Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa
File:                     0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa (raw, json)
Hash identifier:          94adQ/zd+5wdSxolzuLsmgL1XWPWNgvJFpRrGQYnrEE=
Subject key identifier:   62:61:AF:33:A7:66:0F:29:E4:5F:C4:FA:63:9C:AB:77:BA:DE:B1:D6
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F4328584EF181FCD83CAF37F4E3001800
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     198949
IP address blocks:        192.31.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:81:fc:d8:3c:af:37:f4:e3:00:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=b032bab7-a1c7-4696-b98f-c8091dbfb8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:08:43:09:3d:43:e5:8a:f3:3d:db:90:2b:
                    cb:1a:38:91:c0:92:7f:76:2a:ce:26:2b:17:b1:19:
                    07:12:c2:6f:17:4b:28:6a:63:0e:10:ba:ba:48:1d:
                    a6:09:6e:55:e8:61:11:ee:98:b1:be:e4:b7:99:8e:
                    e7:42:f9:09:8b:e9:76:70:dc:08:7e:51:f2:b0:55:
                    7e:57:91:c4:bf:5e:ed:55:16:8b:3c:8f:40:95:ad:
                    89:46:59:f9:ac:8d:8d:9b:3f:af:63:8d:d5:02:bd:
                    7c:8b:5d:a9:8a:ff:e9:06:31:ae:2a:52:b8:79:0b:
                    1d:e2:4c:1f:e5:87:8c:a4:02:42:36:32:bc:90:ea:
                    6e:c4:d8:d9:7f:d4:e1:fa:c2:de:2e:27:27:02:48:
                    71:93:64:49:f9:eb:73:30:b0:fe:38:06:38:fb:6c:
                    b5:f4:a0:55:c3:ef:69:8c:84:6b:64:dd:af:1f:30:
                    1e:a0:a2:9a:8a:6b:96:c9:44:0c:8f:68:72:79:f7:
                    a4:e1:3f:ba:53:07:46:24:67:5a:af:a7:26:2a:74:
                    90:92:9b:b4:87:73:bc:d6:4c:21:03:6a:3b:60:77:
                    b6:d4:b0:ac:6f:b7:30:79:df:3c:84:60:ae:58:e2:
                    3c:de:06:ef:4a:03:b9:08:17:f0:43:d0:d0:8a:5c:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:61:AF:33:A7:66:0F:29:E4:5F:C4:FA:63:9C:AB:77:BA:DE:B1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:04:97:88:4f:a0:bc:fc:65:5a:7e:2b:1a:09:42:77:92:
         89:df:bc:7a:1a:1a:d8:c5:c8:5f:92:5e:6c:65:1d:e9:a8:1d:
         f9:bb:21:95:71:bc:e0:a7:f0:3f:77:91:20:7e:13:03:2d:bd:
         13:f8:4f:9f:d1:c4:82:40:59:b6:0f:68:28:b0:5a:d3:3d:6f:
         c7:e3:d3:10:b7:15:47:e7:4e:fe:4a:c5:50:79:51:78:68:b3:
         94:c9:78:99:ea:1f:4f:4c:f1:53:67:41:b0:47:47:34:15:f2:
         48:d7:8a:41:e6:9f:e6:4f:ab:6c:2c:0f:08:b2:a8:f6:95:34:
         53:fc:7c:8c:d4:f7:f5:b3:8f:a2:97:bc:43:97:66:4f:c4:7a:
         35:78:df:4e:3e:ca:15:d9:2b:26:5f:c2:a8:2b:97:9d:b0:67:
         54:21:82:7f:7b:a0:20:ef:5b:af:64:ca:51:b4:79:aa:92:91:
         b9:f5:69:cd:73:73:f3:cc:ce:95:29:85:2b:5d:62:bf:86:6e:
         de:05:a9:9f:03:a3:80:39:2c:89:5d:bc:74:f7:ac:3b:f9:b6:
         29:87:85:92:54:9a:66:08:5f:1f:d9:4d:0d:14:2e:80:bd:33:
         9a:fd:2d:d8:10:5f:d3:4a:22:04:4d:c7:d4:cd:2b:f3:e2:e6:
         9c:ac:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:04 2026 by rpki-client