Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa
File:                     bc5198a2-5c79-324a-aece-a03c1b919441.roa (raw, json)
Hash identifier:          gW5LOOeMutWXgZ+byroxxKNI0wC+6aTUS5r4AbGJexE=
Subject key identifier:   7D:18:06:8E:CF:81:84:B1:B3:B3:8C:D2:7C:B9:FB:A3:AE:AC:E7:47
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F5E62C07C2ED519D412490E80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     397422
IP address blocks:        199.193.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c0:7c:2e:d5:19:d4:12:49:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=da07ae1b-16b0-47cf-84f2-068d2c5bb3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:2d:c6:3f:a5:0a:3c:b9:21:92:36:7b:06:
                    ac:66:b5:34:08:31:b9:08:87:0f:c4:10:b5:33:3d:
                    cc:87:0d:32:05:5a:50:d7:f6:c9:50:36:24:42:d3:
                    a2:2f:6f:f5:a6:47:d2:c3:26:52:31:fb:8b:22:fe:
                    44:72:ca:e5:27:98:55:ba:53:55:f8:19:31:c2:c6:
                    d8:9b:8b:ac:68:6d:53:e1:72:cd:7c:e6:16:b3:9b:
                    2d:01:da:e1:87:48:01:e0:49:5b:04:65:45:13:af:
                    61:d6:63:2e:6f:4b:90:1d:19:15:25:cc:82:a8:de:
                    3d:07:e8:56:c0:36:d7:15:34:9f:ee:53:80:3d:ab:
                    c1:fa:27:c3:c2:33:2a:6c:80:1c:e0:71:ec:13:92:
                    25:c0:1b:a1:b3:ab:a8:ad:12:d5:15:8f:a9:42:2d:
                    6b:5c:74:f6:ba:70:b4:0b:c1:1f:99:b3:50:e1:f2:
                    5a:92:11:c9:92:0c:f5:26:4f:92:0b:45:da:cc:4a:
                    7a:90:88:8c:a6:76:a8:52:56:b1:37:1c:21:49:e6:
                    de:81:67:3d:5c:c7:53:02:63:f8:fd:12:cc:7a:c8:
                    d4:37:ba:c8:3b:97:57:4f:79:03:15:61:56:96:88:
                    9a:e4:6c:be:c3:99:cc:03:00:44:a6:a3:4a:6e:46:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:18:06:8E:CF:81:84:B1:B3:B3:8C:D2:7C:B9:FB:A3:AE:AC:E7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:ac:34:b9:af:5e:b9:23:88:70:f9:35:b2:96:eb:3d:24:
         20:dd:17:23:51:43:c7:12:60:cd:49:d7:e5:fc:a3:7e:b3:f6:
         db:3c:d8:cd:1f:34:5e:ae:2d:e8:fe:fe:57:d6:7c:66:b0:40:
         f0:0d:60:5d:6b:ec:3e:23:56:4a:0f:b5:2a:e2:1a:6e:52:49:
         8b:34:33:ed:05:5f:52:6d:f9:c3:41:da:30:99:02:2d:37:f7:
         c7:b4:41:21:d3:8c:5f:f9:d4:4e:b5:99:5d:58:40:18:96:6e:
         e0:ff:b5:c3:e7:29:02:8c:3c:d3:6f:aa:c2:77:44:e4:de:3b:
         5e:69:31:c7:01:5c:6c:b7:4e:bf:2b:ab:70:40:dc:39:6c:a8:
         54:39:9f:53:60:33:fe:fd:40:e8:11:ee:62:8f:fb:3b:3e:41:
         4d:6e:4b:9e:39:8e:28:c9:be:5b:92:69:e0:cd:a7:e2:9e:6a:
         5a:e3:48:62:93:5d:c5:34:88:76:4f:45:f6:22:7d:0d:c7:64:
         cd:1a:8a:3f:7f:f4:d4:8e:c4:5a:8b:74:68:6e:e7:79:3a:4e:
         6d:d6:e5:48:91:74:a9:c3:d8:c5:b5:63:92:c9:14:93:fd:27:
         e3:0c:3b:11:45:49:25:d5:91:36:ff:ff:6f:14:8e:03:3f:f6:
         b5:13:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:55 2026 by rpki-client