Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9793fa48-071f-3312-8d0a-6351bf1772d1.roa
File:                     9793fa48-071f-3312-8d0a-6351bf1772d1.roa (raw, json)
Hash identifier:          vXO3VRdy3o62nIygnWExJOa2e2zcJZn56QYRXMFbI6U=
Subject key identifier:   C5:1A:3E:2F:83:26:3B:61:64:CF:3F:7A:B8:3A:C9:C3:5D:5C:44:B4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE42347BA00938F343C861FB0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9793fa48-071f-3312-8d0a-6351bf1772d1.roa
Signing time:             Wed 19 Aug 2026 18:03:54 +0000
ROA not before:           Wed 19 Aug 2026 18:03:54 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        192.220.255.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:47:ba:00:93:8f:34:3c:86:1f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:54 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=30bb61b5-3062-4e74-89b4-e7ece8eb764f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:f4:e5:b2:44:15:e1:4e:db:ae:a8:95:4e:
                    a4:14:69:1b:96:95:ac:3a:e7:8e:63:0c:24:14:b2:
                    07:16:e9:84:89:d6:49:14:bd:a9:55:69:a1:e0:9f:
                    a9:e2:f4:bc:07:8b:1b:0f:4e:5f:9f:4a:8e:a6:8e:
                    13:eb:3a:ad:0d:96:70:5c:d5:0b:25:f0:62:10:04:
                    3e:70:11:ff:d6:17:49:f2:d0:2d:cc:c7:14:93:79:
                    6c:fc:05:6d:c9:6d:9e:af:5f:b7:9a:d2:04:9f:c3:
                    88:0c:d8:aa:c6:d2:55:08:21:4b:70:46:a0:36:dd:
                    68:6d:63:66:30:e8:fd:2b:4f:02:4a:cb:29:f8:75:
                    75:52:3a:dc:1d:8a:6d:45:07:ae:5a:90:44:9e:c4:
                    a9:fb:19:5d:7b:95:33:d9:c1:6d:22:3d:1a:22:3f:
                    34:56:9e:4d:0a:bc:59:a4:aa:60:ec:47:18:a8:7d:
                    56:83:bb:9d:90:6d:29:51:9c:63:62:bb:ec:87:58:
                    5a:15:dc:8f:17:60:2b:f7:c1:f6:6c:c4:66:6c:36:
                    ea:23:4a:c1:f8:12:c1:00:21:4a:b5:53:d9:77:65:
                    ec:2b:35:63:67:bf:53:97:05:58:b3:f4:3c:8e:5e:
                    ac:f2:d0:e3:bc:99:f3:a4:33:6a:82:c1:88:4f:df:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1A:3E:2F:83:26:3B:61:64:CF:3F:7A:B8:3A:C9:C3:5D:5C:44:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9793fa48-071f-3312-8d0a-6351bf1772d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.220.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:09:ec:08:fc:10:5b:fc:32:12:3f:c7:fe:77:ab:47:5a:05:
         54:d4:44:bc:24:e2:c1:af:cd:26:60:9f:fa:71:bd:af:9c:ad:
         13:b6:90:97:c8:45:f3:19:9f:59:93:4d:ab:4e:3f:af:8d:a9:
         73:de:d6:b1:fd:a0:ce:39:f9:08:7f:7e:7e:2b:10:8a:e6:09:
         01:65:82:91:e8:71:4b:f4:bb:f9:3c:27:b9:a8:0d:e1:06:fb:
         bd:c1:7b:e9:e4:11:ac:bb:9e:96:a2:74:5d:96:f7:4e:5c:b2:
         b7:4d:9a:c7:a6:3d:2f:7c:1d:78:a8:8a:43:85:70:c8:2e:78:
         92:ba:55:ba:fd:13:cb:bf:4f:cb:26:71:a3:c7:23:a4:b6:a4:
         ba:e4:68:00:97:ed:1d:11:bf:38:7a:ca:4d:3b:50:fb:68:64:
         14:81:fb:0e:87:38:ee:bb:ee:0e:f4:bb:f5:f2:56:06:e8:10:
         77:79:66:49:e4:9f:e9:09:1f:6e:8b:b2:10:87:4c:93:b5:2b:
         89:b7:b7:9a:56:b6:a3:8d:98:52:22:ec:93:80:10:5c:cc:0b:
         79:b1:d2:44:a2:34:91:5a:24:63:61:f9:08:57:cd:0e:fd:3b:
         fb:d1:de:22:7a:c4:73:72:be:fa:b5:36:37:ce:10:c7:f9:93:
         f1:99:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:26:17 2026 by rpki-client