Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/fd3eb8c3-91d4-37ea-be61-7708453062cc.roa
File:                     fd3eb8c3-91d4-37ea-be61-7708453062cc.roa (raw, json)
Hash identifier:          HgxHC6FKOYk2xds8EGctYUPOAPF0v+5PmerXiCEQJMw=
Subject key identifier:   0C:46:5B:FD:AA:69:C4:B9:01:52:B7:37:23:05:C0:C4:8A:01:0A:C8
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F4328584EA78861B860E0955122D60040
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/fd3eb8c3-91d4-37ea-be61-7708453062cc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        192.243.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:61:b8:60:e0:95:51:22:d6:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7eec92d4-cd23-481c-90d8-7a9c3d62f9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:7d:26:f9:85:8c:25:d6:6c:1c:80:99:95:
                    15:06:91:2b:de:da:c2:d6:2f:dd:47:b4:dd:05:d6:
                    47:6b:87:db:73:99:9d:31:8e:e9:d8:02:eb:c7:e8:
                    c6:05:17:f5:2d:16:de:b6:1d:90:3f:6d:78:c7:ea:
                    c2:68:38:a1:5c:c6:1c:d4:75:bd:89:ee:39:fc:5c:
                    67:d0:c7:d5:37:e9:54:09:8c:82:12:be:9e:75:27:
                    85:39:e3:4d:e7:02:40:d2:93:06:7f:f1:6e:fd:90:
                    9e:2c:b2:de:96:9f:a4:88:21:38:5a:a5:58:d7:4d:
                    4b:83:53:6f:69:6e:48:15:37:78:06:44:bc:d5:0c:
                    12:3c:ac:2f:7a:86:49:98:c2:63:3e:9e:78:16:0e:
                    db:3b:85:31:de:31:58:15:e6:03:67:bf:d0:a3:8d:
                    10:1b:2c:c4:27:24:92:d7:98:53:31:14:2f:61:3c:
                    3f:f6:25:83:0b:63:2e:e5:7c:31:1a:57:02:1a:c9:
                    ea:ae:9c:af:99:19:2b:73:58:a1:dd:ac:66:f5:da:
                    9e:87:95:b6:5d:16:c9:13:94:78:f5:03:87:59:5e:
                    62:6c:f8:90:73:ad:d0:9c:eb:f0:62:2a:eb:eb:01:
                    0a:14:50:6c:c9:16:05:fd:56:51:f8:6a:c6:fd:af:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:46:5B:FD:AA:69:C4:B9:01:52:B7:37:23:05:C0:C4:8A:01:0A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/fd3eb8c3-91d4-37ea-be61-7708453062cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:fa:4b:6f:97:7f:8b:8d:6f:0a:13:e0:f3:f0:cd:15:1a:
         64:be:ab:0f:9a:74:ef:c3:6a:c6:80:5d:d1:f7:91:5c:c1:03:
         d8:4d:97:f8:37:2a:58:d3:78:8b:17:90:69:b3:19:4d:89:3f:
         27:44:e1:a6:00:65:d4:3e:61:b6:54:4c:c8:a7:61:1d:93:96:
         2e:ca:2f:f7:7d:9c:19:0e:3b:d9:8c:e1:79:86:30:bd:5e:4e:
         6a:93:d6:ce:5c:ea:cf:52:96:d8:ef:a4:d8:a8:8a:51:b3:e5:
         f7:6e:ff:66:d3:39:7d:64:9c:47:3b:23:15:d8:8b:e9:2d:c3:
         d2:ca:03:cd:d7:e2:05:1d:dd:3e:0e:9b:95:a6:af:35:88:25:
         27:85:b9:1f:67:fa:dc:66:f3:cb:97:81:7f:16:f0:2e:eb:73:
         e4:d7:7a:d7:9a:3c:04:7a:d0:a2:00:9c:38:81:a7:82:5f:c4:
         aa:25:82:0a:ae:19:ec:0b:af:7a:f5:c7:7e:bc:ad:63:5c:d8:
         e4:ad:f2:fe:80:57:b7:93:67:c3:c5:02:50:3f:c6:81:30:9d:
         33:af:d8:4f:ba:5b:f8:8e:92:f7:65:82:07:55:72:1f:41:85:
         b6:d9:db:b4:9a:66:0d:3e:58:f0:6d:f0:99:68:73:2a:a2:b2:
         e8:1b:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:32:11 2026 by rpki-client