Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa
File:                     cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa (raw, json)
Hash identifier:          bgNIvq/fQa6oEcnMQDIaJUYnR8pPdFzKHGBDwkuRx2k=
Subject key identifier:   88:42:21:5C:8A:B4:D8:AD:E6:E2:BB:AF:C0:D5:36:BC:5F:C4:46:46
Certificate issuer:       /CN=ce6a531d-4e38-485d-9236-07a5daf2b689
Certificate serial:       010D0C9F4328584F4975652AEC24CF1D74967A80
Authority key identifier: D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        192.34.32.0/23 maxlen: 24
                          2620:11b:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:65:2a:ec:24:cf:1d:74:96:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce6a531d-4e38-485d-9236-07a5daf2b689
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59cd0a16-4e7e-494a-a1d0-a0793790b683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:66:80:56:91:05:8e:be:a9:30:e8:0b:b5:
                    ca:ff:e7:e8:2e:51:95:59:bc:40:57:68:57:41:44:
                    2b:7d:13:02:51:67:7e:a1:7f:ed:be:e2:bd:cf:5a:
                    15:2e:e3:3c:d6:9d:e1:9f:7f:8e:48:13:e6:00:28:
                    71:a9:e5:0c:d7:ac:91:11:64:18:59:9c:a7:64:14:
                    3d:dc:02:7e:e9:6e:f5:b3:62:da:b1:40:db:d7:98:
                    5d:80:2a:85:b4:bd:6b:49:1b:2a:3d:ca:13:d7:6a:
                    55:f1:68:b6:4b:7a:5e:65:10:19:25:97:ca:53:f0:
                    86:a5:a6:37:1f:e6:12:63:1e:5d:ae:1d:7e:9b:26:
                    77:52:e9:2d:b4:e0:a9:54:c6:4c:0b:0f:07:02:ec:
                    07:ad:67:f3:8b:69:9f:18:db:f1:16:91:90:92:6d:
                    88:d3:0e:66:71:6e:10:bd:3b:f3:46:9f:07:f4:33:
                    de:35:e8:cb:6e:c8:38:bf:cd:51:77:65:1a:2f:2b:
                    77:d0:6e:f0:ee:9a:dd:6c:a1:9b:1f:8a:90:97:e4:
                    dc:a5:56:e6:a3:7e:f9:30:56:ca:c3:77:ab:74:0a:
                    31:a3:c7:ed:18:7a:95:54:5b:f7:0d:18:cb:a9:6b:
                    f0:43:04:d2:cb:e4:08:ab:ac:79:9e:df:2d:fa:dc:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:42:21:5C:8A:B4:D8:AD:E6:E2:BB:AF:C0:D5:36:BC:5F:C4:46:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl

            X509v3 Authority Key Identifier:
                keyid:D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.32.0/23
                IPv6:
                  2620:11b:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:40:27:5b:75:78:9c:8b:b0:e2:aa:b6:74:cd:37:72:21:
         37:b4:b7:eb:38:8d:fc:0f:0d:1e:8e:ca:b0:d1:3f:d6:7d:9f:
         f5:f9:47:9a:e0:57:db:f5:29:a0:9c:de:93:58:b1:f9:a7:98:
         2e:c4:6d:91:16:a4:24:8a:1d:07:bc:03:bb:60:e5:e3:cc:63:
         f4:46:c1:0d:09:93:c5:31:09:70:61:90:cd:d3:46:26:47:8a:
         9a:60:59:09:e0:fe:c2:f3:1b:73:b9:cc:0f:52:63:e5:b8:53:
         3d:2e:f1:86:31:f0:76:60:c9:28:58:b3:11:64:94:46:d1:a0:
         0a:ff:66:33:e8:83:9e:be:26:37:ee:5f:84:e0:b1:73:d5:35:
         8e:bf:8c:6e:89:d6:84:8e:a0:8b:04:e7:3d:37:cc:5d:05:4e:
         94:d2:8f:36:4c:4f:9d:13:48:3d:ab:9f:1f:f8:4d:9a:64:b9:
         6a:07:80:80:2f:5b:65:16:c9:7a:fa:02:e1:04:d7:3f:ea:b8:
         d2:7a:eb:dc:e4:83:79:b6:d7:d1:22:86:f4:4d:49:e0:c1:37:
         ee:ec:88:30:35:6d:fb:1b:ab:38:ac:0a:8b:f7:42:e1:4b:ea:
         5b:1d:77:ba:41:37:36:39:29:55:b8:e8:0b:70:f8:37:2e:61:
         fd:b2:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:15:27 2026 by rpki-client