Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/197fdeb7-35ac-3fc5-bcb4-181d2e7724a6.roa
File:                     197fdeb7-35ac-3fc5-bcb4-181d2e7724a6.roa (raw, json)
Hash identifier:          VKQ5ueys36HIndX7PGofHckfRG+L3bBqVf5bSVFt/VE=
Subject key identifier:   2D:78:CC:68:D0:7B:69:AA:B3:F6:A7:14:E7:D2:B2:3E:30:29:76:3F
Certificate issuer:       /CN=91c5b4e2-90f4-4fa9-af65-d33ec54223d0
Certificate serial:       010D0C9F4328584F7AA2109B91A8756C53EAA080
Authority key identifier: 75:4D:29:6A:20:21:20:68:62:42:78:36:54:50:6A:90:78:DD:0F:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/197fdeb7-35ac-3fc5-bcb4-181d2e7724a6.roa
Signing time:             Mon 12 Oct 2026 15:50:37 +0000
ROA not before:           Mon 12 Oct 2026 15:50:37 +0000
ROA not after:            Sun 10 Jan 2027 16:50:37 +0000
asID:                     394394
IP address blocks:        192.160.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:a2:10:9b:91:a8:75:6c:53:ea:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c5b4e2-90f4-4fa9-af65-d33ec54223d0
        Validity
            Not Before: Oct 12 15:50:37 2026 GMT
            Not After : Jan 10 16:50:37 2027 GMT
        Subject: CN=1bb6811e-6071-48d8-8416-8b49db9ea2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:b7:20:70:dd:6f:d0:2c:e0:86:ac:1d:f4:
                    a1:f0:c6:3d:14:d9:6b:a2:aa:f0:d0:ca:fc:d8:08:
                    2e:eb:e1:c5:16:84:80:49:0a:5f:a2:4f:1b:9b:e2:
                    fc:83:d2:53:fc:7d:1a:a4:49:5e:21:6c:5f:af:bc:
                    14:33:f4:24:ea:6e:8c:e7:ed:d6:a1:58:70:a0:4d:
                    a0:c5:99:99:1c:ce:3c:ed:23:9b:ca:6f:00:e1:1c:
                    fb:8f:56:0e:7f:fb:dd:a1:29:27:40:1e:29:fa:b0:
                    54:33:34:0d:43:d7:91:84:4f:40:b0:5d:c8:31:e3:
                    44:03:e6:d5:2d:f7:82:6a:8e:b8:06:a5:95:42:88:
                    f7:de:1e:04:94:b9:91:a4:62:3a:9e:ac:80:46:38:
                    d2:bd:cb:dc:0c:67:c8:91:ea:20:77:8c:72:8d:09:
                    26:03:75:0c:33:cc:33:0a:1c:fb:c5:e5:f6:30:91:
                    b3:de:1f:a4:e6:ab:44:1b:50:1d:af:9f:c1:ed:0a:
                    e8:2b:d2:16:31:37:aa:b1:48:77:18:67:d7:2b:e8:
                    d5:5e:87:fc:3c:fc:33:83:f9:b1:20:5e:20:1c:21:
                    3f:2b:89:3c:04:ed:2c:ad:1c:29:85:9e:88:5d:de:
                    97:17:f5:a8:19:85:9b:3c:e7:35:d7:f7:1b:6e:16:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:CC:68:D0:7B:69:AA:B3:F6:A7:14:E7:D2:B2:3E:30:29:76:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/197fdeb7-35ac-3fc5-bcb4-181d2e7724a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.crl

            X509v3 Authority Key Identifier:
                keyid:75:4D:29:6A:20:21:20:68:62:42:78:36:54:50:6A:90:78:DD:0F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/91c5b4e2-90f4-4fa9-af65-d33ec54223d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:99:25:8b:b3:62:04:37:77:67:b2:c5:8a:67:02:06:0a:
         04:d5:d7:d7:6a:97:1f:5a:42:1a:2c:e4:a7:ee:93:64:1c:1e:
         40:cc:bf:7c:7a:78:b5:dd:af:88:2c:a4:8f:d2:ad:2c:9e:03:
         e4:02:46:41:e6:00:2b:2f:6b:27:4d:bb:d7:dd:58:1d:ff:91:
         a1:37:2d:3a:9b:f6:84:29:34:d5:ca:55:cf:14:87:ee:ef:90:
         5a:d8:11:33:a5:9e:67:5c:fe:8c:f3:54:1c:00:91:99:2e:6a:
         53:11:2e:69:1b:47:33:d9:1d:a7:69:e6:9e:bc:3c:7c:03:49:
         53:87:91:9d:96:b7:9c:1b:0a:f1:09:7b:f5:be:64:45:47:ec:
         98:e5:d8:33:78:16:10:6b:a8:29:e4:a3:8f:33:ec:56:70:5e:
         47:94:b4:54:20:8e:f8:e5:a9:f6:83:b7:10:af:56:2e:49:78:
         76:be:54:9f:49:1a:c9:82:0d:d3:91:42:5b:83:2e:87:e2:a9:
         27:b9:9b:fa:97:7a:de:dc:93:1b:a3:9b:c6:30:fc:50:a3:df:
         0d:84:92:da:41:43:52:92:f2:97:a9:35:a7:84:97:4f:54:62:
         06:46:3c:a9:df:ed:2a:d4:60:af:f8:32:da:5b:e8:a7:1c:7d:
         c3:2b:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:33:06 2026 by rpki-client