Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67b906e2-4a16-38bd-87df-7cdc1135d6ad.roa
File:                     67b906e2-4a16-38bd-87df-7cdc1135d6ad.roa (raw, json)
Hash identifier:          eJEtMmmBrbduOZ2qKjmFKUltATsRqkZT8Nj0OasdlnM=
Subject key identifier:   73:9F:D3:1C:90:CA:51:CF:74:04:86:A9:CB:19:28:56:B5:D3:BA:99
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5A3301D893711631B9915600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67b906e2-4a16-38bd-87df-7cdc1135d6ad.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        192.171.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:01:d8:93:71:16:31:b9:91:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=8c90023f-da17-47fd-b54c-e5fe2381afb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5b:b0:c9:d3:88:42:22:a8:8e:7c:57:8e:11:
                    72:46:8d:a7:07:4a:0e:2a:d6:5c:c5:b6:eb:15:a5:
                    d0:88:79:e8:96:e3:f5:ff:6d:fa:84:c2:84:a0:4b:
                    f8:c9:51:a2:eb:83:9a:ad:75:3b:7d:6a:f6:f4:88:
                    61:cf:6f:98:a5:62:5f:e9:35:1b:1e:ea:73:b6:d7:
                    20:0d:e6:d8:c1:90:89:5e:b2:60:58:d8:0e:f6:e4:
                    6e:1e:40:a0:97:b8:2b:b7:03:dd:cf:0e:90:aa:a6:
                    87:ee:58:c4:ed:bf:7e:fa:9c:8e:11:a8:8e:b5:90:
                    f8:6b:ce:e9:f3:c4:83:34:6e:19:8c:29:8f:f5:30:
                    71:8b:88:67:16:b4:5e:e0:94:a5:2e:fa:a6:d7:82:
                    fc:f8:6a:ec:68:9f:2d:00:78:fc:90:c3:1d:22:f4:
                    75:f0:fa:6d:79:8d:49:9c:82:91:6e:7d:c8:11:48:
                    13:49:11:c0:dc:4b:e4:03:51:1d:84:c7:2e:b7:88:
                    78:12:bf:82:d6:01:09:68:85:3a:de:ab:f1:3b:76:
                    ed:ca:de:b9:7e:98:f0:68:05:33:cf:b3:17:48:80:
                    29:7e:ad:f5:6a:20:07:db:55:7e:d3:12:d8:86:5a:
                    cb:fa:e2:78:7d:57:e3:14:e2:7d:7e:4d:b6:32:73:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9F:D3:1C:90:CA:51:CF:74:04:86:A9:CB:19:28:56:B5:D3:BA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67b906e2-4a16-38bd-87df-7cdc1135d6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:95:09:bf:fc:9c:60:7d:0a:d7:55:12:98:f0:67:c0:21:
         4f:05:16:d7:01:c3:00:7b:ef:33:e5:da:c1:02:29:88:5d:c1:
         45:7f:df:43:18:95:45:6d:58:e6:83:2b:47:5a:76:ac:17:79:
         8a:3c:14:c9:47:a2:03:e6:19:03:2f:24:b3:c0:3b:c0:28:be:
         de:59:13:d4:da:e1:e1:f9:0e:fe:95:03:90:31:3a:e1:bf:95:
         02:c6:3e:49:06:e2:ab:85:a4:c2:d9:06:a9:93:0e:bc:32:f7:
         ea:e6:9e:3c:96:1b:bf:85:e7:ab:7d:88:ad:f3:cd:15:42:35:
         92:1d:27:d2:70:2a:68:63:fd:dc:f2:c3:6f:5c:bd:7c:18:59:
         89:0d:5c:92:9b:b0:f6:65:70:0d:e1:04:f0:0e:98:cd:5d:b7:
         97:a0:39:ef:0a:54:7b:e4:c0:67:db:32:da:ca:6d:72:f1:be:
         e3:48:a8:7c:ce:c1:f7:cd:e9:38:f9:2e:1e:66:0d:10:ee:9d:
         4e:5e:e4:96:80:df:fc:5e:7b:32:c0:b2:61:75:0e:33:c5:ee:
         a6:14:de:77:9f:a7:f0:53:71:80:c2:e3:5b:38:cb:4a:06:b7:
         43:70:40:35:b8:02:2a:b8:b4:00:f8:2b:be:2e:0f:0b:05:46:
         aa:bf:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:37:36 2026 by rpki-client