Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/80769b1d-a9b7-3ed6-aa9c-1020d444e0ca.roa
File:                     80769b1d-a9b7-3ed6-aa9c-1020d444e0ca.roa (raw, json)
Hash identifier:          haj+qp3XUw7iSDETx6Di0kpW5+A0O6TtdG0P2XCZT8I=
Subject key identifier:   00:4F:CA:90:D1:69:C7:4C:DB:A2:48:5C:6F:BF:B4:9E:AA:0C:FD:01
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584F6F22C752E2A4A9F1E1E04660
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/80769b1d-a9b7-3ed6-aa9c-1020d444e0ca.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     36007
IP address blocks:        192.175.22.0/24 maxlen: 24
                          192.175.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:c7:52:e2:a4:a9:f1:e1:e0:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=308f0447-4d32-4e60-a67f-e0efe874bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:86:86:f4:a8:8c:14:f2:ed:d7:70:df:ec:
                    93:5c:38:1a:8a:27:df:9b:f0:b4:3c:32:6d:e0:64:
                    42:91:c1:08:3e:98:02:d1:24:b8:20:08:ba:82:f8:
                    36:de:6a:aa:ea:7c:e0:01:1a:91:12:e6:5d:fc:01:
                    af:0c:cf:44:eb:ec:e7:b1:c3:01:04:f1:66:ec:6e:
                    74:72:be:fe:56:74:ed:56:fb:5e:5d:1d:f5:ca:aa:
                    f5:2b:f7:5f:bd:a0:2e:1a:ed:3a:e1:96:52:fd:9b:
                    31:a0:c2:d3:0e:13:5d:0c:7e:53:42:c3:d8:c1:40:
                    39:15:dc:b2:e6:23:78:d4:fa:5e:03:08:33:06:0c:
                    0d:cf:7f:6d:c1:8c:de:79:03:d9:78:44:79:a9:4d:
                    f8:9a:6f:ee:93:07:d9:4c:d0:2f:16:e1:c0:1c:c6:
                    fd:aa:aa:36:17:35:e9:fd:b3:05:6f:64:97:24:c7:
                    26:cd:b8:16:57:ca:a9:d6:2d:4e:86:12:fc:24:18:
                    b6:db:dd:5b:dc:af:f9:a1:51:27:69:fc:51:db:3b:
                    dd:c9:3f:14:54:37:73:d4:75:96:fa:ac:88:41:9e:
                    ae:ad:fe:07:f4:25:42:6f:1e:d0:30:e5:a3:4f:b8:
                    14:07:ed:1f:65:5b:a4:11:95:81:34:0d:cd:ba:08:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4F:CA:90:D1:69:C7:4C:DB:A2:48:5C:6F:BF:B4:9E:AA:0C:FD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/80769b1d-a9b7-3ed6-aa9c-1020d444e0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.175.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:c1:b1:c6:79:49:65:06:7d:0f:ee:10:d5:b0:c1:be:63:
         6f:13:5e:30:e1:80:07:bd:b1:7b:72:e9:68:35:59:bc:d9:e3:
         55:7b:5a:f0:72:66:62:c7:b5:af:d8:a8:26:74:a6:00:65:a3:
         6a:24:fe:f1:e4:b9:5a:c1:17:95:55:b2:05:a2:74:5b:2b:75:
         e2:66:50:5d:08:11:e1:37:1a:4d:d6:f0:66:43:93:11:7f:49:
         1e:c9:d7:43:62:e1:ab:e7:b5:23:0e:d0:d5:d8:a6:74:95:f5:
         64:82:43:ea:7f:56:44:4e:04:3d:e2:f6:5f:5d:9e:86:38:3f:
         dd:4c:8b:ff:85:5f:60:c9:d2:89:6d:66:a1:07:fd:ea:0e:e3:
         1d:63:18:bb:9f:ea:b3:9c:42:1c:69:7b:75:fe:29:84:7b:49:
         84:c5:93:74:fa:19:67:c4:85:07:e6:cb:09:85:0e:11:71:99:
         8b:5e:c6:dc:62:fa:2e:26:de:38:ce:33:52:67:0d:92:a6:3f:
         06:af:d8:22:e1:59:ec:4e:3a:c4:68:c1:50:a3:60:7e:45:91:
         f2:66:15:f4:94:a6:15:e0:36:7e:fa:39:30:9d:ff:bf:c3:6e:
         67:a0:33:1f:6c:3e:a7:05:11:85:2a:09:c9:a9:03:0d:25:f7:
         ec:8c:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:48:26 2026 by rpki-client