Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa
File:                     accb8eb5-8eac-38d6-b382-61138ad997cc.roa (raw, json)
Hash identifier:          MuPydd8nG0h0u7eZJ0yvy+l06J8CgAwF2QCjIxIQ4Kk=
Subject key identifier:   B0:F7:9E:C0:29:0B:C5:85:F0:50:13:83:78:DC:64:66:3C:AA:B6:50
Certificate issuer:       /CN=141b1a76-b2c0-444e-a0ce-919d160454f9
Certificate serial:       010D0C9F4328584EB84742CBA23E41247454CD00
Authority key identifier: 6D:A8:5E:92:86:AF:29:2B:A2:B2:37:9A:0B:44:7D:D7:89:F9:FB:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     29802
IP address blocks:        192.214.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:42:cb:a2:3e:41:24:74:54:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141b1a76-b2c0-444e-a0ce-919d160454f9
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=8e365016-5bc1-4b15-80eb-fb867885a680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:a0:ae:16:d5:cc:75:ed:ef:9d:26:35:17:
                    c5:52:81:13:71:f1:9f:4a:77:5c:fc:ab:87:59:e2:
                    38:4d:ed:7f:29:8d:d0:59:4d:9c:37:a5:0d:f5:27:
                    3f:c0:37:54:ff:0b:86:82:81:18:78:4c:bb:66:f8:
                    01:c7:07:ba:33:7f:03:82:b7:9f:ec:70:fb:13:c3:
                    d9:85:05:6b:6e:04:c3:e6:8b:63:36:c8:ba:b6:4b:
                    d8:81:df:0e:2c:c3:82:91:84:db:c6:7d:a1:d6:91:
                    57:fb:cb:58:b4:ec:76:86:2a:08:03:5e:4f:24:1f:
                    7c:23:06:ec:05:ed:77:51:24:14:bc:de:d0:27:6b:
                    b8:39:ce:89:6d:c3:05:2d:3c:f5:9f:1f:8f:ba:15:
                    6d:2f:9d:b5:e2:93:8f:a7:aa:d0:a9:0d:d8:80:4a:
                    7f:29:66:1f:2d:26:1f:be:3a:da:10:67:4e:ff:32:
                    44:ee:91:eb:3a:69:b7:42:9a:72:43:b8:a6:06:ed:
                    db:f5:1b:cb:cc:b4:1a:81:84:30:61:c9:80:c9:68:
                    e7:ca:aa:ff:9e:b3:28:24:26:10:47:a9:80:28:c9:
                    12:3e:f6:bd:58:9c:4a:a0:31:c4:0d:c0:c2:eb:86:
                    80:b4:df:0a:37:aa:b3:95:0d:bb:98:bd:6d:6d:b2:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:9E:C0:29:0B:C5:85:F0:50:13:83:78:DC:64:66:3C:AA:B6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/accb8eb5-8eac-38d6-b382-61138ad997cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9/141b1a76-b2c0-444e-a0ce-919d160454f9.crl

            X509v3 Authority Key Identifier:
                keyid:6D:A8:5E:92:86:AF:29:2B:A2:B2:37:9A:0B:44:7D:D7:89:F9:FB:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/141b1a76-b2c0-444e-a0ce-919d160454f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.214.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bf:9c:1f:a9:a0:e3:50:d2:b6:a1:75:07:14:67:ed:f9:0a:
         cb:87:21:b0:d4:e5:af:b9:70:b1:55:c8:97:a2:8e:0a:79:e4:
         99:52:80:72:1f:b6:41:c9:63:45:ee:f0:59:76:09:c5:a7:49:
         c6:33:1d:c3:f4:ef:4c:07:99:2d:83:2b:8f:0b:b7:36:15:66:
         72:32:12:50:f7:01:16:d4:ae:62:6a:d1:34:7a:14:81:f5:7c:
         88:ad:06:07:19:60:08:d8:ca:8e:99:41:1b:5b:e2:a6:2a:bf:
         14:da:52:d4:55:21:7b:da:d2:da:c5:0b:a8:b5:f7:3e:8e:07:
         27:de:18:8e:5b:fd:b2:b6:e7:c4:27:f2:6b:14:25:94:7a:58:
         2e:27:39:d9:ea:c1:5f:b4:28:27:e2:06:66:a2:0c:d7:f1:85:
         f6:b6:f1:93:1f:65:3b:a2:65:ff:6a:99:45:e2:da:61:6e:ee:
         a7:b0:61:db:1e:07:0d:a6:ab:4e:01:3e:58:15:ae:7b:0f:47:
         91:0f:af:98:b4:ec:2f:6d:0c:d1:58:c2:96:1a:22:5d:2c:34:
         e3:f4:24:21:86:fa:af:75:db:26:5c:c6:20:62:57:8d:0e:85:
         90:b3:dc:72:ad:c8:0a:13:ec:66:d7:2f:51:ee:ea:79:ee:e4:
         b8:46:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:12:09 2026 by rpki-client