Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
File:                     0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa (raw, json)
Hash identifier:          l4ZQldBa+94Jyzi+zcxBcFXRPigg2r+4nujzM9+EHCg=
Subject key identifier:   8C:92:D6:15:5E:B5:FA:B9:3A:76:69:31:7E:02:51:A3:37:1F:44:0E
Certificate issuer:       /CN=b18324da-6458-413f-b067-6f50e625e3dd
Certificate serial:       010D0C9F4328584F268D08944409B469F1A14816
Authority key identifier: 1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     46692
IP address blocks:        184.94.224.0/20 maxlen: 24
                          192.40.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:08:94:44:09:b4:69:f1:a1:48:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18324da-6458-413f-b067-6f50e625e3dd
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=dbd081f6-0b6a-4521-88eb-ddd8c358cb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:93:25:28:50:67:ea:68:d9:01:5c:d0:11:
                    68:a2:61:ed:e1:c2:17:1a:fc:cc:0a:01:78:1a:a2:
                    55:29:c3:08:c3:2a:39:a8:fb:16:be:63:bd:ea:bf:
                    c2:23:e2:5c:a2:27:f9:ed:ea:03:aa:34:75:e5:f8:
                    29:60:b0:03:0c:5d:18:1d:51:c5:ee:c5:aa:a9:dc:
                    d9:1e:be:d4:b7:56:12:ac:8c:68:32:c4:fb:68:dc:
                    47:76:c2:42:6b:4c:9c:7e:f5:bc:0b:5e:51:ae:64:
                    cc:76:8e:fe:04:ff:69:ea:23:23:33:22:41:5c:e4:
                    30:ef:64:28:5d:11:7b:d1:54:de:ed:35:a9:2b:f0:
                    49:16:b1:dd:f6:90:f0:0f:32:4c:4d:7e:af:50:87:
                    fe:5b:50:49:31:d6:15:b1:01:d1:36:80:25:97:32:
                    8b:02:2e:da:7a:28:83:4d:cf:d3:66:0f:e2:77:7e:
                    a3:1d:b2:df:c3:c0:29:be:cc:68:c9:d6:78:bb:75:
                    30:fb:5f:72:d7:e6:fe:13:0c:c7:2f:6f:d1:72:ac:
                    5f:bb:16:53:b0:33:40:8e:93:02:f9:fd:55:f5:20:
                    6d:30:62:e8:90:76:8e:10:9c:ba:5c:e0:26:34:48:
                    b7:0e:e9:96:c8:31:4f:b3:5c:e6:f4:c6:44:0a:96:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:92:D6:15:5E:B5:FA:B9:3A:76:69:31:7E:02:51:A3:37:1F:44:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/0c42b88e-f18c-3734-af11-9c3b1c7ed11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.224.0/20
                  192.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:eb:0e:7a:98:44:e7:19:d3:24:97:e2:8f:c6:97:e7:15:
         1a:9e:6c:f0:0a:8e:79:56:17:c5:c0:4e:c3:c2:60:9f:d6:70:
         e1:b1:ae:69:1d:dd:37:63:c0:60:59:c9:56:51:57:73:7c:0a:
         68:85:a5:c5:4e:32:10:fb:56:8b:3c:1d:df:7d:ec:21:8b:87:
         ff:57:db:11:88:74:4a:70:4b:82:b0:87:f9:92:87:05:37:d6:
         4e:39:b3:c9:7a:b7:fa:e0:3d:b2:21:d4:c5:5a:b4:40:fc:76:
         dd:03:ca:4b:b3:02:78:eb:e6:9a:b2:a9:18:f0:a6:4f:6a:64:
         d5:bf:9c:5a:d7:96:8f:b3:f4:82:d2:93:17:2d:69:fa:f7:67:
         c7:12:11:85:df:75:21:47:b6:9a:d0:12:32:74:b7:c1:de:97:
         3c:69:69:66:84:9e:ed:51:14:83:ac:3f:c2:9b:ec:00:3b:c1:
         5f:fb:83:a0:03:70:9f:01:70:be:58:88:92:26:cd:24:5a:9e:
         d4:c6:77:1b:51:be:b9:2b:7b:12:17:55:1a:3a:15:73:52:2b:
         e0:38:00:4e:7e:8f:b6:8b:0a:4e:a1:a9:65:e6:70:14:15:74:
         1e:12:1b:b5:d7:50:2d:b7:1e:74:62:7b:b0:34:93:95:16:74:
         8d:24:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:22:58 2026 by rpki-client