Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/54537786-ba45-3b98-ae74-0d7be7eac4e8.roa
File:                     54537786-ba45-3b98-ae74-0d7be7eac4e8.roa (raw, json)
Hash identifier:          g15FhTYK3yt8DUNDDNiCFl/whmSnVYU2g1zVllgPFrw=
Subject key identifier:   3E:D9:4F:72:F3:50:96:DF:AF:A3:9D:C4:75:3E:C0:A2:4E:D4:88:CC
Certificate issuer:       /CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
Certificate serial:       010D0C9F4328584F8DD8988EF0920C8EEEF70000
Authority key identifier: 0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/54537786-ba45-3b98-ae74-0d7be7eac4e8.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     16633
IP address blocks:        192.69.16.0/24 maxlen: 24
                          192.69.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:98:8e:f0:92:0c:8e:ee:f7:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=4f5e72d1-7111-47cb-882e-596def2a355d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:e6:ac:0b:be:e3:32:38:93:cc:21:28:7c:
                    0f:8a:55:ec:24:17:21:00:fb:a7:f4:97:75:fe:5b:
                    40:6d:7b:d4:64:c1:54:89:a4:ea:df:5e:16:84:bf:
                    ec:31:4c:99:ad:74:36:95:41:8f:0e:7e:50:6f:38:
                    3d:1c:81:44:65:12:10:7e:22:e4:ab:3f:eb:3c:07:
                    62:f1:56:f4:83:d0:13:b4:17:c8:b9:6c:11:8c:c0:
                    1f:94:82:aa:eb:d5:7d:d7:90:f5:65:1c:a9:21:d0:
                    3e:42:90:6b:f3:e6:8e:52:d5:d8:e0:02:99:5d:93:
                    95:f9:f2:84:c7:d5:09:f7:3e:84:c1:18:77:8e:b3:
                    58:24:2b:15:a9:8a:57:c4:78:36:bf:62:5f:eb:2a:
                    17:72:b5:e2:c5:8b:33:47:59:42:c5:5b:f5:b6:d6:
                    19:56:14:d7:08:4f:0b:6d:d0:19:de:87:e9:f2:15:
                    b1:89:e5:fc:e8:4c:d3:ff:e7:21:b8:16:52:11:4c:
                    2b:a9:c6:c0:bb:91:11:28:83:61:5a:d5:58:06:e2:
                    cf:3e:b2:c9:8d:56:5a:ad:90:7d:6a:81:14:2a:72:
                    a1:0a:ea:da:0e:82:ed:c4:18:77:3f:af:e6:89:a8:
                    94:7e:d5:5a:9a:26:fd:fd:d4:ee:1d:b4:d8:f1:4a:
                    92:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D9:4F:72:F3:50:96:DF:AF:A3:9D:C4:75:3E:C0:A2:4E:D4:88:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/54537786-ba45-3b98-ae74-0d7be7eac4e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:22:db:c2:86:c3:1a:01:38:44:a3:fc:cd:0e:50:75:0d:8e:
         c5:d8:c7:1a:1b:68:61:e6:ab:0d:e9:70:47:72:c1:44:7d:3a:
         a2:d3:33:57:68:f6:3e:da:d0:aa:d2:f4:61:94:dc:c7:d7:58:
         8f:c9:13:67:81:64:29:18:7d:eb:98:18:ba:15:fd:6c:49:cb:
         77:00:43:3c:0c:77:d0:65:72:5b:07:0f:17:bb:20:a9:0f:eb:
         15:70:e4:69:ff:0c:51:73:b5:2c:af:a0:a3:0a:e6:4d:e5:af:
         ef:a9:ae:17:48:e1:66:4e:95:bb:50:28:02:64:dd:bb:e4:4d:
         09:18:67:93:19:3f:3d:fd:e8:d0:73:24:7b:2a:a9:a9:fd:3a:
         ce:c8:b6:93:25:1b:4c:bf:59:2f:ef:ec:64:24:34:ea:74:99:
         6b:4a:e5:77:6a:dc:c7:a7:72:78:0b:29:4f:67:7d:51:49:9d:
         15:eb:a2:38:8b:d9:6d:7f:3f:61:bd:30:45:ff:f0:42:a5:07:
         54:ad:7e:7d:be:4d:66:a0:50:1b:53:a4:32:ff:b0:96:4c:cf:
         b7:93:99:c3:f3:a7:3f:0e:5d:fa:4a:62:39:2f:2b:58:91:3e:
         fa:94:08:95:e5:29:c1:00:28:83:07:cc:22:cb:45:b1:dc:aa:
         eb:55:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:55 2026 by rpki-client