Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/abb056f8-41a9-3f77-9d44-018bc875edc4.roa
File:                     abb056f8-41a9-3f77-9d44-018bc875edc4.roa (raw, json)
Hash identifier:          UPMySye9iGUe6t2bMBWUZTf8e48ijFCvua+OQWNLKuw=
Subject key identifier:   40:95:35:B8:01:5C:3B:DC:CE:33:90:B9:14:46:23:F5:4B:AD:A7:04
Certificate issuer:       /CN=ce4ba42c-24c8-4d79-9038-d06832a2d447
Certificate serial:       010D0C9F4328584EF19911B29C52141420FC9280
Authority key identifier: B9:5F:80:01:69:B3:FC:2E:A5:CA:C1:E6:18:52:68:80:1F:B5:EC:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/abb056f8-41a9-3f77-9d44-018bc875edc4.roa
Signing time:             Mon 24 Aug 2026 13:46:44 +0000
ROA not before:           Mon 24 Aug 2026 13:46:44 +0000
ROA not after:            Sun 22 Nov 2026 14:46:44 +0000
asID:                     402192
IP address blocks:        199.167.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:99:11:b2:9c:52:14:14:20:fc:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4ba42c-24c8-4d79-9038-d06832a2d447
        Validity
            Not Before: Aug 24 13:46:44 2026 GMT
            Not After : Nov 22 14:46:44 2026 GMT
        Subject: CN=b8a41de8-388b-4cb5-b7c1-0edc2bef71b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:6a:9b:2d:1a:f4:5d:ab:e6:63:be:e8:23:
                    d4:9a:42:d1:1b:71:e1:75:91:2b:88:38:42:9e:a1:
                    ff:27:86:4d:6e:ca:f5:55:fa:e5:a1:3c:00:e4:99:
                    6b:5a:03:3c:91:5c:db:be:b9:d9:14:d6:90:76:55:
                    72:df:25:49:a4:38:0a:1b:52:8a:19:e4:d9:7e:e3:
                    b9:38:35:68:0e:dd:97:55:a4:27:9c:e5:62:82:92:
                    8c:ea:82:27:8d:60:81:07:ca:60:c5:fb:52:33:47:
                    93:ab:7c:5b:fe:20:b5:85:41:9f:13:bb:4c:93:66:
                    ad:83:24:38:47:27:e4:5d:bc:c2:35:ce:e9:df:4f:
                    1d:e6:52:eb:4e:55:e7:89:7d:fe:95:71:71:f2:dd:
                    cb:44:e0:23:4c:d2:05:d8:89:fe:ae:f8:fa:77:49:
                    51:3c:cc:c4:2f:2e:1c:eb:e9:2e:4b:5c:93:d1:91:
                    92:57:27:79:3f:a1:f0:e9:7d:ab:f7:be:97:09:3d:
                    3f:dc:56:4e:b5:89:61:dc:27:26:7f:69:f5:81:04:
                    1e:fd:14:e2:e9:8a:83:ca:88:d4:65:d9:ec:fc:12:
                    f6:38:92:ef:04:20:3d:3a:30:77:c9:fe:6d:23:98:
                    a9:e3:bb:64:ad:fe:3e:51:d8:dd:cf:e3:2b:39:7a:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:95:35:B8:01:5C:3B:DC:CE:33:90:B9:14:46:23:F5:4B:AD:A7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/abb056f8-41a9-3f77-9d44-018bc875edc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447/ce4ba42c-24c8-4d79-9038-d06832a2d447.crl

            X509v3 Authority Key Identifier:
                keyid:B9:5F:80:01:69:B3:FC:2E:A5:CA:C1:E6:18:52:68:80:1F:B5:EC:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ce4ba42c-24c8-4d79-9038-d06832a2d447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:eb:cc:8d:84:c3:74:67:15:fc:2c:91:ec:28:f4:74:ea:
         c2:56:f1:18:75:5c:74:08:63:ca:73:14:2f:c7:e5:ad:7c:45:
         4c:ca:68:68:92:9b:d9:37:18:c5:b2:c5:6d:f9:5d:6a:12:08:
         ce:15:fe:dd:19:be:87:6f:51:c7:c9:47:22:49:b6:f6:8a:1e:
         59:18:1d:1f:51:70:d2:64:87:1d:ef:2e:c0:11:9a:16:c3:41:
         4c:ed:fb:b4:e7:5b:f2:53:c1:92:61:47:49:80:f8:f7:fd:d0:
         cb:b8:2b:19:e1:dc:48:d8:09:ab:e2:09:b5:87:0b:b4:dc:7e:
         75:ca:27:69:56:7e:e9:06:53:cc:49:3a:c6:a9:f5:60:45:e2:
         1b:41:0f:d4:a8:d8:74:cc:bd:10:d8:3e:c0:e0:10:0b:b4:dc:
         0b:c0:d2:1c:28:4d:d7:54:19:48:0a:a0:30:bb:3c:d6:e4:f9:
         49:93:87:05:f7:04:8d:14:3b:9f:4c:6e:b6:9a:83:d7:30:fb:
         73:c4:81:3f:03:1b:6c:ae:92:0c:bb:c8:d0:3c:07:fc:e5:7b:
         7d:21:cc:f7:2f:e4:f0:5d:af:5a:61:1c:c1:fd:3e:a0:f0:19:
         b6:8a:c2:fb:31:42:4c:55:ed:5e:5b:20:a3:33:3c:6e:27:b2:
         4e:14:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:37 2026 by rpki-client