Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b/09c139c3-dcef-30f0-ba02-fd33100cf577.roa
File:                     09c139c3-dcef-30f0-ba02-fd33100cf577.roa (raw, json)
Hash identifier:          vSP9AVH8rahQzTqpjNQ+GHZ8jyBLDzg98mXgxgKVoX4=
Subject key identifier:   10:0B:4A:A3:0D:33:AA:DC:97:E3:2D:B4:CD:C5:8D:D5:FB:B9:5A:2E
Certificate issuer:       /CN=63e0b3b4-fbeb-4e30-8119-ab93a41c448b
Certificate serial:       010D0C9F4328584F89A84C56771285DC7AB8CE00
Authority key identifier: 07:6E:D0:BE:08:B6:DC:69:31:CC:20:1A:3C:B3:9D:6A:F9:35:5E:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b/09c139c3-dcef-30f0-ba02-fd33100cf577.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     5651
IP address blocks:        192.159.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b/63e0b3b4-fbeb-4e30-8119-ab93a41c448b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b/63e0b3b4-fbeb-4e30-8119-ab93a41c448b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:4c:56:77:12:85:dc:7a:b8:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e0b3b4-fbeb-4e30-8119-ab93a41c448b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=a060d408-ec90-498b-b9d2-6787ef48beaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:32:f2:c3:b2:2d:c6:8d:be:54:c1:4f:f6:88:
                    af:ef:b2:0a:f7:52:22:95:ca:f8:0a:0c:fb:2a:82:
                    c7:2c:37:56:09:9d:88:69:ca:1e:c9:d9:44:86:90:
                    e7:84:70:56:47:db:3c:21:cd:a9:62:63:52:2d:0d:
                    28:22:0c:3c:85:a5:ac:28:28:2c:21:1c:2e:a4:0a:
                    c3:52:ed:fa:61:43:18:c8:6b:55:fa:14:3e:58:96:
                    b2:04:73:64:2d:f9:9d:fc:42:1c:3b:e2:06:29:01:
                    62:87:c5:c9:97:50:03:51:be:5e:65:5e:2e:7d:74:
                    07:06:4e:17:24:7f:41:b7:5a:ee:c8:08:b4:8c:b6:
                    f7:bb:b4:7d:6a:9a:7c:04:c1:89:0d:e4:c3:5b:c0:
                    1e:94:74:43:f1:91:be:90:97:e8:3e:c4:25:a9:eb:
                    89:f7:90:3b:57:32:65:73:7d:ae:7a:f2:ba:28:27:
                    30:0a:82:58:d6:0a:05:95:70:55:8d:d1:ab:ab:1e:
                    84:69:25:7e:0d:81:24:ff:c7:15:b7:bb:35:78:3e:
                    5f:28:c0:38:79:e5:94:d0:17:e8:e1:7e:b2:27:3c:
                    51:da:a2:95:53:89:69:e4:96:87:6e:28:54:21:2f:
                    43:ef:e9:c8:9b:94:9c:8b:d9:ec:e6:6f:11:eb:f1:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0B:4A:A3:0D:33:AA:DC:97:E3:2D:B4:CD:C5:8D:D5:FB:B9:5A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b/09c139c3-dcef-30f0-ba02-fd33100cf577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b/63e0b3b4-fbeb-4e30-8119-ab93a41c448b.crl

            X509v3 Authority Key Identifier:
                keyid:07:6E:D0:BE:08:B6:DC:69:31:CC:20:1A:3C:B3:9D:6A:F9:35:5E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/63e0b3b4-fbeb-4e30-8119-ab93a41c448b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:07:eb:e7:23:eb:b1:79:14:72:27:2a:b8:62:57:6b:ed:
         eb:cc:76:b1:22:10:61:dc:95:7f:95:bf:f2:4a:45:03:b8:f6:
         1a:19:59:a7:10:78:d7:a0:c5:ee:85:07:b4:e7:a1:c3:05:8d:
         d1:55:4d:48:2a:69:4a:ea:45:ae:de:cc:1f:fc:1f:0c:c6:6d:
         f8:b9:4a:04:11:4c:52:46:ba:c4:69:69:7d:9c:10:0a:79:50:
         74:12:96:ce:90:34:11:d0:07:e9:02:4b:9c:7c:0d:0c:96:21:
         b4:f7:f0:63:99:65:ad:85:b3:62:ae:f8:01:ac:44:ee:27:37:
         ff:5a:bb:5c:3f:34:c9:77:f5:d4:c0:88:04:70:eb:e0:cf:3d:
         e4:33:dd:5f:34:c0:b4:31:10:8f:f8:7f:a5:59:d1:a2:d2:94:
         f2:8e:5c:f1:17:95:0f:39:f2:69:17:f1:fc:6e:f8:75:6c:17:
         8e:76:b0:38:d4:7d:6e:d7:a9:c1:a1:b7:5c:7b:b5:1a:18:e3:
         d7:a1:db:71:f2:73:7d:1f:cc:7b:cf:4d:41:41:69:61:0d:72:
         ad:b9:39:c6:55:8e:dd:57:bf:d3:da:96:c3:93:1b:2a:95:af:
         1d:61:9b:8a:6a:ae:e2:a3:6b:ef:8d:e8:a6:36:02:41:5f:37:
         97:fd:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:38 2026 by rpki-client