Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/0c95b651-9cb3-3c73-a032-6c62fec99333.roa
File:                     0c95b651-9cb3-3c73-a032-6c62fec99333.roa (raw, json)
Hash identifier:          NEmc0zULPWRJ9Xkn+1h+HQlEc8FrlpPC8zML0WPKzAI=
Subject key identifier:   0D:5E:0D:56:E3:C5:5A:CB:2D:C0:47:2D:AD:6E:5E:B7:9A:AE:1D:8C
Certificate issuer:       /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial:       010D0C9F4328584EC0A72492E6521E1881DAC880
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/0c95b651-9cb3-3c73-a032-6c62fec99333.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     23319
IP address blocks:        192.122.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:24:92:e6:52:1e:18:81:da:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=55b80c37-6311-4a63-a83f-15735405b936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:40:17:ff:0f:52:b9:41:7a:b4:ec:fc:06:
                    31:c4:a8:8f:4d:19:2e:96:2c:28:8d:a1:3c:53:2b:
                    9b:ec:44:4d:18:82:5c:41:42:b6:cd:b4:5a:bb:a8:
                    b8:4e:37:f7:d1:2d:86:c5:5f:d8:44:a4:06:3e:0c:
                    36:1c:42:d2:5b:c6:0d:2b:a4:57:e2:dc:cb:b8:e5:
                    14:09:06:2d:19:60:3f:ba:52:5c:4c:86:fe:65:31:
                    b3:40:62:05:f7:25:e9:53:a6:3b:f1:58:a3:51:ee:
                    2a:1a:9e:c7:ad:f7:12:97:8c:03:1e:d2:14:f8:db:
                    46:9b:82:36:9d:12:31:bd:82:6e:7d:41:8f:22:b3:
                    81:79:9c:ff:89:b2:77:20:02:01:69:fd:c0:c3:cf:
                    72:61:a0:7b:b0:ec:15:8d:f9:15:a8:c9:87:e8:90:
                    3e:d3:2c:b6:3e:63:b0:77:33:5f:60:a0:0e:02:7e:
                    c4:ec:1d:fe:67:11:6c:79:ee:16:da:93:0b:87:c7:
                    56:8c:f7:15:4d:88:65:c9:f8:ad:62:de:d8:79:7e:
                    ee:b1:f7:39:a3:76:47:7a:f2:5c:7f:59:8d:60:3a:
                    77:e3:57:a8:14:df:c3:4a:b5:3e:ba:ca:1d:27:e2:
                    4c:40:8c:80:0a:7b:3c:2c:46:56:97:b6:b8:29:ef:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:0D:56:E3:C5:5A:CB:2D:C0:47:2D:AD:6E:5E:B7:9A:AE:1D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/0c95b651-9cb3-3c73-a032-6c62fec99333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl

            X509v3 Authority Key Identifier:
                keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:d7:f6:d2:ef:d5:68:5d:88:ca:3b:14:cf:13:40:cb:a0:
         b4:7c:d0:4a:59:8b:d4:26:9b:da:bf:fc:fb:80:c4:97:37:5d:
         c0:f6:e8:d6:cf:0b:80:35:38:7e:60:56:8e:97:cb:e4:14:63:
         f6:57:00:40:5e:b5:34:c8:7b:4b:f9:fa:e2:fc:59:19:04:73:
         05:2e:fd:78:fc:83:69:3a:1b:31:49:1b:d9:4d:69:12:ed:de:
         99:4e:00:f8:60:32:32:29:1f:e3:1e:41:e2:99:e7:65:c7:09:
         56:3d:ce:33:88:21:49:48:0a:96:bb:fe:11:fe:01:b0:e2:5a:
         e7:d1:03:bf:51:6d:34:c5:51:1c:66:be:d9:40:10:72:ca:d1:
         41:90:9d:c6:90:ca:05:a1:84:62:d5:e2:27:68:43:3d:45:73:
         dc:8d:58:fe:95:f8:05:0a:91:95:5d:de:fb:49:b0:b1:85:7a:
         99:4e:00:17:95:99:06:dd:a9:03:fd:ba:ff:70:10:eb:f7:9a:
         fc:de:f2:ae:2b:76:27:b5:c5:c7:eb:52:c5:61:59:a7:63:c0:
         30:d7:4f:f4:ba:30:eb:f8:b1:5b:01:e4:43:3a:30:84:c9:53:
         d3:56:fb:65:60:ec:5e:57:9f:f9:7e:14:19:35:77:bd:bc:63:
         47:06:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 22:01:16 2026 by rpki-client