Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ce56e133-468c-3b52-9afb-5420157f05c8.roa
File:                     ce56e133-468c-3b52-9afb-5420157f05c8.roa (raw, json)
Hash identifier:          mJfBPC3JEjcB731GVK+EQPxhneK1GHZXc+41B+VrEqY=
Subject key identifier:   48:90:E0:D6:23:05:1C:DF:BC:73:61:37:D3:44:08:14:F8:F3:F8:E6
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F51D2A4FA9673F84B8F273900
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ce56e133-468c-3b52-9afb-5420157f05c8.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        192.6.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a4:fa:96:73:f8:4b:8f:27:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=bde79a19-5c83-4dbc-b8b0-813d2588b660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:17:60:b5:53:8e:eb:10:fe:10:da:4d:11:
                    1e:38:85:5e:09:b7:ce:08:31:d6:7c:19:6f:45:22:
                    b3:a4:0f:06:db:48:a5:bb:32:98:7e:e8:66:7c:6c:
                    8f:61:7c:87:47:c6:b2:49:f9:0c:75:60:af:45:fa:
                    c2:72:79:b6:18:ba:81:60:f7:56:2a:a0:bd:79:2f:
                    ec:bb:07:6e:47:54:80:3d:77:57:e2:9b:50:c2:4a:
                    a6:b9:e2:bf:ed:02:f5:b7:07:23:b5:2d:ef:9b:ec:
                    51:0d:b0:f0:dd:26:a2:39:dc:e0:fb:95:9f:9a:79:
                    55:15:02:e4:41:af:dc:dc:67:66:5e:1d:af:25:cb:
                    20:00:32:42:ed:b3:57:50:47:00:39:5e:9b:02:96:
                    f4:d8:f0:0b:48:5c:99:b9:f0:59:c7:ad:12:e7:be:
                    70:5d:5e:73:a1:ff:a9:40:56:8c:d3:c1:29:b1:df:
                    0a:11:29:c2:ab:45:7b:e2:1a:47:7d:11:44:a1:67:
                    86:14:d5:c0:ea:74:d4:29:c8:48:16:e3:6f:8e:99:
                    6a:83:4c:60:e6:cb:59:99:e8:f3:c0:ad:29:f5:59:
                    8a:54:fd:ee:25:8e:25:fa:ee:d7:6d:37:d5:9f:a8:
                    a4:25:81:50:10:68:34:fd:63:ab:72:ce:f8:8b:28:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:E0:D6:23:05:1C:DF:BC:73:61:37:D3:44:08:14:F8:F3:F8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ce56e133-468c-3b52-9afb-5420157f05c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:35:e7:14:f1:28:5d:a8:59:a7:02:af:1b:42:59:07:52:
         7e:1b:b9:4e:0f:08:71:4e:c2:9a:48:23:c1:e2:fd:25:d8:07:
         91:d3:7b:77:85:66:b8:fc:3a:19:23:ff:ed:db:f4:86:a1:81:
         e2:ca:51:72:2d:93:c0:46:f1:eb:c3:b4:2c:fa:87:ba:eb:da:
         8c:a7:6a:19:01:60:46:96:26:77:b9:92:bc:20:00:15:ff:c6:
         bd:58:6f:ce:02:e6:14:82:2a:ba:fb:d3:4d:d1:fb:9a:c4:f9:
         07:fd:61:7a:f3:9d:ff:75:47:53:95:93:39:72:89:b5:a3:00:
         e9:34:ac:e4:92:c5:07:e4:26:50:35:98:f8:cd:34:a6:80:23:
         65:5f:46:2c:e5:4c:c1:28:9b:2e:0c:cd:34:de:42:53:87:84:
         fe:b6:e8:f2:e1:55:8d:92:56:59:61:79:62:06:bc:c7:61:9a:
         f1:b5:e1:b1:f8:ea:6e:f7:ea:eb:fe:d7:8c:c3:03:7d:33:ef:
         55:20:8b:ec:f6:15:f0:5a:55:c7:28:ff:cd:8a:b8:44:30:77:
         01:62:98:24:44:c0:dc:99:7c:81:5e:06:9d:99:09:7b:99:9b:
         a6:aa:3e:01:38:6f:8c:1c:bf:ba:b9:8b:6b:7f:e8:1a:77:0f:
         df:8d:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:47:48 2026 by rpki-client