Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
File:                     abc03ea6-f529-3aa9-8649-ff39d4312020.roa (raw, json)
Hash identifier:          6fNXJLM5uY42An6MMiqEehpGg0rgBm3Ddfou1F1nYZA=
Subject key identifier:   80:7B:38:92:1E:B1:E5:46:9D:11:BD:90:60:47:98:DE:33:03:FE:2F
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584EC7A1C7585A3C04156091C0C0
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     395287
IP address blocks:        192.104.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c7:58:5a:3c:04:15:60:91:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=e4a89ce9-615e-4e33-bd60-a168426dfe6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:8c:91:f7:c5:2a:8f:04:77:37:58:0d:39:
                    82:a6:6c:e4:ff:49:a0:ef:19:5e:ea:42:c3:f4:ff:
                    8e:77:fa:de:aa:87:7d:79:2c:be:19:49:d5:20:25:
                    4c:93:73:94:da:24:da:5f:32:f0:9f:25:a9:24:a8:
                    34:f2:9f:ed:7f:e3:1d:4c:18:4a:16:fb:d6:30:71:
                    48:12:fc:43:ab:47:a6:5b:1a:8e:1a:48:55:14:69:
                    59:48:1e:6f:d6:24:65:7b:f2:d7:de:1d:2f:3f:83:
                    bf:f9:c3:b8:00:6c:1d:5b:28:2e:b3:12:58:57:4d:
                    8c:ff:be:ee:13:28:08:f6:7d:dc:47:2d:33:7b:e5:
                    9b:c0:6c:fb:4c:20:2c:0e:35:7b:c6:2a:38:04:1f:
                    f0:c1:47:42:f6:63:aa:08:9c:e1:72:ea:70:62:f9:
                    b7:37:e8:d8:66:6b:ee:b2:76:9f:30:30:e3:49:9d:
                    f0:00:65:5e:1b:89:cf:5f:f0:02:b1:c7:7f:1a:3b:
                    55:09:42:f4:7e:1b:fb:d7:ff:41:2b:7e:56:bc:33:
                    49:3c:de:ef:e7:95:38:7b:2a:c4:4d:86:b1:aa:0e:
                    7c:8b:3a:df:2e:3d:42:de:e3:f5:f3:c6:28:83:d5:
                    82:49:db:a6:57:6d:84:64:f0:15:2d:18:a6:05:09:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7B:38:92:1E:B1:E5:46:9D:11:BD:90:60:47:98:DE:33:03:FE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/abc03ea6-f529-3aa9-8649-ff39d4312020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:68:72:da:2d:d4:39:07:59:c9:6f:8a:8a:3a:15:03:da:d6:
         54:9d:d0:00:83:1c:11:d1:8c:af:7d:b3:7d:d6:22:92:71:78:
         80:6d:b4:74:a3:09:d5:5e:37:89:b9:de:89:c7:70:39:34:74:
         9b:23:7f:53:9a:58:f7:c8:a2:08:02:31:e7:17:ba:bb:de:63:
         55:2a:f5:1f:b5:2b:6c:b0:d4:82:62:3c:d2:90:91:3f:e6:59:
         83:5a:f5:8b:1d:96:f4:b2:55:e5:62:53:5b:34:95:1a:73:41:
         9e:49:87:6b:6a:8f:cf:c8:55:03:79:8b:4f:dc:1f:f8:93:4b:
         1d:ae:0e:24:e4:13:d1:be:3a:e5:2a:10:ba:bb:51:15:d8:b7:
         cf:58:42:ce:2f:d1:59:76:61:ec:f7:47:ef:ac:c7:73:e9:5a:
         f3:ea:7c:89:e6:08:d5:97:13:5d:00:af:36:51:d2:a0:b8:b8:
         ee:d5:6e:82:ce:b6:58:df:e6:d6:b5:9f:0d:23:68:be:8f:9d:
         d3:23:7d:3b:cf:36:94:1a:cf:7a:5e:cd:1f:de:6c:09:55:d6:
         f0:a6:da:d9:16:4e:51:1a:58:b5:00:f6:09:0c:42:fc:43:87:
         3b:e8:66:fa:e2:86:a8:da:73:11:91:08:df:42:83:b9:17:f6:
         c2:24:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:23:27 2026 by rpki-client