Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf9b672-96ca-3398-b437-4eff9fbb8d14.roa
File:                     baf9b672-96ca-3398-b437-4eff9fbb8d14.roa (raw, json)
Hash identifier:          fGhUdNn48S14VGPC9R+viV5xRG77qOp4UwsSJ6qqfbE=
Subject key identifier:   EE:06:1A:56:09:CE:1B:4A:19:59:FF:B3:49:F4:52:B7:35:22:15:C5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584FA22D2A81E4D07624A5AD3B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf9b672-96ca-3398-b437-4eff9fbb8d14.roa
Signing time:             Mon 26 Oct 2026 19:47:24 +0000
ROA not before:           Mon 26 Oct 2026 19:47:24 +0000
ROA not after:            Sun 24 Jan 2027 20:47:24 +0000
asID:                     11426
IP address blocks:        174.80.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:2d:2a:81:e4:d0:76:24:a5:ad:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 26 19:47:24 2026 GMT
            Not After : Jan 24 20:47:24 2027 GMT
        Subject: CN=b0cade4f-ad72-4bbe-a099-4c46998be1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:53:45:78:f4:ea:10:f7:f8:b0:bd:bc:b6:69:
                    de:f1:b4:87:f9:df:46:a8:e2:e7:86:af:d3:97:54:
                    e1:c2:1c:18:2f:66:37:86:0b:d7:6d:f6:3f:41:d8:
                    57:35:3e:89:aa:6b:53:ba:e3:29:f4:06:55:77:9a:
                    69:95:79:aa:99:a8:aa:9b:0e:52:cc:70:17:e2:b4:
                    2c:ea:45:39:0a:5e:89:e4:b3:5e:90:04:b1:8e:2f:
                    78:59:80:8f:49:be:c5:24:a8:b9:a7:2e:27:d2:91:
                    69:b9:b9:8d:67:66:bc:58:d1:89:65:e0:a1:bf:f1:
                    42:92:30:62:1a:79:18:90:09:37:f2:8d:8d:af:bd:
                    02:9d:db:e3:1a:a8:65:24:df:05:50:35:01:05:ee:
                    95:75:5d:83:e4:e1:b8:fe:b3:9a:ab:07:05:0a:0e:
                    49:aa:59:67:a4:38:b1:bf:de:4c:29:8e:b4:8e:ec:
                    29:4a:32:cf:e4:cd:12:45:cf:68:5a:ca:ab:d3:7f:
                    ae:5f:92:65:6e:ce:c1:ed:e6:ba:42:e8:5b:55:9e:
                    db:a0:92:d1:85:9b:cb:ce:fb:a2:5b:6e:73:df:34:
                    ae:f7:6c:58:a0:98:50:a3:d7:05:91:2b:82:30:55:
                    16:82:5f:f0:d7:3d:ab:bc:b2:10:10:96:19:eb:d8:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:06:1A:56:09:CE:1B:4A:19:59:FF:B3:49:F4:52:B7:35:22:15:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/baf9b672-96ca-3398-b437-4eff9fbb8d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.80.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:a8:b2:cc:c1:b7:e8:3a:b4:75:67:34:ae:e5:1b:05:9a:
         0d:c6:8d:9d:84:8c:93:3c:4f:4d:05:c0:3c:7c:21:79:67:ed:
         28:7d:1a:35:6d:79:2f:8c:c9:88:df:08:a5:93:a7:92:ae:ea:
         1e:2b:b4:d8:d7:9f:0b:14:f7:c0:67:cc:50:00:48:8e:56:b8:
         0d:cc:8c:2a:82:04:08:c6:50:d0:a7:94:a8:78:2b:54:cf:7d:
         46:b7:51:9d:90:1f:ae:6a:24:7d:7d:c9:34:87:60:60:13:78:
         0e:54:7a:ce:2e:ae:7e:1f:43:bb:0e:1f:a0:d6:aa:fc:39:36:
         a5:5c:48:cf:b3:2d:fa:81:65:c9:90:35:9a:46:5a:40:55:50:
         a6:26:eb:13:f7:27:55:b3:aa:3f:38:ca:0c:dc:33:9e:6f:33:
         37:94:1f:b9:ea:40:df:22:3f:4e:86:88:cf:cb:8a:c2:8e:e0:
         ec:51:a6:92:a1:56:cc:a6:c3:38:67:f0:4a:02:0b:a6:65:97:
         dd:ac:76:f3:38:c9:3b:ec:4f:93:77:d1:06:1f:52:6c:fe:98:
         3f:c8:89:df:b9:f5:7d:34:d0:98:c9:98:f7:8b:99:d4:61:ad:
         93:02:24:f1:0c:b3:ff:f7:7d:13:94:49:73:74:ea:6f:f1:08:
         83:f6:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:23:58 2026 by rpki-client