Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898/19528fa2-6c81-3827-8620-f24c7dc9f1ea.roa
File:                     19528fa2-6c81-3827-8620-f24c7dc9f1ea.roa (raw, json)
Hash identifier:          SiKC1xYY7rYh7OxRXMtTFFFqShyIQKdyrk8VWYEQxP4=
Subject key identifier:   D1:02:74:66:6C:83:6A:8A:3C:49:DD:5A:1C:CF:21:4C:1D:40:97:EF
Certificate issuer:       /CN=3e57c6ce-b804-44f8-9071-aa8089671898
Certificate serial:       010D0C9F4328584F4AFB2C2285C1BF593347C080
Authority key identifier: 86:21:16:F7:4F:36:AE:A6:FE:56:B6:0D:04:4A:34:94:E7:7B:2E:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898/19528fa2-6c81-3827-8620-f24c7dc9f1ea.roa
Signing time:             Fri 25 Sep 2026 14:11:21 +0000
ROA not before:           Fri 25 Sep 2026 14:11:21 +0000
ROA not after:            Thu 24 Dec 2026 15:11:21 +0000
asID:                     31951
IP address blocks:        192.243.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898/3e57c6ce-b804-44f8-9071-aa8089671898.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898/3e57c6ce-b804-44f8-9071-aa8089671898.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:fb:2c:22:85:c1:bf:59:33:47:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e57c6ce-b804-44f8-9071-aa8089671898
        Validity
            Not Before: Sep 25 14:11:21 2026 GMT
            Not After : Dec 24 15:11:21 2026 GMT
        Subject: CN=da3fd32f-353a-4f96-a2b9-f301abe45c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:65:18:f3:ed:fe:4d:47:aa:8b:f2:df:64:
                    af:c5:6b:83:2e:f9:c8:64:12:d5:59:7c:cc:ad:2b:
                    9e:4b:cd:e7:ac:50:b0:2f:0a:38:18:a4:a0:1c:0f:
                    0c:ea:cf:50:98:fd:c4:fa:cc:5a:0e:d8:8e:c9:58:
                    46:8c:67:d4:fb:a9:3c:4a:80:a9:ef:94:9e:03:32:
                    7a:72:b3:4c:92:69:73:59:74:1b:81:01:11:7d:02:
                    0c:48:95:c5:f3:96:14:f3:b3:6b:7d:15:f8:66:da:
                    19:38:77:44:26:b2:ca:e5:19:66:ee:16:78:75:d3:
                    46:17:69:70:47:52:06:b7:d2:2d:f7:8d:ba:53:5b:
                    f7:b0:25:82:2c:9d:a2:b4:8c:cb:ac:47:98:fa:39:
                    77:7d:6a:0e:4a:4a:c1:64:9e:97:7f:56:80:64:0f:
                    d8:fc:3f:42:87:20:87:82:73:4d:4a:0c:94:c9:6e:
                    f6:97:43:fd:e3:bd:fd:09:fb:75:2d:2c:86:fe:f6:
                    6d:cf:9d:3e:37:97:18:08:30:dd:32:80:a7:c4:03:
                    f3:79:22:af:c7:20:6d:a8:5d:38:21:b3:ad:04:a4:
                    9b:42:be:29:20:4f:7d:73:36:28:90:99:ed:59:16:
                    19:67:2d:1e:5a:ff:d3:2c:7f:54:cf:d0:5b:6c:a8:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:74:66:6C:83:6A:8A:3C:49:DD:5A:1C:CF:21:4C:1D:40:97:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898/19528fa2-6c81-3827-8620-f24c7dc9f1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898/3e57c6ce-b804-44f8-9071-aa8089671898.crl

            X509v3 Authority Key Identifier:
                keyid:86:21:16:F7:4F:36:AE:A6:FE:56:B6:0D:04:4A:34:94:E7:7B:2E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3e57c6ce-b804-44f8-9071-aa8089671898.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:cc:1f:d8:c3:ed:60:77:30:57:2a:ed:26:34:cb:63:50:
         3e:b6:40:fa:03:93:85:4f:f0:65:17:ce:f6:5d:92:8c:10:f3:
         38:ac:a5:fa:83:cb:1e:da:fa:5e:98:c0:27:56:ca:24:4e:d8:
         2c:b2:ae:3f:e9:8e:4c:2c:77:4f:53:8f:3a:20:61:ab:82:af:
         53:59:2c:93:50:8d:92:20:f5:26:05:89:78:c4:38:70:29:82:
         f5:7c:c8:94:96:bb:48:52:f5:a5:e7:13:93:b7:02:c0:e3:57:
         c0:95:e7:66:9e:b8:14:11:68:08:f4:db:a7:e2:5c:1b:3f:b8:
         0d:7e:49:47:51:cf:0c:b9:2b:51:04:77:66:2b:c8:43:61:18:
         c2:d3:30:33:2c:b2:d8:17:53:36:fe:a9:0d:67:22:0e:3c:6b:
         da:e8:bd:59:7c:46:53:2e:8c:29:fe:53:a0:98:b3:9b:a7:b4:
         e4:d1:55:39:b2:ca:e3:84:f4:a8:f5:e7:6f:e7:f7:c9:68:03:
         93:24:8b:3c:93:f3:1e:fb:bd:79:f2:f3:3c:c7:f9:59:36:a2:
         ca:ea:e9:95:cb:38:d8:00:98:3b:27:a2:0c:c7:a0:bd:14:f2:
         ac:54:6b:49:ca:59:73:b1:17:11:6b:2f:7b:b7:69:59:79:b4:
         91:62:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:32:52 2026 by rpki-client