Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa
File:                     1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa (raw, json)
Hash identifier:          +DsnO5R6iljRLADw4h5jR00ZbVYatvfaBKKTvbzf1/g=
Subject key identifier:   0F:42:5B:A4:D6:37:E4:4C:34:C3:78:7D:D7:51:3A:4D:B5:17:BF:5C
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584ECD372C9447A76AF5977A9C80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     203
IP address blocks:        192.56.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:2c:94:47:a7:6a:f5:97:7a:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=aebd96c4-2f52-4321-9cf5-c0b68dc2f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:57:58:45:f8:4b:7f:c5:cc:9e:1d:a7:ae:
                    2c:e1:20:83:73:52:45:c7:58:c0:83:6d:25:5f:01:
                    1c:5c:7a:0b:5d:20:d6:27:fc:57:9a:07:83:f3:52:
                    99:a4:4c:22:0f:38:79:be:63:d3:38:29:35:38:b3:
                    ed:e0:ef:80:63:85:c5:a0:63:4a:2c:55:1a:d2:c5:
                    c9:de:33:24:b7:e3:9c:39:fb:34:15:c4:9c:87:67:
                    ca:97:23:b2:e7:3c:be:0b:bf:4c:bb:7d:54:be:1b:
                    37:c1:24:b5:65:8e:e6:d0:8d:a3:03:4e:c4:38:13:
                    da:40:8a:b4:c2:da:5d:fe:04:24:25:8a:16:d1:19:
                    6d:04:22:9a:e0:d0:bb:01:30:90:1e:f2:38:74:95:
                    19:a6:44:f1:6c:d3:4d:d4:a3:c3:46:96:92:19:9c:
                    d9:ed:ac:32:61:e5:b5:98:66:43:cf:75:fd:75:bb:
                    de:9c:af:34:fe:d2:03:90:8a:46:f1:48:98:e8:5e:
                    a9:ee:8d:19:1c:a4:ce:2c:8d:0f:9d:fe:07:94:2c:
                    73:cb:83:03:cc:6d:d7:31:50:10:19:42:7a:95:c9:
                    24:7d:9f:37:33:b3:15:3d:91:00:43:06:2d:d5:22:
                    6f:a0:3a:5e:59:bf:4f:29:a3:67:44:2c:a8:d4:89:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:42:5B:A4:D6:37:E4:4C:34:C3:78:7D:D7:51:3A:4D:B5:17:BF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1329a6fe-9f7c-34b7-aec7-f02a5464d8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.56.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:71:46:65:40:68:95:01:17:04:1b:11:6d:82:8b:89:c0:
         8e:cf:c6:09:4b:18:4a:45:9d:16:59:1f:a4:76:74:44:90:18:
         05:3e:c9:42:ec:a7:84:6e:08:78:6f:97:b9:27:3f:0c:5f:fc:
         b3:12:d7:2a:df:e4:a7:11:3c:61:5c:4b:47:58:af:c7:98:12:
         a7:21:c4:da:be:2a:8d:64:8e:a0:f2:0c:e7:f8:14:95:b3:9e:
         51:3b:23:c4:eb:a5:05:13:3b:c6:95:63:75:03:89:bf:1d:c9:
         a2:6a:e8:8d:e5:a5:d1:ff:ad:6a:89:38:79:dd:9d:c4:6a:14:
         61:9e:46:ce:c4:27:4b:eb:13:19:53:dc:5d:0d:2c:fa:0c:9e:
         82:11:4d:bf:ed:57:5d:2a:90:d5:4c:b8:ee:97:78:cd:59:54:
         5c:1c:98:01:22:16:4e:ff:07:dc:ae:34:a6:02:2e:4b:31:8d:
         14:df:56:41:f0:fc:d3:9d:6d:3d:5c:37:be:75:ce:ee:c3:bd:
         d0:42:ed:6d:c7:a1:ab:a4:7f:36:d7:0f:5d:83:28:a3:ce:d7:
         60:24:cc:30:53:77:49:67:31:e8:57:cd:36:f5:d2:5d:23:53:
         dc:4b:2f:1f:e8:3a:27:0c:49:ab:fe:19:5c:32:65:6b:69:1f:
         a3:cc:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:52:35 2026 by rpki-client