Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa
File:                     5cf8fa1d-c180-3677-93af-e4ff155a7924.roa (raw, json)
Hash identifier:          gDWy+ztnXEh2Q+Z7NlxA9mkjn6GtT3X6jXfHPXN1wx0=
Subject key identifier:   0C:4E:58:04:F5:32:A9:49:7D:1C:96:4E:46:6E:3C:F9:DF:A3:6F:CD
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584EF18204CF9A9BCE3531EE0A00
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     5511
IP address blocks:        196.27.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:04:cf:9a:9b:ce:35:31:ee:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=45fc37dc-c87e-464f-8047-581ea44d91d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:a8:a2:87:25:27:e4:49:1e:b8:bd:95:2d:
                    4d:fc:97:2a:6a:35:8b:4b:9a:aa:52:84:12:d7:44:
                    af:58:f5:c6:36:9c:f5:10:96:ec:cd:a0:e3:a1:e4:
                    69:f3:dd:c0:31:49:64:9b:99:79:d1:af:c0:1d:f9:
                    83:ad:fe:46:6b:bf:cd:bb:d7:8e:3e:5e:b7:e8:04:
                    ed:20:a9:09:2e:57:eb:44:d6:d3:ad:e3:82:b9:cb:
                    ca:04:11:d6:40:b1:47:2f:81:a6:62:cf:e0:85:9a:
                    1a:7b:16:3f:e8:af:09:c5:47:c8:e8:e4:23:98:f5:
                    76:1e:70:bc:1a:ac:d3:72:1e:44:72:31:16:fe:0e:
                    eb:04:53:64:47:27:26:f8:28:a2:62:c3:b1:6e:65:
                    02:75:9f:63:3d:92:dc:47:5c:9e:c0:48:22:00:b2:
                    a1:0c:94:1f:e0:f3:85:24:5c:f9:03:86:43:bc:c6:
                    d0:26:5c:3e:cd:c0:6c:9a:2a:17:61:c9:d2:43:d1:
                    5d:8c:b9:7f:b6:b0:3b:e1:3d:c1:5e:03:3d:f4:bd:
                    16:08:6d:b0:83:74:3e:28:ce:d6:11:dc:b2:04:70:
                    c7:b2:ee:33:01:4b:1a:83:d9:a4:f3:f3:e4:4f:a6:
                    58:e3:d1:ec:b5:75:c3:71:cf:6c:06:ad:53:af:78:
                    22:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4E:58:04:F5:32:A9:49:7D:1C:96:4E:46:6E:3C:F9:DF:A3:6F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.27.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:18:a3:0d:97:c5:2f:fd:22:1f:2d:5f:a1:30:f8:cc:cf:d8:
         35:b3:b3:41:fa:09:88:3c:bc:74:7d:d0:41:3b:ab:39:59:4b:
         62:11:83:3a:45:7e:88:af:ce:79:5b:d3:d5:40:a7:7f:8e:96:
         1b:0b:a9:84:c1:5c:cf:12:8c:bc:bb:8b:dc:e9:d0:41:dd:95:
         28:d8:28:a8:51:2a:f6:39:24:12:31:de:b2:ac:dc:c2:c9:e3:
         5b:9b:dc:53:bc:ef:56:78:fa:df:de:66:27:cb:7b:15:f4:fb:
         f3:da:43:18:53:1e:99:ef:fa:25:91:a6:db:1c:57:64:07:13:
         ee:13:f9:cc:9f:30:ae:5f:a9:6c:1f:6d:7f:fd:78:6c:3b:fa:
         49:30:b6:45:e3:44:e4:58:76:c5:9c:28:47:c9:9d:9e:97:28:
         db:46:ea:f4:a2:a7:dc:6d:14:2d:41:74:18:57:85:08:9c:99:
         57:55:cd:96:29:41:1d:03:e6:22:cd:33:db:c9:46:55:64:31:
         58:e3:a9:52:07:ae:80:08:70:90:e8:94:a2:0f:0c:9b:40:24:
         70:fb:f0:f8:30:96:3c:cd:75:d6:00:71:7c:cc:72:14:33:4f:
         f1:28:8d:e8:4f:fa:c3:4b:39:10:ff:0b:3a:d3:6b:e9:8b:ed:
         bf:da:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:15 2026 by rpki-client