Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/24e8eab5-7b01-3c0c-a35a-0a59ef17268a.roa
File:                     24e8eab5-7b01-3c0c-a35a-0a59ef17268a.roa (raw, json)
Hash identifier:          +ekEUccfR1LK6E4Y/eYTiWdRO1xYM691NE3Jy3UDaZ0=
Subject key identifier:   D0:C7:F2:A3:88:6A:E7:1C:AC:73:AD:EE:D0:E1:77:A6:36:02:D9:89
Certificate issuer:       /CN=f9962fb0-221d-459e-957d-b8a95fae9d35
Certificate serial:       010D0C9F4328584F66E077009558D98E832EFC40
Authority key identifier: A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/24e8eab5-7b01-3c0c-a35a-0a59ef17268a.roa
Signing time:             Mon 05 Oct 2026 14:00:10 +0000
ROA not before:           Mon 05 Oct 2026 14:00:10 +0000
ROA not after:            Sun 03 Jan 2027 15:00:10 +0000
asID:                     402654
IP address blocks:        192.207.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:e0:77:00:95:58:d9:8e:83:2e:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9962fb0-221d-459e-957d-b8a95fae9d35
        Validity
            Not Before: Oct  5 14:00:10 2026 GMT
            Not After : Jan  3 15:00:10 2027 GMT
        Subject: CN=6d6846cc-6e74-4515-abf7-ab427578a88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:55:26:55:6f:e4:61:27:a1:a2:d8:83:17:
                    71:3b:be:4c:11:f3:40:30:65:e0:c4:c4:f0:3c:02:
                    7c:4a:fa:63:58:5e:34:94:a9:df:11:d5:c2:fb:f4:
                    9d:7d:9e:f1:25:44:e5:ef:4c:2f:9a:5d:53:2a:34:
                    16:ce:a1:9b:6e:fa:33:c4:6f:7f:55:9c:5c:2c:d4:
                    0c:c3:34:95:19:ec:c4:34:fa:26:e4:35:c8:70:b4:
                    2f:d9:ba:72:e7:12:80:9a:75:f8:e3:da:67:b1:e4:
                    11:f5:81:0d:fb:75:55:87:c1:00:8e:77:31:c1:e8:
                    85:b7:4d:be:5c:7b:0b:85:ac:78:3d:d2:d3:ce:c9:
                    76:d5:bc:c6:1d:50:5f:be:5c:ed:86:f2:e2:46:19:
                    1c:b3:40:b9:ee:b5:ac:14:db:6d:7c:81:7a:72:c8:
                    a1:10:55:5e:ad:69:4a:d5:f1:51:32:d5:70:6d:8c:
                    fd:48:7f:dc:e9:8a:35:0d:42:5f:de:b6:74:70:ca:
                    59:9f:2f:62:40:68:96:0a:f1:31:85:ff:54:80:16:
                    5a:0b:c5:65:d4:91:d1:4d:87:61:0b:4e:de:09:96:
                    d5:33:fe:88:bb:3f:51:f4:0d:06:1e:d5:a1:8e:bc:
                    72:7e:a2:43:dd:ca:52:13:1f:82:da:3d:ba:18:62:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:F2:A3:88:6A:E7:1C:AC:73:AD:EE:D0:E1:77:A6:36:02:D9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/24e8eab5-7b01-3c0c-a35a-0a59ef17268a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35/f9962fb0-221d-459e-957d-b8a95fae9d35.crl

            X509v3 Authority Key Identifier:
                keyid:A1:00:92:F7:EF:2A:12:4C:3B:96:13:F8:F7:22:E4:6D:B6:6B:E2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f9962fb0-221d-459e-957d-b8a95fae9d35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:aa:c2:a8:f2:40:ae:e5:ee:a3:6c:bd:e2:e7:c3:49:b2:
         03:b1:29:b2:51:99:0d:90:46:38:49:03:6b:1a:3d:1b:67:fa:
         3c:d2:b0:fc:42:00:9d:af:d8:14:48:0d:e0:2b:29:1f:14:6c:
         4f:88:98:d6:fc:f5:fa:b3:9d:7a:c9:89:e2:40:1c:5b:a2:49:
         e9:10:4b:cd:e8:50:c9:79:30:9c:d5:8d:78:e3:59:4d:29:f6:
         79:e5:60:b8:a3:dd:4b:11:af:ad:29:a5:5b:6b:90:37:20:02:
         00:63:aa:61:01:8a:39:f1:c1:68:82:67:9c:79:f5:8e:fa:36:
         99:a7:ce:38:9c:04:6b:4f:00:95:bf:73:70:58:f5:5c:d9:67:
         1f:83:3d:c5:eb:fe:62:0b:82:3a:04:ec:1c:0c:38:85:c9:1c:
         2f:52:d4:b6:c4:25:c2:dc:de:0a:79:61:83:ec:e0:a9:17:cc:
         62:26:b3:ca:d3:c0:c2:04:1a:1b:f6:ae:db:28:a1:eb:a8:99:
         57:73:60:70:01:f9:c1:dc:34:44:bb:fe:15:62:8f:2c:ff:8c:
         87:98:e4:c7:9f:6a:a1:f4:d5:37:1c:a9:cb:7e:41:71:f1:61:
         d7:47:8f:57:96:58:7f:d5:f5:ac:19:6a:38:1c:3c:f0:98:36:
         88:59:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:06 2026 by rpki-client