Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa
File:                     70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa (raw, json)
Hash identifier:          aoJjHsw7qP6RHkkr+KrHXJD7+9/M+fO8TDdV9x98Pag=
Subject key identifier:   FC:FC:69:00:A2:E5:46:BA:04:6D:BD:03:C2:6B:70:FC:56:3C:1A:71
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584F6292E0674F7CAFCF32455FC0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     16839
IP address blocks:        132.192.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e0:67:4f:7c:af:cf:32:45:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=c9172381-30a6-4d75-b545-2fec72d98218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:86:7f:61:47:35:98:6d:bd:e9:27:c6:5d:
                    00:94:b4:a5:5c:7c:c6:bc:50:4f:20:6e:3b:1f:12:
                    b7:c0:cd:c3:96:47:fd:7e:8c:82:cd:94:29:f9:a1:
                    9f:79:a7:a3:86:fa:f1:ac:aa:a9:bf:f4:d3:22:64:
                    5a:f6:22:b8:16:10:df:88:68:07:f8:43:77:73:32:
                    19:19:fa:43:9d:04:30:7c:f5:b5:e8:b3:f8:ba:94:
                    4a:a1:ef:aa:f4:8d:9c:df:fc:77:58:75:ff:71:1c:
                    a5:e6:f8:b1:0b:03:e0:35:cf:cf:68:32:08:cf:01:
                    26:f7:1a:bf:05:34:f4:3b:bf:99:5e:17:a2:27:30:
                    a1:fa:70:5b:e0:3b:1f:75:cb:a7:35:80:85:ef:1b:
                    89:c9:9e:3d:02:ab:9a:40:d0:34:b0:9c:0a:ff:c4:
                    63:e1:b6:81:29:7e:1a:64:08:e0:11:ba:a0:a7:5f:
                    4d:72:ff:fc:8a:53:4c:26:e1:16:9b:1a:87:e3:0a:
                    19:3b:b9:28:f1:12:07:0d:91:c2:08:27:5c:20:e9:
                    3e:20:b3:7a:92:fb:3f:f2:ca:64:96:ba:14:af:84:
                    ac:0e:6c:aa:0b:8e:f6:30:ca:9e:a5:ea:aa:3c:95:
                    b4:e7:89:af:b5:7a:eb:8f:d3:a4:49:28:d3:2c:5a:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:69:00:A2:E5:46:BA:04:6D:BD:03:C2:6B:70:FC:56:3C:1A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/70cbd354-24a2-3461-a5fe-ddd4e04e59a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0d:27:2b:1c:80:71:0f:90:2b:10:74:1d:0c:b3:42:b9:bc:
         f7:36:be:ec:a4:17:0f:be:43:3e:a5:e7:1c:da:5c:75:df:fb:
         c4:96:9c:49:5d:ea:36:30:3e:3c:85:e2:7d:27:1f:31:14:41:
         70:c3:3b:37:f5:00:89:df:ad:cc:40:b1:e7:0e:84:c8:73:79:
         59:75:26:e4:63:5c:42:e4:4f:c5:7a:44:e5:45:bb:4a:e3:e7:
         18:d3:5e:99:e2:61:ee:0a:cd:38:9b:06:63:f1:0d:e4:4e:a5:
         41:27:7b:58:d9:0b:cc:1b:ce:12:66:98:83:99:47:ba:a4:01:
         d3:23:7e:d4:ec:ab:33:fe:fc:b3:15:38:46:35:18:1d:9d:59:
         68:72:e9:02:e3:7d:55:ac:d7:90:b5:b1:f9:2c:39:fd:4d:c7:
         32:98:78:5b:57:b5:ac:99:17:3e:a1:72:32:1b:83:5e:f9:a7:
         92:f1:ea:f9:12:04:29:d2:be:c1:6d:6d:75:50:9c:98:26:11:
         b9:84:b9:61:3a:19:c7:0a:d8:ea:42:62:fe:d4:ab:99:a3:0e:
         e3:24:49:e0:de:f0:49:3b:d1:b4:85:5d:3c:69:7a:f6:8d:5b:
         e4:57:ef:5b:12:17:48:08:1b:d8:fa:90:2c:7b:c2:80:58:33:
         c3:47:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:48:04 2026 by rpki-client