Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa
File:                     30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa (raw, json)
Hash identifier:          A2Ny7J1Kj9ceC9YzA/WyCqZpD8GczjJav6kR+1jRWv0=
Subject key identifier:   E2:59:14:DD:86:ED:FF:B1:81:95:86:9E:39:C2:BC:9B:9A:55:75:36
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F51D2C08A0A6EFE8549121200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        192.177.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c0:8a:0a:6e:fe:85:49:12:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=be947ea7-c9f5-4a12-a553-a3e7c1ed1d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:1f:1e:87:b8:eb:8b:b8:d7:83:d1:2d:84:
                    c5:e0:a4:77:2c:3d:41:17:02:8e:74:3d:52:80:37:
                    5a:fd:24:ca:ce:29:ea:85:84:b2:db:d5:95:3d:fe:
                    0b:36:ac:d4:24:44:46:93:8e:57:b5:e6:28:84:49:
                    23:e3:c1:80:07:55:64:92:57:b9:6d:53:a5:88:87:
                    a7:2c:2a:b1:77:17:83:2e:a5:7c:fb:64:ce:3a:dd:
                    2c:0e:55:76:b4:74:fe:5d:a2:19:08:98:cd:b6:7c:
                    62:19:af:ba:f3:0a:cb:43:3c:2c:c6:0e:ff:38:6e:
                    a7:9c:61:b9:db:98:9f:4e:6d:49:76:31:67:6b:0d:
                    bc:de:c1:02:c1:4f:78:76:52:45:9b:72:3d:f7:18:
                    fc:44:96:d1:a6:94:e6:e9:26:ab:01:d6:94:6c:29:
                    84:69:ab:43:79:e6:17:40:b4:69:64:e0:b4:f3:bc:
                    43:2b:d0:a0:e0:35:49:4f:3d:52:d3:47:33:64:c3:
                    37:9d:14:f9:8c:18:94:ae:48:8e:7d:8e:0b:19:dc:
                    bd:ec:5d:97:ec:0a:a7:df:63:64:41:f4:96:2c:7d:
                    ae:27:35:2a:92:52:c2:b3:92:fb:70:66:82:19:71:
                    a9:4d:f3:ec:b1:7d:3d:6a:de:0e:c4:8b:be:f9:47:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:59:14:DD:86:ED:FF:B1:81:95:86:9E:39:C2:BC:9B:9A:55:75:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30f1888f-2ad5-360c-8b83-3ff9ec70fecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e2:8b:37:2a:fd:89:4d:35:40:cd:15:1b:82:60:24:25:55:
         fa:15:92:cc:d3:92:b1:34:b2:68:cb:86:08:fb:d6:c1:e5:63:
         54:91:8c:51:17:75:5e:1e:60:ae:bb:27:50:16:b3:40:d9:77:
         4e:b1:6c:3f:39:4c:35:1b:32:97:da:51:95:74:47:28:af:f4:
         32:d5:2c:96:de:71:75:7f:a6:21:45:e1:3e:a4:56:00:3e:f7:
         6a:b0:3e:f3:da:0d:c4:34:5d:11:7c:cf:c0:a3:9b:5c:41:5f:
         db:3a:ec:dc:c3:55:94:4e:ee:c6:b9:77:6a:ee:d5:f4:13:ee:
         24:11:14:86:32:af:a6:27:c7:72:35:81:c9:3c:f9:0c:a6:9c:
         e8:84:e6:5c:67:27:38:f6:e0:11:b2:fa:96:e1:86:b6:83:99:
         06:d3:30:cd:74:e3:61:fd:34:3b:5d:9b:ad:48:41:e6:46:5c:
         ac:52:c9:c7:d8:b1:86:32:6d:60:7d:74:42:33:57:d7:2c:ab:
         ed:29:b8:49:a4:84:89:6f:45:02:bb:17:1b:a4:29:99:6c:a0:
         36:79:2c:c0:c7:b3:55:70:96:f3:25:5c:15:1c:aa:bf:57:85:
         6a:7b:bf:6f:fd:d2:8b:30:23:8d:29:c7:d9:a0:07:10:f7:8a:
         0b:5c:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:15:36 2026 by rpki-client