Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2b02844e-5e0c-31e5-b9f5-00a364b95c16.roa
File:                     2b02844e-5e0c-31e5-b9f5-00a364b95c16.roa (raw, json)
Hash identifier:          /XWvOXaSJLgTamWzur0pVs9lrErkZdkBPBZ1RITGcO0=
Subject key identifier:   48:FF:63:28:D0:20:80:DE:21:47:24:19:78:56:09:AE:EB:4D:6A:68
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584F43DD56856995B348EDA20A80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2b02844e-5e0c-31e5-b9f5-00a364b95c16.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22652
IP address blocks:        184.95.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:56:85:69:95:b3:48:ed:a2:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=8d89f78b-1f34-4c2f-8b9b-bef849172625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:91:c6:58:07:bf:c3:a2:5a:47:74:3d:2a:
                    ba:db:45:4e:eb:cc:dd:5c:a3:79:5d:c9:bc:0c:14:
                    c0:99:25:66:1f:2f:6a:47:fc:1e:34:52:b7:4f:f9:
                    dd:17:ea:cd:ae:ff:0a:c9:9c:51:ef:45:3e:aa:71:
                    82:91:5b:89:84:36:86:c1:5c:f5:c9:d0:af:c8:be:
                    fb:97:fe:dc:8c:3e:b2:82:98:f4:d9:05:4f:e4:3f:
                    ec:0d:18:cc:e3:c3:4d:fb:d8:5f:71:d7:27:22:d1:
                    3f:85:ec:11:e5:38:c5:51:25:ab:a9:c1:c1:b0:60:
                    2d:e3:7f:40:58:4b:82:c1:f0:29:35:e5:bd:4b:16:
                    a3:c3:39:0c:ed:47:a6:d1:0e:51:51:89:e6:d2:c5:
                    3a:18:54:48:36:13:35:47:34:d3:b4:89:de:0d:8d:
                    3b:d2:e5:55:93:a6:c8:88:c1:df:bf:94:59:4c:00:
                    56:6b:d5:27:55:a2:11:66:af:28:44:ae:1a:1b:c6:
                    7e:0f:76:5d:36:46:75:f6:26:ad:71:73:07:33:4c:
                    72:3a:fe:54:d5:21:0f:21:ba:e9:28:d9:07:e0:2c:
                    ab:cf:dd:34:4a:f8:44:13:3e:9f:28:08:6c:db:e9:
                    50:27:03:54:aa:97:46:6a:41:ef:0a:ba:ec:43:9b:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:63:28:D0:20:80:DE:21:47:24:19:78:56:09:AE:EB:4D:6A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2b02844e-5e0c-31e5-b9f5-00a364b95c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:6a:56:2a:bd:12:29:d1:5c:25:fd:57:07:81:84:9f:7e:
         9e:2c:26:fa:9a:bd:f5:c7:0e:4c:c0:74:dc:97:be:e0:34:de:
         5e:58:f5:d1:f4:0f:eb:7a:34:0b:81:7c:9c:f1:fe:b9:11:aa:
         cc:ef:8d:18:67:86:3f:15:ec:33:b9:9c:a2:59:a1:7f:d9:a4:
         70:f3:90:23:f8:04:d2:cd:89:98:38:4b:03:19:54:a2:e1:02:
         26:2c:79:d3:db:81:de:fb:64:d7:c1:65:ec:d6:29:d0:1b:c9:
         b9:c4:31:66:ec:ed:7e:3d:cf:b6:a5:e8:c2:1a:57:f1:8a:ef:
         a6:bf:d6:8e:51:a4:5b:e9:6a:a6:31:3d:8d:59:b5:74:8a:aa:
         e2:1d:74:f7:91:21:f8:1e:58:7a:fb:dd:7a:98:57:4d:9d:08:
         47:77:a7:20:ce:fd:16:de:63:41:ff:10:5a:12:f9:2a:96:11:
         a8:e0:b3:b3:ab:3f:24:7b:e1:a1:07:17:1e:ff:4a:26:2a:e9:
         f5:29:0f:6c:23:2b:68:c6:ad:ca:d6:82:97:2a:0c:48:a1:45:
         02:ab:f6:58:2d:b4:e4:52:28:b2:12:a1:b8:63:53:c9:ed:64:
         a2:f4:ed:06:04:19:6a:c3:61:52:78:ff:fc:cf:a5:6d:45:f1:
         d4:c1:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:58 2026 by rpki-client