Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c4a089f-763d-3045-abcb-9eb68db7e3ee.roa
File:                     3c4a089f-763d-3045-abcb-9eb68db7e3ee.roa (raw, json)
Hash identifier:          EHfjVYoDZwHzJSGFdtJg9/B76AApL8CL9kUQDcKCaoM=
Subject key identifier:   9F:FF:DA:8F:28:60:CA:77:46:B6:7F:5D:7C:56:79:D4:3B:80:43:39
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584F49886760D0DD8488BD1E2280
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c4a089f-763d-3045-abcb-9eb68db7e3ee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        192.135.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:67:60:d0:dd:84:88:bd:1e:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=84878b7e-bd72-4b05-8b12-24efbb140f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:04:f9:f9:9a:9d:be:0c:bf:a8:52:9e:e2:
                    92:f7:5b:f3:a8:d1:b0:09:46:bd:64:a8:67:8f:8e:
                    58:b8:ea:71:64:6f:84:c6:73:b6:67:6a:f8:f5:16:
                    90:69:8a:3f:63:25:69:f9:b3:5d:56:e2:ba:52:ab:
                    27:54:e6:54:ba:d0:53:c9:4e:ce:08:c9:e4:da:b6:
                    28:95:76:e4:69:17:b9:8f:67:da:95:d6:12:07:19:
                    6d:c2:2d:39:8d:54:8e:63:38:81:16:85:9b:5a:dc:
                    0e:e5:50:0e:1f:cd:a1:a2:7f:8a:8f:d7:61:f6:0f:
                    a8:96:1e:46:d8:f8:fd:85:c7:e2:96:c0:5a:8f:cc:
                    24:b8:66:c1:6a:4e:6f:ac:d5:62:8d:cb:08:57:2e:
                    3b:90:cf:1a:dd:c6:e5:a8:bd:ea:05:79:45:a1:6e:
                    bf:29:55:37:fd:61:8b:dc:92:d0:51:f6:8a:38:53:
                    84:4e:7c:77:45:a2:be:f5:14:a1:27:1b:db:c9:e5:
                    2a:b0:49:52:58:c0:09:6b:a7:00:f0:6c:e2:36:9f:
                    d7:3a:7a:67:cd:b6:e1:1e:75:21:fd:93:77:ee:e3:
                    95:44:46:ab:e2:2f:35:7e:fb:6b:ec:15:e2:90:e5:
                    33:ec:ba:c3:bd:94:76:ae:b5:03:0f:5d:6c:4c:6e:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FF:DA:8F:28:60:CA:77:46:B6:7F:5D:7C:56:79:D4:3B:80:43:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c4a089f-763d-3045-abcb-9eb68db7e3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f0:be:26:09:02:41:70:13:ea:ef:26:a8:ed:c4:f8:b6:07:
         3d:0e:f0:a0:2e:ea:1b:35:f7:74:d5:e0:0d:13:09:ca:19:62:
         46:39:3b:77:12:c0:ff:96:53:3e:ad:fb:ab:5f:38:67:a5:ad:
         e4:72:ab:8f:d3:50:7c:68:3a:37:fa:e3:e0:a7:54:5d:23:0f:
         93:09:a0:89:06:ac:c0:85:8a:b4:83:e1:2c:32:da:f7:9e:47:
         18:92:db:3e:ed:e8:a4:d7:be:e1:a4:42:fa:0a:0d:ad:ca:ca:
         a1:71:9c:ed:66:e1:db:40:82:c3:12:40:47:be:89:4b:f2:72:
         9e:e9:0d:73:74:a0:67:f6:1e:8e:f8:58:7d:ae:0d:c1:6c:33:
         12:bf:f2:6d:77:08:cb:e4:50:79:ba:8d:41:66:50:f4:3b:b2:
         3e:c7:93:8c:08:cb:00:13:01:06:8c:2b:57:54:b0:1d:c2:2b:
         9f:4d:b5:01:e4:8c:e1:6b:03:9c:0c:d1:4c:c3:a1:9b:63:07:
         0c:b6:43:1c:86:78:a2:32:e1:47:04:f8:76:eb:f7:3f:ea:0a:
         bf:bd:c4:5c:1f:7d:1e:55:02:81:a8:a3:fc:5b:96:ee:53:d3:
         b4:0f:ca:16:05:b4:67:86:58:9c:43:f9:25:40:81:69:7e:32:
         35:53:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:30:00 2026 by rpki-client