Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa
File:                     af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa (raw, json)
Hash identifier:          c+hC/riOlXHqXr3HKjpxPT7rVzX9bWhW60nzjShbUWA=
Subject key identifier:   92:45:92:26:19:1B:15:70:83:B8:A0:CD:77:A0:A9:DD:A8:D5:85:F6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584EC0A7605E36648F1CEDF54200
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        149.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:60:5e:36:64:8f:1c:ed:f5:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=55145b82-3ba8-426a-9aab-196800a58d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:30:87:16:bc:29:42:7b:9b:71:83:e9:0f:
                    18:0b:fd:1f:b9:67:48:47:fb:5b:f0:28:d3:54:1b:
                    3e:26:48:dd:72:a9:87:f7:99:7e:eb:f7:cf:0f:d4:
                    e6:aa:8c:9a:8f:a2:a0:ac:70:4a:e7:28:5f:90:97:
                    0b:59:01:a0:08:98:02:dd:12:42:e0:a8:c6:f0:d8:
                    7e:78:af:2b:f0:50:3b:aa:c5:c7:ea:b0:89:97:dc:
                    fb:1e:d2:02:d5:eb:6e:13:55:7b:7d:e5:11:bf:9d:
                    08:88:28:88:96:50:3f:0c:12:c7:1a:ed:ab:eb:2f:
                    81:64:b0:25:76:ca:10:dd:c2:07:d5:8a:e1:6b:89:
                    a9:3a:3e:73:1c:eb:bb:a1:cd:2d:e7:6c:43:75:f8:
                    a4:3e:68:50:7a:8b:d0:b1:ad:20:18:62:02:52:9f:
                    ba:63:cb:4b:d1:b7:10:ff:4f:c9:1b:98:9b:e9:42:
                    b1:1b:73:76:d4:e1:41:c5:0a:8c:bb:63:55:3b:33:
                    3e:2c:0e:81:70:53:bc:52:fb:76:00:e5:65:c0:10:
                    a4:c6:0b:1e:1a:0d:5f:97:e5:a1:5e:0f:8d:21:35:
                    6d:e6:83:e5:aa:8b:f8:b8:37:35:5f:15:ac:45:ae:
                    66:d5:ec:fb:44:4d:1b:e6:8e:30:76:f9:a4:39:cf:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:45:92:26:19:1B:15:70:83:B8:A0:CD:77:A0:A9:DD:A8:D5:85:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a7:fd:4a:4a:8f:de:65:5d:89:67:28:f0:92:d1:47:97:81:
         3b:cc:c3:31:d9:4c:24:08:01:7e:b3:6d:84:31:f9:76:99:4a:
         2e:b9:de:11:25:a4:80:c2:e1:ac:32:55:cf:d3:de:01:0a:c1:
         dc:e9:06:d7:1d:36:ed:44:28:e2:5a:f3:a5:3b:68:1a:ab:6d:
         37:4d:c9:72:2f:c1:94:73:a1:34:f6:f7:3e:6b:c6:2a:95:fc:
         08:74:e8:9d:8b:dc:8a:32:a5:1e:32:ce:7f:c4:24:5d:f2:76:
         f4:e1:29:58:95:5e:72:71:e0:26:1f:3b:01:8b:dc:e2:dd:28:
         8c:10:21:07:e4:e1:36:a1:64:4c:e1:1e:f1:c7:68:13:55:6a:
         48:c8:4e:a8:10:39:67:46:39:90:48:42:ca:42:66:a6:49:a8:
         f0:ab:59:6e:e5:24:a4:b9:c4:b1:a6:3c:cc:b4:59:2b:6a:15:
         0e:b9:81:7c:6a:fd:5d:1c:78:44:3e:48:a9:14:ae:28:77:30:
         43:c4:1c:97:2d:fa:3a:04:3f:d1:68:73:b8:83:9c:7f:e7:d1:
         4e:35:f6:a3:fb:f5:a5:60:81:8e:93:dc:4d:6d:e9:74:1e:56:
         6c:44:ec:c4:02:1b:8a:9a:a9:95:9e:6e:78:93:75:46:57:b4:
         df:72:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:29:49 2026 by rpki-client