Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa
File:                     d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa (raw, json)
Hash identifier:          /XUvA9Pgt1KQdx4DPYIeDnjFwBgvCX/4R62B+dBtXyI=
Subject key identifier:   58:F7:FC:8E:01:CD:8B:54:BA:E6:2E:8E:3F:82:9B:AE:78:96:B5:DD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EFE12227CD0BAA4EBDAC8AEE0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        192.204.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:22:7c:d0:ba:a4:eb:da:c8:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=9a7e2d22-00a0-49aa-a7a0-1b0a27933cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:73:85:1f:87:d0:4d:2c:2f:ec:95:87:16:
                    54:64:7e:6c:80:3d:f8:94:ea:c9:8f:6c:97:09:72:
                    f6:0d:2b:10:20:48:6e:07:ac:b8:73:80:34:69:64:
                    74:5a:ba:a9:6f:46:1f:67:5f:82:3c:ec:57:fa:33:
                    52:51:89:f2:fc:4b:78:63:d8:4c:b7:69:3c:91:6b:
                    dc:38:28:aa:dd:ad:5e:ff:6b:69:53:6b:f2:77:aa:
                    8d:8b:84:5c:a3:28:a8:a7:08:7a:69:22:8a:69:cd:
                    5f:c5:c1:be:7c:2b:2f:87:a9:a5:3d:33:39:7b:8b:
                    c2:05:e8:b7:cd:89:85:bd:82:ca:ea:ca:75:61:9d:
                    09:3f:9d:4b:02:85:09:af:ac:2a:12:ba:4a:87:79:
                    96:b7:34:ef:98:6e:bb:20:cd:ae:64:47:a2:50:0d:
                    23:ea:6c:12:86:32:f7:ca:ee:a0:82:3f:5c:48:c3:
                    80:72:32:13:14:12:22:9e:2d:97:97:e8:21:23:8f:
                    57:3d:9c:df:04:06:e5:ef:1a:9d:8d:6c:0c:81:a1:
                    b1:b7:12:ab:2b:16:5d:45:33:5c:e4:66:cf:83:46:
                    35:5a:55:aa:02:8c:f1:8a:02:c0:d2:75:9a:d2:92:
                    dc:d8:e9:38:eb:da:eb:5f:30:02:9e:0f:ad:8d:7e:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F7:FC:8E:01:CD:8B:54:BA:E6:2E:8E:3F:82:9B:AE:78:96:B5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8fb7df9-7b7d-3e40-8ac6-2ef1ed86d742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.204.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:83:0c:f5:3a:78:6b:83:28:77:f6:ae:70:fc:61:26:97:b4:
         56:78:1a:1a:fe:78:21:98:e5:08:f0:73:d5:3d:3e:27:16:69:
         d8:e7:68:63:b9:ea:1a:c9:1f:8f:78:89:b9:fb:15:74:65:f2:
         32:c5:1e:5f:b2:3c:3f:82:c7:03:be:5e:0f:10:76:bc:59:76:
         59:be:fd:41:bd:23:6e:a3:69:46:ec:7d:b1:ed:71:1f:f2:27:
         e2:a1:3a:ca:bc:56:a2:5c:f0:0e:0a:82:1c:4b:52:aa:5f:b3:
         3a:8e:8e:f9:b9:23:5e:2f:0c:a5:8b:30:f5:b4:88:12:3e:4d:
         be:d8:33:f2:04:b0:18:bb:60:85:6e:a9:58:83:36:3c:a7:d1:
         d3:61:12:50:81:f2:ae:60:0d:08:5c:06:a1:0b:ea:78:85:6a:
         36:62:8f:48:04:61:67:bb:83:59:9b:f0:85:30:99:c6:55:15:
         d0:f9:e1:91:a1:00:c9:e2:34:68:e6:2b:5c:91:66:e9:b9:45:
         f9:e7:5f:2a:be:4c:52:a6:69:7e:a7:e7:23:3e:71:8f:8b:44:
         c9:46:64:f5:01:d3:48:de:1b:e3:dc:37:3a:09:7a:96:f0:79:
         49:e3:8a:b1:60:af:fb:b2:55:26:a4:15:0b:00:8e:5c:25:11:
         37:0b:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:49 2026 by rpki-client