Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f9575fd3-3bb6-3fb8-99c4-f557b4543343.roa
File:                     f9575fd3-3bb6-3fb8-99c4-f557b4543343.roa (raw, json)
Hash identifier:          BntDwLXJpokRs9RFkYrBXOLbUP/OqF9lzK992vv9KLI=
Subject key identifier:   CB:44:FD:33:37:B4:1B:9E:44:89:A4:47:10:3F:BE:75:BE:B1:84:89
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE42324921022CAD654B1A580
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f9575fd3-3bb6-3fb8-99c4-f557b4543343.roa
Signing time:             Wed 19 Aug 2026 18:03:37 +0000
ROA not before:           Wed 19 Aug 2026 18:03:37 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        192.80.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:24:92:10:22:ca:d6:54:b1:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:37 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=f97db5fd-b0d8-4848-b0b9-7a7c46e87879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:40:29:36:30:24:ba:a5:31:e7:0c:e1:4f:
                    ca:43:17:9c:b8:48:b0:42:fc:29:2a:ef:b8:36:1b:
                    e9:1b:1a:51:29:35:c4:ea:6c:c8:6a:d0:51:59:89:
                    5f:50:b7:e1:a5:d5:64:bd:dc:6c:fc:5a:26:d4:ce:
                    86:fe:18:d3:0f:d5:3f:8d:54:d8:53:51:a5:4d:31:
                    58:0b:57:ca:11:62:5c:3a:9f:0b:f1:fb:43:e3:cb:
                    1b:62:4d:fc:1c:90:50:4d:c8:86:95:5b:2a:03:65:
                    93:b2:70:1d:60:2d:a0:9c:29:fe:a1:91:a9:72:55:
                    1e:20:76:46:e4:4f:74:40:a2:9d:68:49:20:70:ec:
                    d8:4e:d4:23:88:46:4c:4f:fe:6b:62:78:56:7c:08:
                    e3:7e:67:1b:8e:9a:47:c8:8f:ec:a3:bb:da:bf:b7:
                    11:77:ae:39:21:e7:af:91:c0:c5:70:db:0e:35:73:
                    5f:b2:2d:7b:29:0d:ca:44:a7:ec:28:b7:cb:bd:17:
                    87:da:44:b3:6f:32:d5:c0:3b:15:54:12:5f:6e:19:
                    0c:6d:7d:d6:31:3d:d4:7f:5c:c6:a8:2f:da:ea:1f:
                    48:bf:e2:5d:86:0d:82:5d:b8:75:a6:28:19:41:c9:
                    ff:a8:2d:34:77:a4:0f:2e:e4:dc:02:59:69:aa:7f:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:FD:33:37:B4:1B:9E:44:89:A4:47:10:3F:BE:75:BE:B1:84:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f9575fd3-3bb6-3fb8-99c4-f557b4543343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:26:a7:cb:25:45:3a:be:4b:5e:79:22:cb:a9:df:a6:41:
         0d:5d:e3:9d:e5:75:6a:ed:8f:5b:16:1e:20:21:cc:8c:31:c0:
         d8:d3:e6:a9:55:9d:4f:a0:6f:88:de:46:23:72:86:27:38:62:
         1b:db:fc:4f:96:83:38:07:ba:02:7b:c6:d1:9f:29:4b:2a:5d:
         80:ee:97:bc:52:5a:dd:68:08:30:1b:5d:a1:47:e0:b9:31:c2:
         ac:39:10:37:1f:07:e3:e5:84:bf:0f:1a:da:78:a3:84:6b:27:
         95:3a:41:7c:b0:80:53:09:b6:f8:70:2d:a3:e3:ad:71:d7:3f:
         c6:62:9e:6f:f5:b0:c3:cd:64:6a:d4:fd:66:52:9a:90:fa:dd:
         ed:2c:8d:bc:32:60:fa:b4:a0:d6:a4:56:c6:65:12:79:b5:87:
         48:e8:ff:43:94:03:c4:9c:60:a5:54:30:8e:55:cf:f9:75:25:
         a5:62:fa:c8:00:ec:50:6c:80:1d:77:b4:22:5b:d1:70:90:a2:
         a1:9d:06:fd:e5:0e:28:64:42:25:df:9f:df:84:69:de:c9:83:
         d7:a1:ff:b6:b1:c3:94:4a:e8:8e:88:f7:e6:b6:55:12:92:52:
         b3:7d:cc:4f:fe:82:7e:21:6c:bd:aa:67:fa:8f:dc:a1:f7:cb:
         d7:68:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:26:56 2026 by rpki-client