Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/3cb8b15b-9862-342f-b934-f342405246bd.roa
File:                     3cb8b15b-9862-342f-b934-f342405246bd.roa (raw, json)
Hash identifier:          EiStdsxVYHcUPgNPTq1CXasf/CUASqLtXlw0EvAZRr0=
Subject key identifier:   B8:A5:8D:47:06:94:3F:5B:68:58:A4:98:0B:04:BE:94:74:F3:A4:98
Certificate issuer:       /CN=ce4ba42c-24c8-4d79-9038-d06832a2d447
Certificate serial:       010D0C9F4328584EF198B5B98718AC80709B0280
Authority key identifier: B9:5F:80:01:69:B3:FC:2E:A5:CA:C1:E6:18:52:68:80:1F:B5:EC:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/3cb8b15b-9862-342f-b934-f342405246bd.roa
Signing time:             Mon 24 Aug 2026 13:46:01 +0000
ROA not before:           Mon 24 Aug 2026 13:46:01 +0000
ROA not after:            Sun 22 Nov 2026 14:46:01 +0000
asID:                     402192
IP address blocks:        199.167.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:98:b5:b9:87:18:ac:80:70:9b:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4ba42c-24c8-4d79-9038-d06832a2d447
        Validity
            Not Before: Aug 24 13:46:01 2026 GMT
            Not After : Nov 22 14:46:01 2026 GMT
        Subject: CN=0625e450-c79b-47a3-a464-75ee0f07de9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:f5:6f:54:cf:4a:49:ba:87:8d:30:10:53:
                    ff:d4:4a:94:96:45:ff:da:ca:95:cf:58:51:ca:35:
                    ed:a1:fd:9a:ad:72:66:ad:a7:82:f0:20:52:32:bc:
                    a0:84:f0:6e:f1:d7:9d:87:10:1d:a0:6d:f7:9b:2f:
                    e5:ae:55:f6:c8:03:d7:d4:97:3a:f8:80:dc:0a:06:
                    c9:e5:9a:64:3f:a2:b8:ac:4c:7c:2e:cd:d0:a8:a5:
                    42:0e:03:58:45:92:9d:17:7e:aa:69:ce:ea:f2:48:
                    e1:93:35:aa:81:23:dc:47:b2:94:4d:fb:97:de:ae:
                    89:42:79:e0:6c:70:05:4f:68:97:4c:94:ec:66:75:
                    2d:f2:12:38:07:15:29:f8:c8:11:5a:04:01:5a:0a:
                    59:c8:b1:23:28:85:fa:0a:e4:fd:bd:24:dc:1f:08:
                    ba:f0:8c:81:e0:15:9c:50:68:93:56:c7:70:e3:db:
                    ac:31:2e:53:33:c5:6c:e2:9e:e5:bc:85:6e:bc:ec:
                    f5:ab:34:4e:9b:3d:de:77:fe:0f:60:70:d1:3d:98:
                    1e:8a:47:19:5c:b1:5c:3a:b2:01:54:54:4f:82:50:
                    16:5a:ea:0a:9f:61:96:b7:ce:33:3a:db:5f:6a:64:
                    ed:19:32:49:05:ef:af:cf:32:69:b9:bc:a9:d3:f4:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:8D:47:06:94:3F:5B:68:58:A4:98:0B:04:BE:94:74:F3:A4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/3cb8b15b-9862-342f-b934-f342405246bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.crl

            X509v3 Authority Key Identifier:
                keyid:B9:5F:80:01:69:B3:FC:2E:A5:CA:C1:E6:18:52:68:80:1F:B5:EC:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:18:83:a0:f8:c2:00:c4:24:95:07:86:ad:82:bf:ea:75:98:
         4b:5e:26:70:a8:88:26:00:5a:71:57:76:c7:21:f3:0e:8d:f8:
         16:b5:17:39:57:de:09:a4:2d:6a:58:a0:4e:0b:03:d4:a2:95:
         16:be:fa:13:96:8c:57:56:d7:d2:8e:82:5a:6c:65:da:83:93:
         50:c9:63:84:7f:62:68:04:93:78:de:0b:aa:af:44:9a:cf:ec:
         53:79:f6:32:94:f8:ef:df:95:0d:6e:78:77:3f:ac:5e:27:ba:
         92:b0:b5:4e:63:79:e4:2f:de:e4:a3:d5:f0:ff:98:45:62:12:
         94:4e:19:61:d6:97:a8:e5:59:4c:83:58:df:d2:de:7e:b1:59:
         41:09:59:cc:02:a1:6f:2c:0d:f0:02:00:cd:34:1e:31:23:d7:
         a2:a9:ed:35:2b:17:0f:5f:f8:90:66:de:4c:1a:14:91:62:88:
         0b:5b:09:11:80:1a:08:ff:d9:d9:5f:0d:65:6a:09:d8:53:d0:
         2e:eb:29:65:e2:7e:1d:b1:43:85:14:51:2e:6f:0a:4c:bf:ac:
         5b:a1:d5:ba:70:0e:6d:f2:12:49:ee:88:9b:6b:14:d2:0a:17:
         8b:22:ee:cf:ba:3d:ac:86:81:ca:e1:2f:3d:bd:da:5e:32:42:
         48:77:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:52:50 2026 by rpki-client