Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa
File:                     6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa (raw, json)
Hash identifier:          5GF0nN2TYf7OHE+FUTJotBkCQI95S+MCcowkF+GdR1Y=
Subject key identifier:   AF:56:79:22:80:93:88:4D:C9:CA:74:8D:A0:BC:B1:DC:FE:D0:14:12
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F4328584F7FE2FC902D67D734B6D40700
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     29
IP address blocks:        192.31.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:fc:90:2d:67:d7:34:b6:d4:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=8e711431-b979-470b-9583-4ee94752e3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:57:57:1a:43:e1:5c:eb:bb:f6:5a:06:30:
                    b0:7c:72:4b:69:9c:ca:88:33:40:e3:07:a2:0c:78:
                    e5:62:66:15:72:ee:6e:d9:30:f7:43:8b:be:a0:a2:
                    37:05:23:f7:d1:f5:28:c4:eb:7d:a2:72:b6:af:01:
                    f7:27:35:f3:ca:26:ae:2a:bc:ea:9a:1d:1a:bc:60:
                    53:62:b8:11:51:02:b1:48:c2:27:58:ae:f8:35:8e:
                    b4:f3:7f:b2:ae:25:47:bd:b7:f4:70:5a:b4:c5:cd:
                    6b:a9:8b:d1:4f:05:12:40:0f:9e:78:43:ee:4c:3e:
                    e4:2d:57:89:28:fa:fe:ed:ee:cf:3c:8c:c5:85:3e:
                    97:21:9e:65:cf:b8:93:26:c7:0c:8c:48:36:f1:a5:
                    aa:87:d9:5c:8d:31:c3:bb:89:4e:4b:1b:4f:73:ba:
                    b7:90:4f:2f:e4:e9:79:d4:9a:66:40:1a:25:72:4c:
                    44:3f:54:00:25:af:8a:e6:99:b2:be:96:a0:3d:6d:
                    c3:4c:15:9d:3b:3f:85:78:49:e2:ce:5f:78:be:a7:
                    af:a6:dc:94:7d:de:4e:20:08:19:26:38:3f:d8:21:
                    0f:6f:0a:a5:31:3f:9b:1d:9d:06:dc:30:ee:be:3a:
                    67:b6:2f:da:54:82:61:e3:43:85:88:ce:e6:6f:ea:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:79:22:80:93:88:4D:C9:CA:74:8D:A0:BC:B1:DC:FE:D0:14:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:ec:74:d6:33:08:24:f6:e8:28:8b:d4:8e:57:1e:d6:16:
         ea:ee:01:c0:cd:62:8d:d8:89:a4:da:7c:a1:c7:e6:93:5a:f0:
         b1:4e:73:d3:e5:46:3e:32:f1:be:fa:79:01:c1:a3:af:03:d7:
         5d:32:e2:ae:50:8c:45:d9:d3:c1:3b:28:53:1f:bd:32:7e:af:
         f0:6a:1c:52:79:29:be:5c:fe:cc:f1:53:87:35:48:fb:cb:02:
         10:92:70:bd:1a:70:c7:0b:58:d3:b9:2e:4e:2b:00:13:db:5d:
         a6:96:2c:a9:16:ea:92:3c:13:95:2d:37:4b:94:5e:41:8b:23:
         fd:7f:63:3c:54:af:b0:ac:01:d1:0a:c3:32:70:3f:d4:39:33:
         50:30:08:ab:18:e9:24:a2:45:97:05:f7:8d:06:93:5f:38:f3:
         32:f2:0a:21:a7:4c:c7:53:2e:ee:06:9b:43:49:ba:63:5d:5e:
         db:11:5b:aa:9b:9c:04:0a:7d:f3:47:5f:ba:d5:b9:b6:b8:6d:
         b8:37:2f:6b:a0:0a:46:59:cd:30:51:96:0e:0e:23:8d:55:31:
         e9:9f:0a:a1:a4:e6:35:3a:f6:6a:7e:0e:b7:12:0c:c7:8a:56:
         84:05:d8:87:c8:86:78:7a:0c:a1:b3:36:dd:8e:cc:db:20:d2:
         dd:7d:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:28:23 2026 by rpki-client