Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d65606df-b71a-32a2-8dd0-028629b4b24f.roa
File:                     d65606df-b71a-32a2-8dd0-028629b4b24f.roa (raw, json)
Hash identifier:          GgYnmpimdeEsfeTjCtXA3JblHtMw0xjAV+1q1f8Dh0s=
Subject key identifier:   64:25:BE:09:72:F0:3E:FF:F7:AB:1F:98:B1:F4:69:4D:91:D7:CD:22
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F857860A38435B7BEB1807700
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d65606df-b71a-32a2-8dd0-028629b4b24f.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        192.151.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:60:a3:84:35:b7:be:b1:80:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=54c894a0-b30a-4ff1-bff4-de84e57482e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:c4:bf:1f:37:09:22:51:61:72:1c:26:54:
                    45:a3:bf:ed:43:f2:7a:12:d5:83:47:f2:1e:51:69:
                    6e:0a:c2:c4:d9:a4:50:61:1c:00:94:90:b9:24:4e:
                    f9:03:6a:64:60:4f:72:f5:3a:1e:71:3a:b5:40:25:
                    e4:64:9a:2e:e8:1b:90:85:8c:2c:a7:bb:e6:b1:66:
                    93:90:e3:1b:5b:9d:66:4b:8e:3e:62:37:ab:10:65:
                    32:3b:7b:5f:c1:39:85:ec:b1:60:30:16:b5:67:e9:
                    04:e2:ae:f0:54:67:e6:40:d3:06:c4:37:b3:f1:95:
                    92:02:f2:da:b6:7e:aa:e8:7d:78:cb:e4:4d:9e:00:
                    4c:af:bd:9a:12:3f:4a:e3:58:d8:98:c0:63:fa:40:
                    a1:95:c7:93:53:b0:24:0e:35:95:93:72:0c:a2:8d:
                    46:a9:9a:14:2c:36:8a:63:af:1c:84:60:7b:d1:2c:
                    d1:41:1e:b2:c2:58:fc:a3:7f:f7:b3:55:a3:8b:b0:
                    12:56:c4:57:f7:63:5f:7c:49:cb:52:82:0f:e8:07:
                    1b:48:06:b0:51:48:e8:de:3f:64:49:e2:b3:fd:38:
                    87:69:5a:7d:50:a2:df:fc:be:55:f9:97:55:1a:f0:
                    23:6e:d5:38:7d:de:90:51:69:c6:9d:60:23:f4:a0:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:BE:09:72:F0:3E:FF:F7:AB:1F:98:B1:F4:69:4D:91:D7:CD:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/d65606df-b71a-32a2-8dd0-028629b4b24f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.151.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:07:d9:38:96:b5:b2:e9:33:c0:af:be:94:38:23:7c:f8:
         24:cc:62:4e:ca:ef:2b:e0:7e:d7:e5:58:a3:7b:6e:2c:cd:87:
         6b:74:a4:98:29:d9:89:01:2e:c4:31:5c:41:75:52:4b:cd:ea:
         2c:da:bf:b4:68:b6:3f:e2:11:17:8b:c3:be:66:c0:19:ee:e1:
         25:3f:84:e9:f3:a4:db:6e:0d:ac:35:09:5c:c9:a7:b9:1d:37:
         10:00:4d:da:ce:3d:ed:6c:c7:fe:b7:6c:04:94:e5:43:bb:a9:
         f0:b7:51:19:b0:64:14:d4:7e:5a:ae:6a:f8:40:04:f5:f3:30:
         af:63:3e:3a:57:dc:19:f4:03:d9:07:05:27:79:91:ea:35:ae:
         a7:9f:c3:f3:18:ea:29:fb:74:aa:79:52:cd:ee:cd:ca:5e:ed:
         6e:53:16:63:82:cd:ff:e8:6b:ba:82:a2:42:36:80:2a:03:34:
         15:65:1f:60:9c:9f:db:7c:98:fc:ea:f3:a1:c4:6a:1f:31:ab:
         02:fe:ba:ee:22:73:9a:83:cf:49:2b:9e:58:f0:96:4c:30:17:
         3b:d6:64:4c:4b:51:ee:36:22:da:c9:8c:dd:22:f5:09:ed:d2:
         59:e1:b6:01:31:d4:45:c4:a7:15:2c:f3:c9:65:57:de:e9:d0:
         4b:f5:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:58:53 2026 by rpki-client