Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa
File:                     af7ea332-111a-3537-8c3c-7ca28606f180.roa (raw, json)
Hash identifier:          m5gmCfQ+EIADAJs+qcSF5MAhCvDnoX5Jp+WPPjGfccw=
Subject key identifier:   38:8E:84:A6:51:AF:46:4A:B7:F8:84:51:C4:69:B1:ED:52:57:5D:1D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EB84740B2F18E46E050941D80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        192.171.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:40:b2:f1:8e:46:e0:50:94:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=98f559d5-4a8a-455a-b70d-fbc7f4f30370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:40:2e:db:16:c2:61:f4:6c:7e:4e:56:04:
                    70:a8:e8:3d:e8:07:6c:46:3e:8d:17:58:8b:fc:7f:
                    e2:b9:b3:e5:09:a7:0b:57:1d:8d:77:49:68:c8:c0:
                    10:c6:be:15:cd:50:35:11:53:af:3b:ab:e4:fb:4a:
                    b0:d7:9e:f4:02:ce:22:75:64:a1:4d:3d:f2:0f:e5:
                    69:a2:21:32:50:40:35:53:d1:06:1a:5f:82:7f:18:
                    a6:00:1c:13:ba:92:65:f2:59:c2:8d:41:10:3d:59:
                    1c:3b:a4:92:15:ba:fa:b7:62:8b:45:e9:9b:1c:9f:
                    2b:2f:22:c3:3e:f2:3e:60:69:6e:68:55:04:2a:a7:
                    fd:af:cb:7b:21:c9:c1:ca:8c:ed:c0:60:c9:44:80:
                    19:c6:46:42:c3:c2:18:f1:4e:38:e5:28:7c:ee:71:
                    29:73:22:08:59:62:50:c3:9d:bc:59:cd:2c:0c:5c:
                    1b:0b:56:ac:b5:f1:b5:57:71:c2:c1:0f:ed:66:9b:
                    e3:bd:28:3c:30:a4:2e:a7:3d:23:1a:45:70:37:fa:
                    d7:0c:65:22:52:0f:4a:f9:ab:41:9e:96:89:c3:29:
                    ce:f2:d8:a5:18:eb:b3:0b:f4:8c:9e:3e:a9:64:8e:
                    0f:0b:20:24:80:d1:83:2b:55:ac:2b:4e:d9:6f:e7:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:84:A6:51:AF:46:4A:B7:F8:84:51:C4:69:B1:ED:52:57:5D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:35:4c:41:1d:3c:a5:fd:80:81:15:e7:52:d1:a1:45:47:
         40:3c:de:f2:a3:98:1c:b8:95:e8:bd:db:05:b3:d2:68:45:dc:
         32:55:a6:3b:36:f9:cc:9b:52:ef:dd:da:3e:b2:5d:29:1b:3d:
         b9:ae:f8:a7:7b:7f:62:76:59:12:69:00:2f:82:93:30:01:24:
         b5:47:46:cb:cf:36:8a:f5:8b:a7:38:b8:cf:83:74:59:59:91:
         94:e1:d0:85:6d:2b:ae:2b:2e:4d:2b:2a:f8:df:3e:df:0c:ac:
         9c:a9:9e:88:9c:03:b3:c9:b6:e0:d4:62:b6:80:66:70:a7:4c:
         85:67:7e:54:2a:a6:c7:67:c2:58:28:dd:f2:40:aa:f2:52:c7:
         22:ec:7b:ee:48:29:63:6b:14:29:6d:c4:78:b0:d4:d4:55:77:
         b8:2d:fc:6f:58:6f:ff:ac:10:70:9b:cc:6c:a6:2b:f8:a9:41:
         4c:37:85:50:82:68:9a:00:c4:9e:89:5b:db:56:0a:cc:4b:4b:
         bd:2a:07:97:f8:4f:08:65:e1:bc:08:26:2d:b0:4a:54:27:1c:
         45:97:99:a4:08:db:28:68:00:c3:1e:60:8a:8d:54:2a:0f:7f:
         40:b1:47:f3:a3:47:c7:74:c8:e6:45:92:0f:87:3d:f1:01:b4:
         ea:22:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:52:13 2026 by rpki-client