Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/2e3c3fd2-bacf-3945-9cf4-b75eaf2f9a54.roa
File:                     2e3c3fd2-bacf-3945-9cf4-b75eaf2f9a54.roa (raw, json)
Hash identifier:          ZkC0qaPwR74MEqQmWmIqefd+kZyxhfSSIZj/SHgBTCw=
Subject key identifier:   D2:B8:99:CA:EB:91:F3:E0:D8:31:B7:80:BE:B4:47:AD:8B:7B:74:D5
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584F6292B1346EE7106C7E97CD00
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/2e3c3fd2-bacf-3945-9cf4-b75eaf2f9a54.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     14499
IP address blocks:        142.192.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b1:34:6e:e7:10:6c:7e:97:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=b8b32934-46a4-4816-8b22-3087d1ce5292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:ab:1a:1a:ad:83:44:74:47:48:d5:60:9e:
                    2e:7a:ed:d7:d5:23:da:dc:ac:01:9c:76:95:af:7e:
                    6d:a8:e6:5f:b9:3b:7b:68:37:99:78:14:35:df:00:
                    1b:14:55:1e:e7:aa:a1:68:b2:38:a9:5d:94:3f:f3:
                    42:c0:dd:08:78:76:40:8a:03:0e:f5:35:fe:65:fa:
                    3b:56:d6:39:53:a6:51:50:ec:8c:03:50:12:d6:1c:
                    44:88:b7:0d:ad:f9:99:77:1f:f3:4b:7c:7c:38:77:
                    78:4e:a3:c2:a6:4a:17:ae:39:58:3f:8d:87:9d:10:
                    fa:81:9c:a9:d8:6a:3f:52:78:8c:2f:24:b0:92:eb:
                    b0:64:3e:37:42:f9:4c:1d:d0:f0:10:06:ea:60:f6:
                    f6:4a:b1:05:b2:41:5b:c6:7a:07:6f:72:92:83:c7:
                    3a:b0:72:b0:4e:46:eb:ad:f9:a0:76:0c:14:85:19:
                    20:79:78:b6:b1:7a:f4:1d:80:f4:b0:77:1d:12:aa:
                    b5:7c:ab:32:56:39:57:10:9e:da:0c:93:dc:02:06:
                    76:8e:81:a8:98:da:09:79:7c:be:36:a3:a8:b8:78:
                    52:fe:18:43:ce:04:ee:be:f0:14:4a:85:b2:d4:d4:
                    b2:f9:e0:ac:79:ae:98:0b:16:3a:48:6a:4a:ec:4e:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:99:CA:EB:91:F3:E0:D8:31:B7:80:BE:B4:47:AD:8B:7B:74:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/2e3c3fd2-bacf-3945-9cf4-b75eaf2f9a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.192.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:49:28:6c:f2:39:ec:aa:c8:96:d5:f0:32:1e:c3:2c:aa:
         af:aa:a3:94:7f:bb:6a:8f:c6:01:bd:98:83:69:b5:85:e5:4f:
         3a:b5:98:43:d0:cb:06:d9:85:b3:07:d9:c5:d9:d6:04:8b:b1:
         40:4b:6f:1c:40:ef:b3:f8:fb:e0:33:52:b7:79:a6:f0:4d:b4:
         ff:b2:0b:73:83:6c:9c:a0:a8:d0:85:13:97:d7:ed:cf:8b:1e:
         71:6e:e0:30:e7:6a:aa:d2:c2:ae:d3:9d:67:8f:42:73:8d:0f:
         fd:f3:3d:47:e8:b3:fd:32:d1:3e:91:0f:f5:ec:f2:d7:db:13:
         a2:d8:84:08:6c:a9:2d:d0:fe:0f:05:a8:6a:40:b5:65:cd:1d:
         35:62:53:ef:57:c6:6a:0b:87:4e:fe:f0:44:29:53:64:e9:1f:
         2a:57:68:48:87:3c:06:ec:bc:25:19:f8:cd:54:c1:d8:8f:e6:
         d8:64:a9:29:05:42:57:be:9f:5b:a1:b7:ec:9b:1a:a1:fa:34:
         7d:be:57:43:64:69:82:6a:1f:cd:d2:72:e7:37:37:30:fd:4c:
         5e:ac:15:81:5d:3e:aa:10:8e:56:5c:1a:d9:e0:a2:e9:10:dc:
         aa:17:5a:a0:32:5f:5a:f3:90:34:e0:2d:bb:28:5a:17:ad:3f:
         75:d8:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:05:41 2026 by rpki-client