Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/3a5a7132-eeb2-3158-b341-177f133d3d07.roa
File:                     3a5a7132-eeb2-3158-b341-177f133d3d07.roa (raw, json)
Hash identifier:          Z1awHv/9yc2DkYFyBuumH0QW/RtfPRsDb/wUWrq5xU0=
Subject key identifier:   B8:53:F6:94:1C:24:D8:3A:69:7B:B4:14:6A:C4:52:58:B6:BD:F9:C5
Certificate issuer:       /CN=e3d05016-0787-4390-a993-bd2dc0c670bf
Certificate serial:       010D0C9F4328584F6D7AD23E5FB960FBB411E6C0
Authority key identifier: A6:59:BD:E0:A3:D2:37:A3:EC:89:DD:D3:00:F8:D5:8D:A2:C6:A2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/3a5a7132-eeb2-3158-b341-177f133d3d07.roa
Signing time:             Wed 07 Oct 2026 22:46:02 +0000
ROA not before:           Wed 07 Oct 2026 22:46:02 +0000
ROA not after:            Tue 05 Jan 2027 23:46:02 +0000
asID:                     16509
IP address blocks:        192.225.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/e3d05016-0787-4390-a993-bd2dc0c670bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/e3d05016-0787-4390-a993-bd2dc0c670bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:7a:d2:3e:5f:b9:60:fb:b4:11:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d05016-0787-4390-a993-bd2dc0c670bf
        Validity
            Not Before: Oct  7 22:46:02 2026 GMT
            Not After : Jan  5 23:46:02 2027 GMT
        Subject: CN=65fe6efe-f062-43c4-81bb-39f2296465e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:23:f7:d9:72:83:f0:cc:98:16:88:af:f5:86:
                    c2:b6:a9:f3:54:c7:66:a1:ad:e1:66:48:14:6d:13:
                    dc:0e:28:7f:12:36:4d:9b:47:18:22:1d:18:90:1a:
                    0d:c5:95:53:e6:4f:b6:89:fa:8c:7b:b4:ab:87:f8:
                    4c:0f:53:0f:d7:8c:d6:e5:f6:59:5d:0c:71:a1:8c:
                    59:71:83:b6:eb:be:b3:0b:fa:b0:b3:f7:eb:8b:52:
                    0c:40:71:49:95:7a:35:6c:5d:c3:bb:65:46:86:82:
                    f2:d7:a0:40:6f:42:a7:49:74:3b:67:ba:0d:53:17:
                    cf:60:fb:70:66:f2:1d:a6:06:c8:55:5d:48:c4:5f:
                    ad:9c:f8:62:3c:46:13:5f:5f:af:7e:a9:dd:86:a5:
                    92:01:93:8e:b2:5b:08:f2:37:ff:4e:a1:c9:97:e4:
                    39:19:39:4e:6b:3a:84:b9:e1:b9:3e:38:69:03:40:
                    ff:38:de:f2:f4:fe:dd:18:5f:29:bf:f4:fe:81:fd:
                    81:4c:b8:2a:43:f4:3a:08:93:76:59:92:f1:cd:66:
                    37:d7:bb:e1:5c:f5:24:c9:81:55:6c:7e:7c:7c:3a:
                    d8:1e:d7:d8:1b:07:54:84:81:a8:fc:ac:8d:0a:05:
                    e6:d7:29:71:22:51:21:ce:c8:56:a5:b3:02:f6:8a:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:53:F6:94:1C:24:D8:3A:69:7B:B4:14:6A:C4:52:58:B6:BD:F9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/3a5a7132-eeb2-3158-b341-177f133d3d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf/e3d05016-0787-4390-a993-bd2dc0c670bf.crl

            X509v3 Authority Key Identifier:
                keyid:A6:59:BD:E0:A3:D2:37:A3:EC:89:DD:D3:00:F8:D5:8D:A2:C6:A2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e3d05016-0787-4390-a993-bd2dc0c670bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8f:20:ab:07:2b:0a:4b:e3:88:bb:16:22:53:b0:df:5a:7d:
         ea:1e:26:f4:7e:bc:5d:4e:20:f0:00:29:d7:bb:58:b4:c8:89:
         49:28:9d:fe:95:69:f8:6a:5b:57:44:17:5e:b9:1d:60:8a:f0:
         b0:44:c4:e2:30:e3:85:83:b7:e9:30:e8:69:c5:8a:d1:9b:a4:
         95:42:e5:cf:a7:af:38:5f:67:24:cc:b2:9e:f2:66:0a:b9:cf:
         64:40:6a:06:94:25:85:02:19:5d:28:60:d9:67:fc:8e:ee:fd:
         b1:1a:94:bd:30:51:e1:54:79:95:35:fa:36:8a:80:b4:2c:c5:
         8c:39:33:10:18:12:3f:5b:0f:44:bf:6a:70:26:40:55:42:6c:
         07:60:80:42:2d:6f:eb:df:0e:00:61:4e:43:89:5e:f1:c3:b5:
         56:75:c6:69:a7:6f:ec:9f:9b:76:0d:0d:8d:f5:6d:27:a9:f6:
         44:86:f6:bf:e5:69:15:03:08:e7:30:5b:9a:6c:66:d3:6e:e5:
         e3:49:a0:03:25:e4:69:f6:7e:f1:b9:88:46:09:1e:e9:fc:50:
         1e:bf:c6:7d:6f:d5:bd:c7:90:33:07:2d:eb:a0:1a:79:b7:dc:
         aa:46:5a:08:61:7b:1c:47:c8:9e:d8:3f:01:e9:9f:44:20:39:
         14:d1:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:44:52 2026 by rpki-client