Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/1ea82c41-df57-34f9-b22f-123106d885e9.roa
File:                     1ea82c41-df57-34f9-b22f-123106d885e9.roa (raw, json)
Hash identifier:          I+1wm7wRSJO27h1LDyWqrUBpDo6UneUELUqZNvfbXnM=
Subject key identifier:   CE:E6:61:E2:31:22:B0:47:BD:09:E9:1D:C2:0A:32:F7:55:88:A2:92
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584F655D7D04D8F89EABED6A3000
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/1ea82c41-df57-34f9-b22f-123106d885e9.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     22418
IP address blocks:        192.157.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:7d:04:d8:f8:9e:ab:ed:6a:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=79a9bcba-73b2-41ca-acdd-98e36b62ff9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:d6:8b:bd:c4:be:95:6c:fb:eb:6f:33:58:
                    b7:85:2d:a4:f4:11:38:29:53:fb:8a:ac:80:77:72:
                    55:f8:6d:17:d2:3e:10:20:56:64:1f:af:6a:af:11:
                    78:ba:8f:42:77:00:82:68:62:55:a4:08:a0:a1:7c:
                    d2:92:2a:29:41:55:c5:0b:d5:46:98:ff:1a:6d:d0:
                    b3:cc:d1:6e:a0:1a:54:18:2a:4c:48:6f:62:5a:0c:
                    6d:ad:32:91:69:f6:be:bd:90:5c:90:0c:10:d3:78:
                    05:a4:78:b9:09:e4:ee:4d:f0:70:b0:e8:b8:43:cd:
                    4e:a5:fc:f8:11:90:75:5c:0e:02:54:fd:67:6b:3f:
                    12:2f:c9:73:aa:a5:0e:03:ff:d2:35:40:8d:bf:b5:
                    f8:5a:07:d4:d6:d5:89:8b:f3:9d:af:64:7d:45:40:
                    af:b2:33:ab:79:1c:ce:78:51:80:b9:f8:48:59:8d:
                    d4:80:2a:66:83:d0:1d:95:df:a2:a7:29:a6:a4:08:
                    5d:e0:9f:91:38:c0:94:e6:e1:d5:ae:88:16:f8:66:
                    00:8e:22:7c:de:9f:a7:99:3d:7e:02:f8:e5:9f:32:
                    8d:bf:1d:f8:db:b6:e2:2e:07:ad:d1:f5:9d:c1:6a:
                    95:dc:b9:ca:f5:d2:f3:a0:aa:f8:15:fb:8e:21:15:
                    4e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E6:61:E2:31:22:B0:47:BD:09:E9:1D:C2:0A:32:F7:55:88:A2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/1ea82c41-df57-34f9-b22f-123106d885e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:52:b5:61:d3:58:b1:8b:1c:a9:af:24:c2:1e:84:ba:ac:5f:
         03:9e:79:d8:6d:09:6b:58:83:9b:d8:65:8e:1c:7e:b4:65:23:
         8d:cb:c3:3f:92:11:b9:b3:87:3d:74:e0:ce:a0:9f:4b:2c:e6:
         10:0a:df:ec:d2:9e:5a:b3:39:81:6a:fc:af:4d:2e:04:06:90:
         32:a6:5e:7a:ed:e0:bd:df:30:2c:43:89:45:9e:ff:a3:2e:90:
         6c:70:6f:06:be:ac:ef:02:aa:49:ad:a0:43:ea:94:68:e1:3f:
         81:2b:d9:57:a0:b6:96:1b:66:a5:7e:33:da:ef:0e:a2:9a:aa:
         43:96:80:2c:98:cb:f2:36:3b:d5:7d:42:6e:5a:95:69:4b:57:
         a9:1d:07:1c:f6:5f:04:d4:fe:ea:10:f7:39:85:f7:15:58:ac:
         0d:37:fe:24:a4:a4:1e:9a:c0:2a:df:08:93:65:76:0c:fe:a2:
         bf:f4:b4:d1:0a:39:02:bf:7f:8b:13:a0:fa:13:42:1f:f9:a0:
         a4:34:58:f3:30:5a:5b:bf:4c:48:0b:2f:fd:9f:52:cc:75:a1:
         dc:88:fe:58:e9:cb:c2:04:2c:42:31:2f:53:1f:2f:c0:26:ad:
         a8:74:e7:7b:d6:0f:ef:77:cc:1b:b9:57:95:f1:0d:26:49:72:
         28:da:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 23:24:01 2026 by rpki-client