Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa
File:                     9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa (raw, json)
Hash identifier:          RmR15SkR3pDnpvEpST2+Qz7K1xkm6jRlFVzPTRg7Kbk=
Subject key identifier:   90:FA:81:E7:FC:B5:40:2F:50:B8:0A:A1:7B:FD:F7:43:51:A6:91:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EE7BCB05912374E6ECF199400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        192.177.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b0:59:12:37:4e:6e:cf:19:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=68c19fba-c7f0-499f-8344-2f885b5f5c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:6e:73:af:0f:a5:be:ec:4f:68:43:5d:b5:
                    c9:62:24:34:1e:c8:c2:6e:0b:83:7b:bc:f3:71:f9:
                    3b:75:66:8c:fa:fc:a0:91:be:17:6d:75:b5:99:05:
                    ad:0f:7e:1f:af:d8:e1:8a:9f:53:2e:1f:af:be:b5:
                    f4:4d:f4:14:96:7d:c5:e7:e1:0d:7f:09:fa:2c:25:
                    54:75:1e:1f:17:54:9b:ae:88:bc:c9:b0:f6:46:37:
                    76:23:55:23:25:38:38:5f:fb:68:2f:6e:4b:52:3e:
                    2d:55:2c:82:31:d2:1f:e3:e8:65:45:42:46:e2:2b:
                    f6:fa:4a:ba:7d:cc:95:a6:69:46:ae:10:1d:08:a1:
                    c9:84:85:e2:ff:24:73:cf:eb:38:81:15:72:71:f2:
                    41:eb:c6:43:63:0b:b1:ef:d1:78:46:06:53:75:e2:
                    cf:d7:86:bb:dd:58:0c:86:61:c1:15:e5:fc:ca:5f:
                    29:42:0f:16:55:c9:8e:89:a7:78:4f:e9:07:d1:18:
                    18:f1:b1:6a:cf:ff:c0:dc:24:3b:e1:4f:66:00:cd:
                    0f:7e:30:7a:ff:a7:2a:19:f8:25:a1:92:7f:fe:57:
                    8f:86:49:0b:53:60:db:a5:a5:14:dd:6f:7f:bc:ce:
                    f7:f4:0e:b3:32:8b:ea:b2:b5:7b:08:8c:b8:3a:04:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FA:81:E7:FC:B5:40:2F:50:B8:0A:A1:7B:FD:F7:43:51:A6:91:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b3:6d:e4:db:b1:3b:2b:22:df:74:32:d8:8e:63:33:49:cf:
         37:73:83:10:5d:0f:aa:10:35:08:1b:48:b2:7b:54:ac:5b:c4:
         c5:bb:ae:4a:0f:8b:3a:5b:ee:a2:6e:e8:53:8b:d8:e5:07:0e:
         2f:cb:6a:9b:7b:ac:d1:b8:ac:4c:1a:36:12:4b:58:37:2d:50:
         5d:70:69:e2:d7:6b:73:3e:14:67:53:8c:33:0d:55:2b:ec:c7:
         6b:b3:5a:61:8d:ac:6f:54:b7:f5:6a:ed:e9:4a:a3:46:70:ad:
         57:63:94:7c:d9:19:e3:5e:01:e9:c9:0c:c0:32:ab:60:ca:cb:
         20:be:04:7a:dd:5d:79:05:3c:26:cb:50:5a:54:98:a2:a7:dd:
         eb:fa:c5:58:0f:4c:19:fd:9f:0b:a2:ba:7b:8e:2d:6f:5b:48:
         02:1a:39:52:71:80:28:be:a7:25:26:70:4d:86:62:71:6c:b4:
         79:f9:b6:ec:b5:f2:8f:a8:1b:8f:30:77:36:78:92:07:b9:21:
         9b:85:a5:f6:db:66:a0:f3:10:6f:31:9e:f2:a9:a7:d7:97:7a:
         39:b3:e9:94:de:3e:b8:24:da:f4:0e:8a:b8:26:bb:b6:bf:d7:
         c4:81:44:cb:5e:1b:a7:e2:a9:f2:03:a9:7d:17:dd:e0:53:17:
         4f:fd:b6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:14:14 2026 by rpki-client