Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa
File:                     8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa (raw, json)
Hash identifier:          SBVGXSDPQ4PfDa3qyzoBG49c0UkzyVuetDP6AxJJPiw=
Subject key identifier:   68:5E:24:BB:32:30:22:64:C7:1F:74:14:6D:D4:62:0C:F3:03:B8:F9
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F5BD06B6D8F8EB82A9C63BE80
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa
Signing time:             Thu 01 Oct 2026 14:53:57 +0000
ROA not before:           Thu 01 Oct 2026 14:53:57 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     9304
IP address blocks:        192.25.206.0/23 maxlen: 24
                          192.120.124.0/23 maxlen: 24
                          192.170.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:d0:6b:6d:8f:8e:b8:2a:9c:63:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Oct  1 14:53:57 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=ed7f73b2-94ee-4740-8f65-fc9b58325e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:47:0a:03:97:30:7a:9f:d0:2a:3d:e5:26:
                    93:b0:4d:f4:3b:3e:d6:f4:b8:0e:d1:21:09:ca:71:
                    2c:53:c7:07:75:1e:26:9e:02:f3:82:1b:c3:25:99:
                    9c:e5:16:b6:c2:1f:28:2a:4b:c0:46:9c:ec:ca:f0:
                    49:f2:66:ca:fc:f3:02:cd:65:48:1f:76:48:14:21:
                    e3:24:c7:4c:a2:68:0d:2c:65:5c:95:de:4f:1a:d1:
                    10:df:fc:a7:16:9c:95:51:4d:7a:59:2b:d9:08:ac:
                    cd:33:3e:f1:d9:80:18:96:d5:53:82:c2:6e:2f:06:
                    85:9b:1c:9e:99:0f:e9:d1:c7:d6:f7:8b:8a:95:89:
                    9a:ec:37:1f:66:eb:a6:ea:ae:85:d4:e8:91:8c:f5:
                    43:c0:8a:3b:94:3d:b3:df:f0:eb:39:6d:ec:ec:70:
                    a0:05:a4:71:16:bc:89:27:29:82:c4:88:df:bf:70:
                    f4:96:ae:d1:94:85:62:49:4d:de:2d:2e:b8:7f:54:
                    9a:a1:67:7e:51:f8:34:a0:f2:29:53:35:d0:ae:8f:
                    a3:ba:8c:18:36:1c:33:78:9c:7c:8f:6f:43:90:f0:
                    c3:43:44:1a:c2:73:f8:55:c0:7a:35:4f:21:51:af:
                    da:7c:38:24:77:da:29:db:6b:ff:20:9d:7d:72:ec:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5E:24:BB:32:30:22:64:C7:1F:74:14:6D:D4:62:0C:F3:03:B8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.206.0/23
                  192.120.124.0/23
                  192.170.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:b5:1d:9e:60:fe:ea:0a:75:32:a6:28:dd:8c:10:5d:e8:
         31:2c:18:00:a3:fb:d0:6c:e7:46:01:bb:eb:e7:0f:bf:47:68:
         40:cb:56:55:36:b1:0e:4f:0f:fd:42:2c:c9:99:a2:3a:e6:69:
         ee:3d:d8:32:27:59:c1:7f:8f:f9:6b:fe:14:49:d3:35:70:17:
         d2:83:2b:bf:29:34:6b:9d:45:f5:a0:cd:58:88:be:49:a4:d8:
         fc:16:6d:a8:21:c8:33:85:83:55:1b:42:70:47:d6:0e:65:3f:
         61:a2:01:0b:9d:8d:7f:6f:e9:cc:08:0b:ce:50:80:cd:fd:fc:
         81:54:bc:29:64:b1:68:f5:8b:77:ae:02:2e:f3:40:fd:74:64:
         cc:60:dd:c2:ce:8d:ae:1f:92:55:44:cb:ad:77:94:7d:24:4b:
         2e:8a:44:7f:4f:12:0c:54:96:30:aa:24:ec:f9:12:19:ac:b0:
         83:ea:63:e1:60:b3:c4:d6:3e:1b:6f:40:5a:19:83:b0:08:5e:
         ba:9f:7b:f2:b0:ba:8e:dd:25:45:5a:e0:71:09:36:1d:c2:18:
         8d:c9:b6:80:52:24:55:dd:eb:17:29:35:11:12:66:4a:50:65:
         52:82:f5:7e:e5:d6:ab:32:66:c8:4e:0d:7e:66:c3:44:72:03:
         07:76:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:11:59 2026 by rpki-client