Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa
File:                     8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa (raw, json)
Hash identifier:          +6WRu9KxY/6Gq4tVG3ghTZ6eqoMjfNsi/xpjQDZ69pQ=
Subject key identifier:   D2:56:C4:85:EA:5E:71:08:4B:E5:05:39:1F:5B:33:F2:88:FE:D1:6E
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584ED001F80203B35E82B9D2F400
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     202
IP address blocks:        192.46.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f8:02:03:b3:5e:82:b9:d2:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=d21ec3dc-0373-4d25-b869-cd3e6600acf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:4c:10:f4:f8:6e:99:4c:01:18:72:6c:30:
                    fe:ea:42:d3:75:54:07:cd:b5:4c:4c:d4:30:ec:29:
                    53:09:c7:d3:83:4d:06:9e:59:c4:91:5c:11:66:e2:
                    13:2c:0c:b0:f0:58:28:6c:fe:ee:de:31:56:3c:a0:
                    5b:bd:7f:1b:33:a7:4a:9a:68:29:38:6c:f3:20:34:
                    63:42:13:40:76:9f:e9:e0:5e:c6:45:54:2e:e7:a8:
                    7e:e0:60:70:0c:ea:96:20:a1:be:0e:27:32:b0:8d:
                    e3:ea:fb:3d:bb:61:f8:47:b8:47:50:e7:32:ae:0e:
                    5e:b4:29:47:2d:27:d1:5d:ac:20:d5:79:0d:b0:05:
                    09:49:b3:89:8a:aa:08:a9:4e:07:40:d6:74:f6:57:
                    c2:37:2b:a7:f3:39:a6:9e:ea:3b:f5:ba:4f:1b:67:
                    bd:99:5c:34:14:0f:92:b0:e9:a8:ff:c1:a8:0e:c0:
                    5f:18:35:24:0d:8c:81:f6:f6:1a:8a:39:f3:57:c8:
                    fa:c0:8e:1c:bb:28:9a:15:1d:7e:a3:0f:51:17:00:
                    08:5d:e5:09:91:a6:f1:d8:16:c5:45:14:7d:fe:5d:
                    f0:c0:89:a2:f4:69:d2:76:56:61:8c:65:58:36:e2:
                    6d:30:1f:52:8c:ce:ef:c0:3b:3e:87:ff:28:96:e0:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:56:C4:85:EA:5E:71:08:4B:E5:05:39:1F:5B:33:F2:88:FE:D1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/8a56c36f-5f56-3cd0-abe6-75a286daf6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:6c:c4:43:62:da:c3:69:ad:94:5d:7b:3d:1b:60:3a:0d:
         46:d4:7c:45:63:e9:78:4b:56:a3:47:62:08:36:78:23:ba:73:
         f5:6d:f0:43:dc:d7:99:1a:8e:dc:22:04:fb:ea:04:0a:d4:44:
         a9:6f:b0:35:a9:d6:03:1c:6c:5c:1d:a0:00:a5:bf:da:b2:20:
         0d:34:1a:10:df:0c:b8:a4:9b:3c:96:22:91:8d:dc:c6:3f:bc:
         32:1b:77:d9:2a:29:59:21:e7:ef:fe:7e:d9:a9:62:3c:1d:d1:
         5e:bf:fc:fc:51:26:b0:ff:e5:18:49:28:2a:13:8a:ed:5a:5e:
         f7:82:c4:c5:fc:f2:6f:d5:8e:03:f4:89:35:a8:2b:2d:8f:6b:
         ea:e5:d0:df:cf:e2:90:06:ea:0b:bc:10:69:26:75:64:6c:2c:
         0c:4e:18:85:4e:68:be:65:75:0e:d5:97:74:f8:c6:8a:72:e0:
         b9:29:40:e5:74:03:ec:36:3e:aa:0b:30:83:50:89:57:92:92:
         5f:e9:f0:83:89:c3:19:c5:ef:b0:7b:2f:b2:10:88:f8:46:bc:
         86:e5:d8:ed:40:d5:21:80:32:c9:a1:a0:b1:81:8b:07:d7:88:
         c4:c7:a8:52:c1:fe:2a:73:14:12:71:ec:27:90:de:2b:e9:cf:
         d8:9e:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:43:16 2026 by rpki-client