Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa
File:                     4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa (raw, json)
Hash identifier:          g51b9cZjMrIaFkaRKadyyzLnUKxqOxmp455UixbPjho=
Subject key identifier:   3A:0C:2F:40:52:6D:48:8E:3B:C3:56:88:70:2F:B0:38:F3:A5:04:51
Certificate issuer:       /CN=e6e72b41-233c-402b-b910-1acb71542338
Certificate serial:       010D0C9F4328584F2ABD107A692A5C2FB2AD0780
Authority key identifier: EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     394049
IP address blocks:        192.250.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:10:7a:69:2a:5c:2f:b2:ad:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e72b41-233c-402b-b910-1acb71542338
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=f20ec7c0-73cf-4c04-be3b-4ff9380731d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:93:27:aa:d7:b2:15:fa:9d:e2:20:e1:5d:
                    55:c0:c0:d0:2d:2b:c6:78:f3:ab:62:5a:6f:3c:f1:
                    c1:61:ec:90:51:b0:35:7c:e9:3d:0e:56:08:3a:b5:
                    df:60:7b:02:a4:0a:50:e5:a4:d7:df:b6:c5:b2:ed:
                    42:7c:2b:e8:c5:6c:ec:02:ea:18:78:a0:c0:9d:35:
                    19:2f:e0:8f:a9:0f:97:26:db:9e:b3:4d:27:0f:2a:
                    70:8f:90:b9:f1:22:b0:8b:5f:07:80:4f:86:f0:df:
                    fb:04:b6:ad:b9:91:19:f3:0a:04:e7:02:d5:77:00:
                    73:b3:e3:48:92:bc:1a:8e:1f:8a:a2:7c:e3:83:eb:
                    70:a6:91:97:90:55:d9:36:87:2f:ab:aa:92:0b:b1:
                    27:2d:4c:c7:10:ed:c4:17:59:92:0a:40:9a:16:e8:
                    57:0d:12:35:0e:4e:00:52:ac:64:16:19:55:f2:6d:
                    12:ca:04:5b:df:20:f6:31:53:65:67:ed:fe:6a:5f:
                    a5:e2:37:4a:3b:fe:fe:7a:4f:99:64:a2:63:36:65:
                    eb:43:1c:e5:6a:85:de:a1:a0:12:c9:5c:e7:5c:1b:
                    91:03:b9:e8:f0:aa:65:0b:50:41:16:38:fa:22:fc:
                    15:9d:78:6b:be:d8:70:da:4b:8b:4f:6b:45:c7:a2:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0C:2F:40:52:6D:48:8E:3B:C3:56:88:70:2F:B0:38:F3:A5:04:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl

            X509v3 Authority Key Identifier:
                keyid:EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:8d:28:6e:c2:19:b4:67:49:a5:61:c4:e8:ec:a4:9b:13:
         72:f8:4f:f7:89:d1:23:3a:49:75:c5:fe:36:90:0b:a8:ba:f0:
         20:5c:1f:db:52:3d:21:6c:0a:12:ce:4e:31:f7:0b:c9:0b:35:
         2d:07:26:77:67:b0:24:a1:73:0e:90:c4:2d:80:1f:91:32:de:
         85:2b:cf:65:00:33:ec:e1:57:18:f0:ef:e3:a9:53:f9:22:54:
         4a:51:b2:1c:57:85:c3:f5:43:7e:f1:1a:11:eb:b4:ed:5c:1f:
         68:01:fe:0b:a6:ad:c9:25:94:4b:4c:4e:bf:2b:f1:a3:ad:fd:
         30:60:3c:cc:27:70:7d:0f:33:91:2d:51:16:b1:cd:f0:c1:95:
         ea:94:82:6a:18:ca:e1:21:41:22:9e:f0:d2:45:31:c0:18:16:
         a8:01:1e:56:46:bc:e3:bb:87:af:a9:b2:03:c2:a6:87:7b:7d:
         0c:c1:d9:c9:bf:fc:13:11:76:df:dc:80:f0:ae:54:91:6f:7c:
         ec:1e:a5:32:04:35:b9:89:55:7d:e3:e7:cf:2e:c0:e7:3c:9e:
         88:22:27:b8:53:ef:ed:69:e6:e5:60:7b:88:87:e3:33:f0:d7:
         bc:f5:a9:90:94:bf:0a:8b:05:69:62:c8:7d:ab:33:fa:c8:c2:
         9a:7d:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:35:37 2026 by rpki-client