Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa
File:                     a6d9c75c-5577-314d-80e9-b351715ba777.roa (raw, json)
Hash identifier:          9FD3lp60BdfsbJPdeigOEmuSdfc+D99xt99CTUHkt9s=
Subject key identifier:   99:CF:19:A8:48:80:1F:10:C7:17:BB:D5:BB:DF:05:5E:5E:33:86:A4
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584EF2E75F21F9C0C27B59CCE900
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     13926
IP address blocks:        192.200.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:5f:21:f9:c0:c2:7b:59:cc:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=1c869ee5-aeb8-4d93-925e-3891e4c38065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:b0:e7:04:86:9e:cf:2b:ad:62:c9:69:4d:
                    07:8f:ba:07:f3:31:e6:a8:0e:62:16:26:d3:c1:3d:
                    be:7e:ba:62:fd:86:f1:03:27:3b:d3:5c:53:3f:8a:
                    1c:f7:54:49:85:af:97:12:4b:90:7b:fd:72:47:89:
                    c5:4c:ae:16:61:64:23:99:41:57:0f:7b:5e:11:7f:
                    ce:d1:8d:8b:f6:7e:02:8d:08:2a:32:a5:0d:40:b7:
                    aa:7a:a7:96:f2:c3:be:aa:9a:41:93:70:82:11:d5:
                    de:ab:1c:69:63:5f:7c:46:71:60:25:8f:2e:39:88:
                    ff:7b:e2:9e:28:4b:1d:d2:03:81:da:c0:60:6d:f3:
                    57:4d:f5:e0:e0:a4:31:40:25:d9:5f:6d:4d:d6:36:
                    f0:21:b3:04:b4:60:e6:c1:5f:17:a4:c2:73:6d:6e:
                    74:ff:e2:f7:bd:33:ef:b8:a8:22:30:4f:b7:70:55:
                    16:a2:f1:b0:c7:e1:cc:f4:ce:b6:3c:1a:d0:57:5a:
                    22:b0:33:b1:df:77:c0:4c:a1:4c:b3:76:10:d6:ef:
                    d8:3e:2a:1c:e1:ec:87:11:7d:06:70:d5:1a:55:47:
                    81:55:2f:a4:06:b6:77:b1:17:97:3b:58:58:70:4f:
                    18:a1:9f:83:fc:62:c0:6e:30:2c:c4:ef:f1:2f:90:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:19:A8:48:80:1F:10:C7:17:BB:D5:BB:DF:05:5E:5E:33:86:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/a6d9c75c-5577-314d-80e9-b351715ba777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:76:84:32:68:76:c0:b0:9e:5d:8d:3c:1b:11:29:cb:e8:
         4d:e1:35:9c:fd:e1:83:28:da:7d:dd:ff:92:14:56:93:5c:dd:
         a1:86:3e:4d:aa:eb:72:c4:2e:6d:11:6d:a5:fd:b2:28:97:5b:
         b2:c6:2f:85:4e:b2:c8:85:6c:56:7b:88:de:77:b0:07:56:40:
         b3:d8:1f:26:f6:c1:72:d9:33:53:fd:1d:5e:df:91:7b:71:e9:
         69:52:31:c2:bd:c8:43:55:e2:2f:e0:5b:74:2f:6b:94:af:0e:
         1a:ff:34:a8:69:32:0a:ee:a8:9a:4f:ac:e5:39:77:bb:b4:11:
         0f:9e:46:d6:5d:96:49:a5:68:4d:a8:3c:b0:23:0a:fd:34:3f:
         e8:db:09:87:88:e3:db:40:c7:9c:eb:70:fd:6c:2c:4f:2e:9d:
         c1:f6:3c:cf:77:ef:28:df:30:22:c9:ed:84:b1:02:c7:bb:93:
         05:70:87:ee:2f:bc:48:63:f3:3c:70:e1:b3:89:d4:e5:09:25:
         64:9f:63:40:2c:5a:d9:cf:2d:6f:25:8a:68:89:d2:4e:b1:e4:
         19:3a:27:a7:da:99:7d:89:61:8d:55:9b:0f:93:36:fc:5b:21:
         0c:c2:4d:6f:5e:4d:7e:eb:4d:f7:b0:27:30:50:40:ed:68:a0:
         eb:b5:18:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:05:27 2026 by rpki-client