Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ffbc585b-464e-3584-917e-149735fe3ff5.roa
File:                     ffbc585b-464e-3584-917e-149735fe3ff5.roa (raw, json)
Hash identifier:          haoWvXCJ8sRyBdDaqIxKWrnKYFeb2DQcN1UZdATijZ8=
Subject key identifier:   EC:4D:DC:6F:50:FC:F9:3B:3E:B6:2D:4F:CE:E2:3B:C1:08:2B:0C:01
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F2FA84E9BD16C6493147BBF40
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ffbc585b-464e-3584-917e-149735fe3ff5.roa
Signing time:             Tue 15 Sep 2026 19:17:34 +0000
ROA not before:           Tue 15 Sep 2026 19:17:34 +0000
ROA not after:            Mon 14 Dec 2026 20:11:49 +0000
asID:                     215817
IP address blocks:        192.48.201.0/24 maxlen: 24
                          192.82.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:a8:4e:9b:d1:6c:64:93:14:7b:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 15 19:17:34 2026 GMT
            Not After : Dec 14 20:11:49 2026 GMT
        Subject: CN=bf880b0a-d03d-424f-8cd3-f94b0f4711ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:11:b7:0f:68:89:74:29:34:0b:a2:6c:a0:
                    d9:00:e1:69:5b:2d:a6:da:b3:79:d9:96:e2:83:88:
                    ac:99:f9:1b:75:1e:91:48:16:be:1d:be:ae:e9:20:
                    a5:e3:94:32:e9:d5:01:94:b1:e8:b3:c7:bb:42:a4:
                    51:0d:aa:3e:fe:ad:8c:a2:54:0f:51:ad:f7:d3:b1:
                    a0:2d:34:65:b2:3a:42:81:bd:89:64:ce:6e:b3:c5:
                    83:12:69:be:10:79:f1:c0:79:9d:1a:e7:b2:6e:2f:
                    c6:7d:af:35:d5:76:06:21:0e:db:5a:53:1d:29:20:
                    bf:7f:ba:e7:11:e4:63:ce:8f:16:a8:66:03:21:f1:
                    4a:65:88:ba:53:4d:b4:1b:d0:89:21:1d:58:f9:f5:
                    f4:46:2d:99:7b:cc:00:3f:22:25:66:fa:64:cd:03:
                    6a:b9:7b:5d:5b:f2:b5:a8:0f:f7:1c:e0:40:00:1c:
                    53:f4:ac:18:32:35:68:aa:2b:26:a0:82:44:64:35:
                    65:db:cc:5d:3e:d0:bd:3d:26:1b:b9:0d:fa:35:e7:
                    af:c6:86:f8:c2:90:71:37:9d:b1:7c:b5:77:71:8c:
                    45:02:75:35:28:50:99:e0:aa:39:78:13:95:80:eb:
                    7c:21:4e:41:94:23:2b:26:80:32:07:32:4e:53:ed:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:DC:6F:50:FC:F9:3B:3E:B6:2D:4F:CE:E2:3B:C1:08:2B:0C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/ffbc585b-464e-3584-917e-149735fe3ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.201.0/24
                  192.82.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:96:31:15:06:4e:48:d1:b4:50:1f:63:91:54:ca:e0:5d:dd:
         fb:71:46:15:e3:31:55:ae:07:b1:4e:8a:73:6d:8a:90:7b:9c:
         c5:00:16:ce:99:99:fc:44:e5:20:72:8a:e0:b0:88:58:d6:32:
         ca:63:3e:fa:aa:68:85:85:12:fc:b1:34:ca:af:65:da:6b:01:
         e5:73:8d:22:4e:ee:5b:3c:bb:e4:c8:f8:2c:8b:32:e5:1e:a1:
         3e:b2:b2:32:6c:e7:49:fd:81:c2:9c:d1:5e:b6:a3:4d:4f:9a:
         9a:55:bc:a7:27:d3:52:e1:1e:92:f5:ab:a1:a4:4d:a9:26:44:
         b3:4a:e7:d5:62:91:ff:2c:93:53:cb:1f:98:2b:a7:0a:34:82:
         af:82:ff:d3:35:72:25:6e:2a:0c:65:d1:36:78:5f:57:6a:09:
         46:22:a8:c9:20:d5:ac:07:56:de:a6:f5:68:33:ce:9b:1f:71:
         9c:3e:9d:d4:83:5c:96:c3:a3:b7:e5:9b:db:6e:e4:f1:06:b3:
         84:47:61:1f:3b:7c:e4:c9:30:9c:92:a6:c9:22:d3:91:78:30:
         fa:84:5a:07:76:3d:2b:d6:6c:ed:30:3f:b2:79:b3:07:b5:86:
         01:5a:26:a2:2d:cd:c0:96:ef:82:39:44:c8:68:f5:f2:4b:ff:
         20:f8:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:16 2026 by rpki-client