Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/fb795089-19bf-3527-ab9a-76fc72c53cad.roa
File:                     fb795089-19bf-3527-ab9a-76fc72c53cad.roa (raw, json)
Hash identifier:          Z4WUrvmtDs42HVNsXkS3mziP9GULaVfv4HxhDlCJcTs=
Subject key identifier:   21:1D:63:7D:F2:A8:D2:61:5C:DA:C6:EE:BD:1E:6B:8D:40:E0:DB:D8
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F4328584EA79790342F33001522A0BF00
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/fb795089-19bf-3527-ab9a-76fc72c53cad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18554
IP address blocks:        141.188.96.0/21 maxlen: 24
                          192.25.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:90:34:2f:33:00:15:22:a0:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fe8d511c-1250-4dec-a9ed-9edfe57b37e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5d:87:a3:01:77:8a:74:b5:bb:7b:12:23:88:
                    09:5f:48:2d:f4:ca:81:5d:bd:df:5b:00:4f:3d:7f:
                    ce:0f:28:29:38:3f:93:7a:5a:f1:27:91:58:86:5f:
                    5c:90:d0:2c:f0:dc:2d:17:37:29:7c:ca:f0:e1:67:
                    5e:14:e5:09:f1:f9:8e:d5:2a:01:c1:2e:f6:b0:6d:
                    33:3c:5e:cc:c3:8b:1c:cf:9a:3b:5b:2a:30:a4:83:
                    69:31:ba:58:c1:5c:05:a8:f5:0f:0d:50:2f:1f:01:
                    c8:fa:6b:36:c6:60:e8:37:0a:5d:53:79:ca:db:5c:
                    88:a8:b5:75:3d:e9:42:91:c8:33:0b:68:24:4f:cd:
                    9b:50:db:88:0a:75:9d:a2:2b:bd:57:4d:dd:ec:aa:
                    5f:0a:c0:29:2d:11:02:bf:45:73:50:c5:92:37:58:
                    96:a3:37:83:0f:40:e0:ff:55:3c:dd:76:a5:1d:6d:
                    b8:9a:52:df:f2:7e:b6:e1:d4:70:d6:14:db:74:e9:
                    87:23:85:f5:a3:79:75:76:af:2d:cf:dd:62:f5:bb:
                    6b:c1:52:a1:94:f5:9e:42:9f:3d:22:3d:06:ad:10:
                    da:29:10:50:d6:d3:2e:2d:a7:06:fb:0e:a9:e2:2e:
                    ed:9d:54:86:1e:e6:02:cf:6f:7d:d4:d3:97:e7:3e:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:63:7D:F2:A8:D2:61:5C:DA:C6:EE:BD:1E:6B:8D:40:E0:DB:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/fb795089-19bf-3527-ab9a-76fc72c53cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.188.96.0/21
                  192.25.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a5:e0:6c:e9:06:75:5b:2e:4e:5b:fa:a6:d8:b0:32:7e:fe:
         9f:b3:e2:9d:65:83:f6:a1:07:be:eb:59:6c:8a:19:e5:6d:4f:
         6e:36:68:93:e2:1f:95:08:a7:e8:1f:af:33:0b:d9:a7:20:a9:
         b7:d3:f9:d5:a5:bd:40:86:53:4d:cd:97:8d:55:62:22:c8:23:
         d0:13:f9:ff:2c:97:66:38:b5:ee:84:38:6a:bf:5d:d0:10:fa:
         e8:67:b8:ca:9b:84:e0:39:03:f9:4a:ce:9d:48:14:95:66:09:
         73:fc:40:1f:ae:2b:10:af:cf:d1:62:c7:04:a8:88:e9:2f:32:
         48:54:40:f4:49:bc:5a:42:a6:fc:ff:66:3a:33:c8:8a:60:d5:
         9b:d2:3f:7b:6a:73:ac:3a:d2:5c:a2:47:39:2b:ce:82:e9:49:
         f9:34:6f:56:49:28:69:20:47:f7:2d:41:b7:95:6f:3b:f7:c7:
         49:d0:33:1d:75:dc:fb:27:2e:c8:98:1e:3a:4f:a2:52:00:7e:
         bd:78:cc:44:ca:db:18:5e:b4:bc:a0:33:69:4a:1f:7f:3e:85:
         fb:f7:61:25:74:25:c3:0c:1b:3e:ed:95:a7:75:26:ad:fc:db:
         3b:94:7e:aa:23:d3:85:5c:9f:89:89:de:ca:b1:5d:4c:00:9e:
         12:35:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:14:10 2026 by rpki-client