Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5c94ffe7-7434-3e8d-9d68-d0fa4dcb09ab.roa
File:                     5c94ffe7-7434-3e8d-9d68-d0fa4dcb09ab.roa (raw, json)
Hash identifier:          ea3DK1CU9Q2e79G4ODQl3vbFiGbnpbkZcmQBBQxwZ8g=
Subject key identifier:   94:30:1C:CD:C8:66:6D:60:9A:08:02:51:C1:5A:50:BA:86:A9:9D:0C
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584F7BB2EE95B0F5FFC67121E100
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5c94ffe7-7434-3e8d-9d68-d0fa4dcb09ab.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     20278
IP address blocks:        104.237.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:ee:95:b0:f5:ff:c6:71:21:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=c7192df0-bcb1-4271-9766-9558f3e20717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:83:f9:80:8c:c5:a3:8c:2a:a2:18:a4:09:fa:
                    73:34:70:40:88:17:e9:e3:c1:5a:a3:b9:eb:3c:1b:
                    f6:eb:34:2b:fe:45:94:d6:07:c1:fa:f7:99:e2:55:
                    6f:e1:62:42:a1:ce:d8:7a:4c:cc:5a:39:38:1c:27:
                    2f:30:6a:df:4a:a7:6e:aa:d5:88:2e:c1:aa:6a:5f:
                    9a:0e:78:d6:12:4a:72:bc:df:78:61:53:dd:8b:3f:
                    86:61:fe:58:1b:3a:dc:c8:e2:4e:df:0e:38:55:f4:
                    82:33:61:de:f7:b8:fa:18:69:ad:43:ba:20:92:f5:
                    2c:b1:1a:30:3e:9b:05:97:44:2f:1f:80:a7:b9:c2:
                    77:ce:53:54:a3:27:09:5d:b2:de:60:98:88:48:71:
                    ec:8f:07:6e:ae:42:4b:16:32:e1:a6:6f:6d:a4:fa:
                    07:4f:c0:82:5e:b2:6c:d4:ce:f5:41:08:6b:38:1e:
                    93:5b:54:b1:2c:dc:43:82:12:2e:e0:22:f2:e7:78:
                    5a:6c:37:fb:d3:79:df:91:d3:bc:1e:fb:4c:5b:bc:
                    04:51:ab:54:a6:ed:74:69:40:08:b2:ea:76:8d:f7:
                    1b:f5:1b:cb:97:d6:86:fc:f3:56:a0:e5:ca:85:91:
                    cf:70:3a:36:0a:95:67:89:97:4f:71:d6:fe:0a:43:
                    ba:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:30:1C:CD:C8:66:6D:60:9A:08:02:51:C1:5A:50:BA:86:A9:9D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5c94ffe7-7434-3e8d-9d68-d0fa4dcb09ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:23:7f:0c:2b:fa:77:95:7e:81:aa:20:9b:bf:34:da:2d:dc:
         60:43:65:73:28:c4:16:17:7a:ab:a5:d5:fb:8f:52:16:68:c8:
         f8:4c:d1:13:fd:6a:0b:81:21:6b:08:46:05:17:eb:e1:97:f7:
         e3:99:1f:b4:25:c5:52:22:46:8b:db:eb:2e:23:5c:03:a1:84:
         43:7d:ce:93:8e:7e:43:a0:dc:50:6b:53:2a:6f:f9:29:5d:97:
         c1:ef:ab:90:94:9a:25:2e:5a:b9:89:cc:bf:d1:a1:31:70:6d:
         77:f7:31:cb:02:49:bb:00:f2:5e:07:73:ac:99:b7:63:12:54:
         d3:31:6b:d9:6f:03:a1:e0:f2:31:f6:a7:e6:7c:c1:53:86:1f:
         05:bc:04:2f:c7:fc:20:e0:21:15:9a:2e:80:84:3e:18:c2:44:
         70:c3:7f:07:3a:70:cc:90:86:74:2b:b7:3f:99:7f:8e:26:11:
         f1:0d:02:e9:a3:ba:98:7e:96:d4:fe:55:bc:24:bf:d9:a2:a7:
         9e:e1:4c:80:41:54:ec:6f:c9:63:99:4a:4f:0f:8d:36:85:9d:
         aa:a8:67:37:6e:1e:2b:72:17:69:e6:d3:32:77:90:5b:a8:6f:
         34:c6:c7:6f:42:06:e9:1c:a5:63:77:18:6e:59:de:5f:a7:7b:
         a9:78:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:10 2026 by rpki-client