Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7f477e13-d64e-39c6-8cb5-c9e6d5c0b7df.roa
File:                     7f477e13-d64e-39c6-8cb5-c9e6d5c0b7df.roa (raw, json)
Hash identifier:          rLbQzWR8IAmLirEBmMx/Mc0SEAwWgPus7KeG9DrjZV8=
Subject key identifier:   61:D0:97:1D:B8:6C:D2:40:B9:FC:4A:09:2A:87:12:0C:9E:E6:47:A9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F549DA829497623ECBA103230
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7f477e13-d64e-39c6-8cb5-c9e6d5c0b7df.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        192.119.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a8:29:49:76:23:ec:ba:10:32:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=92a811ec-8789-433e-81c1-f6112a498f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:43:25:18:7e:b3:97:0d:0f:7c:06:8f:9a:
                    b7:14:c1:12:cb:c9:f7:f5:f4:2e:a4:16:70:a0:a1:
                    d0:b2:aa:05:cc:bb:71:ca:51:1e:8d:b7:8e:7d:41:
                    ae:87:d2:50:1d:b4:c0:2a:d9:a0:e1:67:5a:8c:e5:
                    2b:cb:b7:2d:60:ca:4d:80:e4:ed:db:ba:85:11:99:
                    9e:d4:db:0c:0a:84:53:05:09:5e:f6:38:11:48:95:
                    7e:af:78:85:5a:ed:a7:c1:8d:a4:9d:e0:d9:26:d4:
                    54:e4:d5:7f:ab:47:d9:6d:6e:77:6f:24:6b:95:85:
                    05:4b:58:cf:c3:51:ec:28:a8:3f:2c:9e:91:5b:81:
                    75:6d:e4:49:96:04:8e:51:61:74:e2:0a:c5:23:4f:
                    ee:0f:d3:f6:52:02:9d:4d:98:42:ef:09:59:06:cb:
                    5f:61:35:32:99:1d:d0:da:3b:e0:83:e1:a7:46:a8:
                    f4:24:ca:11:76:03:d5:06:49:29:0e:f2:7a:2c:79:
                    e9:54:b8:19:86:8d:c8:50:2d:04:4d:93:76:f8:71:
                    3b:32:9e:4e:a2:97:1b:1e:b2:77:d8:11:09:fe:88:
                    40:94:ca:77:ba:08:b3:b2:06:0e:64:6b:8c:75:92:
                    0a:54:b3:3a:0b:21:92:b2:c6:cd:86:ab:f2:7b:1a:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:97:1D:B8:6C:D2:40:B9:FC:4A:09:2A:87:12:0C:9E:E6:47:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7f477e13-d64e-39c6-8cb5-c9e6d5c0b7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:14:a5:3c:52:c2:3d:9c:49:c3:f1:57:15:e7:9c:04:67:0d:
         f2:04:a7:56:96:c5:90:b8:4c:08:e5:8f:aa:fd:af:a8:fd:ff:
         64:ff:c9:07:08:9a:73:ff:d9:ca:29:b7:88:fc:64:4d:82:86:
         1d:35:10:7f:9c:b1:ca:ea:32:76:5e:39:49:11:ee:c0:27:1c:
         1e:dc:5a:1a:70:6b:90:fd:aa:89:b8:54:b2:9c:74:d4:a1:da:
         87:5e:ed:3d:65:9f:04:8c:33:85:01:ef:d6:c6:e7:b8:3a:32:
         c5:f4:20:b0:73:41:b0:88:ef:21:f5:08:4e:cb:95:cd:11:56:
         67:48:62:86:b6:22:a7:aa:86:d3:60:59:6a:97:bf:d0:a5:85:
         8b:17:92:a3:e4:99:d6:e4:fa:79:b4:4a:a7:44:3d:ff:b5:25:
         b0:e3:7e:10:f2:1a:e0:ac:70:b8:e5:b4:01:24:47:95:c9:2c:
         b9:5b:7a:fe:5e:cd:2f:23:d0:d3:88:c3:ad:b9:26:dc:a9:ff:
         8e:ab:da:2e:0d:bb:06:f3:c3:35:b5:0a:8b:17:6d:74:7d:16:
         41:5f:07:ed:83:80:33:86:fc:2d:87:d1:58:80:26:f0:ed:59:
         62:d3:00:e7:69:6b:75:02:e2:19:e1:22:f9:6c:3e:6b:da:7f:
         48:0a:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:35:33 2026 by rpki-client