Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/5999cf9c-cf27-3ff8-afb5-028a5e552e84.roa
File:                     5999cf9c-cf27-3ff8-afb5-028a5e552e84.roa (raw, json)
Hash identifier:          S7CxyCN8BVMqECMyBsBqL6xGhsdr4FJzn/hvHTOCdqM=
Subject key identifier:   4C:18:A1:71:3D:CD:44:EC:AF:64:5B:0B:B6:27:64:26:55:81:3F:34
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584EBDDC55C7BB24D1124BE62810
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/5999cf9c-cf27-3ff8-afb5-028a5e552e84.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     142111
IP address blocks:        192.6.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:55:c7:bb:24:d1:12:4b:e6:28:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=cc0f879c-02d7-4c26-ae31-b3402b51ac98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:58:27:ce:0b:e1:c7:3e:17:89:8f:c5:8d:
                    b1:1f:90:6c:75:cc:24:68:12:af:7e:d9:18:4d:d0:
                    5d:fa:3d:6f:19:78:d1:05:60:55:18:b5:fc:cb:1d:
                    3b:b7:ff:3a:6c:d4:8b:ae:4b:70:5f:7a:84:82:0f:
                    ca:38:e6:b7:82:b7:29:a2:88:87:15:bf:f4:94:18:
                    0d:56:d6:28:87:6b:04:2d:9e:de:05:6e:11:b0:73:
                    6d:00:57:8a:48:e4:d5:a3:b5:58:8b:a9:66:98:3d:
                    e4:f7:bd:4c:45:cc:91:6a:b1:eb:bd:48:de:68:e6:
                    0a:a4:e9:0f:a6:bd:ad:99:49:33:58:15:e1:e8:65:
                    97:9a:25:db:08:6f:ba:c7:08:19:1b:46:c2:ae:c4:
                    0d:e3:6e:e4:27:db:ca:5e:41:14:ae:6a:88:ac:75:
                    4f:eb:08:9c:78:59:52:b7:a7:2b:99:d0:ce:18:96:
                    3d:36:fc:06:23:db:d0:20:e9:e1:95:86:50:61:9c:
                    d8:c7:cb:30:50:cf:dd:67:01:1d:db:66:38:3d:f7:
                    ed:01:4c:78:08:92:e2:06:8e:d9:ef:34:fe:df:97:
                    74:1f:de:01:d2:ce:a4:ee:5a:2b:03:1c:fc:41:a2:
                    fc:f6:75:28:33:a9:90:9e:63:83:8c:20:03:5e:67:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:A1:71:3D:CD:44:EC:AF:64:5B:0B:B6:27:64:26:55:81:3F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/5999cf9c-cf27-3ff8-afb5-028a5e552e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:3f:ba:a1:db:81:6e:e7:c7:2b:03:34:69:cb:b9:31:0a:
         66:60:97:8d:10:0e:75:06:8b:ca:88:d3:ec:b0:77:9a:2b:a8:
         e9:28:16:86:6f:35:7a:b2:62:e7:4d:84:d8:d4:23:3d:77:3d:
         a7:37:34:4a:f9:be:14:b4:f6:3d:c5:d0:25:12:1c:ce:e2:b9:
         f2:fa:28:2c:f0:7c:f6:55:eb:2f:bd:53:2d:a9:26:34:de:31:
         cd:07:de:68:8b:03:8a:ac:a9:57:d9:8d:e3:77:36:88:e2:03:
         bb:2b:55:40:a4:85:42:ca:1f:a2:40:a0:7d:c6:33:d8:56:06:
         ba:a0:fa:1b:2f:db:b5:7b:b8:3b:41:bb:8f:6b:e8:5b:49:39:
         19:95:21:76:de:52:ac:b6:70:c9:ec:e8:67:4a:1d:49:a3:66:
         eb:3f:0a:97:2a:30:7b:65:8f:1e:4a:5e:32:b8:e3:8d:27:e3:
         71:88:e2:68:9f:a3:ee:81:c1:70:a7:42:82:8d:00:03:22:34:
         e3:ce:fe:28:61:aa:66:26:d5:8c:61:22:a0:1c:da:59:5f:7e:
         bb:2c:cf:e7:85:b5:15:a6:c1:e8:6a:25:1c:69:81:cb:5a:8c:
         84:19:b7:18:cf:98:88:54:75:32:76:a2:7d:7d:6b:0d:26:b0:
         56:8a:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:24:44 2026 by rpki-client