Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/17e2bbcc-454e-3da2-8a92-5347a36f457a.roa
File:                     17e2bbcc-454e-3da2-8a92-5347a36f457a.roa (raw, json)
Hash identifier:          a9lsm1I5Udx0Kk/2E3dT0qnCZjgd78MLGLidR6ukVCs=
Subject key identifier:   C3:2A:79:24:91:8F:5E:7B:1C:7C:0D:82:4B:9E:A9:45:9F:A4:7C:12
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F1B6258226115D7DFD46C0A60
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/17e2bbcc-454e-3da2-8a92-5347a36f457a.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     12083
IP address blocks:        192.6.40.0/23 maxlen: 24
                          192.6.58.0/23 maxlen: 24
                          192.6.68.0/23 maxlen: 24
                          192.6.76.0/23 maxlen: 24
                          192.6.92.0/23 maxlen: 24
                          192.6.196.0/23 maxlen: 24
                          192.6.198.0/23 maxlen: 24
                          192.6.228.0/23 maxlen: 24
                          192.6.244.0/23 maxlen: 24
                          192.6.250.0/23 maxlen: 24
                          192.25.236.0/22 maxlen: 24
                          192.151.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:58:22:61:15:d7:df:d4:6c:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=3729889c-c0eb-48e0-9d10-8c80e1d42269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:1c:64:07:11:8c:08:7e:ee:e0:ae:6c:3c:
                    fe:0c:d2:b1:db:3c:9a:09:87:74:6c:8a:ca:c8:40:
                    8b:a6:92:3c:be:92:e5:b5:86:37:e9:74:6b:cd:79:
                    db:c4:b2:ed:0d:00:31:1a:f8:5b:be:58:53:27:74:
                    a9:a0:bb:0e:b4:8a:c1:9b:2c:f6:95:b2:70:f5:af:
                    70:a2:e5:01:f8:fb:7a:e4:8b:31:26:ed:68:41:97:
                    8c:b8:39:9f:ff:b0:92:59:ea:90:e5:42:80:e1:13:
                    27:8a:72:e9:16:0d:e0:c7:93:60:b6:2e:30:1b:e1:
                    62:8b:7d:65:03:ca:68:e9:d7:8f:4e:12:08:c1:6c:
                    db:58:42:83:19:27:94:45:6b:f8:66:69:14:2f:b7:
                    c5:34:e3:d6:ca:d4:41:90:e8:6b:da:ad:85:5d:c8:
                    13:d7:d0:ad:ea:d3:a8:11:a8:1a:b2:a7:eb:56:5b:
                    ba:a3:9d:a4:28:22:ed:f4:8b:3b:a2:51:52:d9:ee:
                    a7:29:6a:29:f1:1d:84:b4:5d:7d:54:74:e3:a7:4b:
                    0c:45:0d:83:62:8d:3f:b9:23:6c:09:a8:e9:aa:b9:
                    2c:3c:d4:ef:18:6c:7a:c2:82:56:b3:c1:b9:9a:4a:
                    bd:bd:98:83:d0:bc:ae:b6:60:99:25:37:e6:c6:b1:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:79:24:91:8F:5E:7B:1C:7C:0D:82:4B:9E:A9:45:9F:A4:7C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/17e2bbcc-454e-3da2-8a92-5347a36f457a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.40.0/23
                  192.6.58.0/23
                  192.6.68.0/23
                  192.6.76.0/23
                  192.6.92.0/23
                  192.6.196.0/22
                  192.6.228.0/23
                  192.6.244.0/23
                  192.6.250.0/23
                  192.25.236.0/22
                  192.151.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:5c:ba:64:8b:de:82:f4:3d:f3:2e:ac:d7:78:ba:19:fc:
         98:8d:a3:d5:02:21:6b:10:54:74:26:35:33:e2:c9:d5:8d:c0:
         36:4c:17:0e:ea:bd:b1:de:23:57:c2:f4:de:62:f7:02:49:45:
         76:6b:52:a8:bf:fc:c3:88:af:45:3b:e2:c0:1b:a2:09:db:0b:
         b6:8f:1e:e1:82:de:6b:84:d9:d1:31:8d:d2:de:c2:e4:05:3c:
         ef:01:fa:7a:09:75:a2:10:b4:22:b8:84:fd:f1:ac:20:1f:4b:
         89:4d:13:54:e3:5b:25:0b:81:f9:0d:cd:a7:b7:3b:27:34:87:
         3d:c5:4f:0b:f7:7c:6b:c2:43:21:f4:67:eb:60:4e:b3:a8:ff:
         f9:b5:ee:5e:f8:be:e2:df:7a:29:68:99:2b:a7:6b:da:0d:1a:
         6f:bf:be:20:c9:01:4a:68:62:6d:b8:d2:e8:93:fa:e9:a4:3e:
         34:15:80:f1:6c:01:82:f1:ab:9c:1c:8d:14:e4:19:48:59:05:
         66:1b:6e:40:f7:30:60:0c:5b:cd:6b:0e:bb:87:18:6c:a4:fa:
         ed:63:72:61:83:9c:c2:b1:a1:ca:90:7e:7d:38:f4:e1:d7:da:
         18:23:38:04:a6:dc:0d:5f:89:00:98:60:7a:18:83:43:99:75:
         a7:2c:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:47:19 2026 by rpki-client