwya/I=
Subject key identifier:   9E:8F:02:53:5D:37:CB:72:BE:0B:71:98:71:47:11:A8:92:4B:BF:C2
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584FA46BB6C134C36AF6DB5DEBC0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e67e160b-2ad0-3cb2-9b9a-3a0a5d068df3.roa
Signing time:             Tue 27 Oct 2026 15:05:03 +0000
ROA not before:           Tue 27 Oct 2026 15:05:03 +0000
ROA not after:            Sun 24 Jan 2027 02:00:13 +0000
asID:                     147281
IP address blocks:        192.26.55.0/24 maxlen: 24
                          192.48.194.0/24 maxlen: 24
                          192.82.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:6b:b6:c1:34:c3:6a:f6:db:5d:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Oct 27 15:05:03 2026 GMT
            Not After : Jan 24 02:00:13 2027 GMT
        Subject: CN=1c13fee1-83b7-4347-874d-1cfb4c0e2a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:d8:dc:84:a9:a3:d4:f8:16:91:4f:81:9d:
                    43:a9:67:72:39:bc:55:53:eb:8c:10:96:75:5c:c6:
                    db:bd:58:cc:70:63:27:64:29:53:b3:89:32:11:3c:
                    60:1c:1e:50:6e:fa:a0:93:32:af:fe:c3:3d:9e:a8:
                    bd:db:e9:a8:6a:86:f8:a0:26:57:43:69:ff:20:b7:
                    18:4f:ae:d2:2c:50:0a:07:93:cc:c6:44:7e:27:a9:
                    8e:27:51:b6:3a:52:ed:f3:31:93:71:a0:fe:40:da:
                    19:ab:ca:65:40:50:6f:c2:36:0e:c5:a8:80:8f:83:
                    29:a8:8d:66:8d:66:e3:00:5f:e9:b1:a5:7f:4b:60:
                    76:cc:8c:72:d1:f0:7d:6f:60:e6:d9:88:12:1a:4d:
                    05:84:e0:ab:33:cd:52:49:76:8f:2d:e0:d5:f7:3d:
                    d7:9b:65:d8:bb:56:c2:b1:67:31:4d:6d:ab:0b:47:
                    e7:b2:dd:d0:8f:74:f0:c3:7e:86:a7:32:ea:93:08:
                    16:65:54:9c:d1:3d:e7:f6:a9:c2:26:9e:66:0a:ae:
                    ab:eb:1a:0e:ec:5e:c9:54:be:15:01:01:be:70:c7:
                    38:82:5e:7e:09:1d:14:ce:ee:27:b6:58:6f:cb:25:
                    7c:b4:af:25:0d:20:5f:1d:f6:15:fa:04:e6:99:5a:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8F:02:53:5D:37:CB:72:BE:0B:71:98:71:47:11:A8:92:4B:BF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e67e160b-2ad0-3cb2-9b9a-3a0a5d068df3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.55.0/24
                  192.48.194.0/24
                  192.82.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:dc:22:63:7f:a4:db:55:43:2f:5e:4f:44:4a:81:3f:12:
         b7:de:3f:65:90:2c:d3:44:dc:cb:0e:96:9e:84:54:4b:c5:4c:
         f4:d6:08:c8:1e:74:d9:46:09:79:44:b9:a9:49:5f:cc:66:d3:
         e3:f1:8f:06:59:60:3c:a9:76:f9:71:a5:06:7f:d0:eb:3a:24:
         8c:1b:9e:14:09:dd:f1:27:1b:67:bf:d7:13:14:54:b4:6b:8b:
         39:fa:76:2f:81:df:7b:90:92:2d:45:dc:ec:c8:50:fb:66:17:
         30:bd:d8:0a:70:ce:e0:39:f0:66:1f:33:f2:7d:92:4a:dd:88:
         c6:42:d1:56:17:63:c8:ed:a5:47:2e:d7:23:26:45:2d:e6:01:
         72:97:db:65:75:12:be:33:74:0a:80:57:5b:5a:72:0f:78:c2:
         96:37:3b:3f:57:c7:cd:28:a0:77:c7:26:d0:c2:34:81:27:1c:
         f6:99:29:0e:a7:34:13:88:5a:1f:2b:25:12:19:5f:ef:fe:36:
         86:82:49:dc:47:58:32:0a:ae:b7:93:a3:9d:9d:99:bd:21:f2:
         20:80:c1:13:85:13:97:95:e2:4c:bc:09:4f:02:54:09:a7:8f:
         a9:40:88:3c:c8:76:88:0c:70:cb:4f:fc:5a:98:8f:f6:9f:a0:
         f5:c5:08:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:25:53 2026 by rpki-client