Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/36299741-5221-3281-8e07-e0942d30dd62.roa
File:                     36299741-5221-3281-8e07-e0942d30dd62.roa (raw, json)
Hash identifier:          uN9K6sN2Fnn3MmY/TLoke25wBhG8j6n44z5AxeD4pJw=
Subject key identifier:   51:95:20:6D:95:B4:E4:E1:4A:A1:10:AC:D1:3B:40:D6:38:FE:47:A8
Certificate issuer:       /CN=b1896033-ca2b-44a4-b67f-7160d614cf31
Certificate serial:       010D0C9F4328584F7E7DB169614440331639B01B
Authority key identifier: 58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/36299741-5221-3281-8e07-e0942d30dd62.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     12186
IP address blocks:        192.189.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:b1:69:61:44:40:33:16:39:b0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1896033-ca2b-44a4-b67f-7160d614cf31
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=02f53f52-264d-4a16-a957-525043e50fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:31:14:2e:d2:cc:ee:d9:73:cd:ea:3f:71:
                    1c:3b:7d:e2:03:e7:b1:d4:f5:9a:99:83:b9:3e:91:
                    c4:31:d2:35:57:e6:77:8b:b5:7b:28:42:c6:f6:cf:
                    51:ef:c6:e8:fd:a5:02:fc:33:0d:cf:af:32:d0:9a:
                    57:2e:ab:d6:f8:a0:4c:46:12:30:49:68:85:6f:f7:
                    e4:a7:ef:2d:3a:dc:c5:c6:f8:d5:9b:58:d3:47:f5:
                    b1:09:67:b4:35:9c:01:ab:f9:00:5d:e9:97:63:4c:
                    45:b4:a0:81:23:3e:93:97:13:3d:14:14:c9:b5:c3:
                    cd:44:11:89:df:7e:d1:cd:58:79:ba:bd:6a:01:fb:
                    67:d3:68:16:c6:32:16:9c:17:21:9d:8b:fc:2c:06:
                    08:bf:99:0b:5e:f4:9f:a9:82:5b:1b:0b:e5:2d:a8:
                    25:35:7b:21:31:cb:e3:3b:b3:cf:40:51:4f:73:b2:
                    d4:bf:25:89:c7:b3:c2:5f:2b:38:e4:1f:f4:1e:9a:
                    9b:46:8d:f0:25:de:01:81:60:a2:bc:8f:dc:e0:e2:
                    08:6d:b3:01:86:35:ba:bc:0a:50:d7:a4:39:31:07:
                    e0:c3:46:77:4a:51:46:42:26:c0:f7:e6:cf:cd:85:
                    d8:35:6d:a6:2b:b5:be:76:47:b0:7f:3a:d3:34:c3:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:20:6D:95:B4:E4:E1:4A:A1:10:AC:D1:3B:40:D6:38:FE:47:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/36299741-5221-3281-8e07-e0942d30dd62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31/b1896033-ca2b-44a4-b67f-7160d614cf31.crl

            X509v3 Authority Key Identifier:
                keyid:58:AF:A3:F2:C0:80:A9:DA:AA:96:D3:A6:D5:D1:C6:BA:69:F0:89:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b1896033-ca2b-44a4-b67f-7160d614cf31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:19:f0:ac:7c:41:71:35:16:0d:bf:24:82:b5:92:4c:04:06:
         8a:b6:37:05:d0:3a:19:05:f3:16:72:68:c7:cc:b7:bf:0f:81:
         bc:12:5f:36:c8:94:c8:e4:f1:99:47:eb:a6:be:54:26:92:02:
         80:27:73:54:1c:72:e4:93:3d:c9:47:7a:39:e5:20:b3:73:7d:
         28:54:b5:38:46:28:54:5b:dd:44:8e:b5:59:5c:5f:67:07:f5:
         ac:2f:ca:89:15:69:8d:2c:32:11:8b:80:bc:f2:69:a8:23:a2:
         70:f8:09:88:e2:bf:4c:b3:b8:ee:97:f9:e5:de:75:77:0a:48:
         2e:93:76:36:fa:04:08:38:fd:6f:46:84:3b:49:dd:14:05:84:
         f2:a4:55:d2:40:36:dc:a3:2b:3a:69:97:df:d8:4d:ef:b0:cb:
         8a:d6:24:5f:fa:e4:fe:8d:76:e1:8a:76:3c:2a:03:94:c0:6e:
         f1:32:db:76:b5:49:0e:12:a7:24:a2:c3:57:c5:5d:46:08:de:
         71:6f:7c:bd:da:81:f8:7f:57:ce:13:1e:ab:7d:c1:fd:8f:eb:
         2d:80:04:1b:09:1c:89:95:69:09:ff:9c:c1:4e:71:3f:f4:0f:
         bb:ac:33:67:35:c0:18:99:d5:74:37:04:b4:a9:b9:88:6a:47:
         6a:f9:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:09:55 2026 by rpki-client