Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa
File:                     dab71fff-cbac-3e27-9fc7-f12b013a750a.roa (raw, json)
Hash identifier:          6GBIrW2Ux7BWbxH7H8sofIZaBqowR7+7hKFgd4R0OsM=
Subject key identifier:   3A:A9:C3:15:5B:3A:8A:12:B3:30:3B:1A:C4:A3:67:14:A3:FA:DD:AB
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584ECA6C6F53DD79CAB23BBD5E80
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     55178
IP address blocks:        192.230.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:6f:53:dd:79:ca:b2:3b:bd:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=7d725acd-738d-472d-9e3a-e195a5dc6db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:43:0f:11:a6:f9:da:7a:c3:f3:3b:a8:c2:
                    11:73:f2:ef:b8:d6:a0:68:b3:70:ba:53:38:2b:4b:
                    b0:b0:69:92:9f:89:a1:f1:0e:10:d0:e1:8d:94:4e:
                    f3:2d:bd:8e:c5:5d:36:4a:fd:76:7e:6b:cf:4a:78:
                    be:e8:09:2b:27:cb:fc:f1:dc:26:7c:e7:1a:cf:4c:
                    05:fa:e5:e5:fc:1a:23:34:5d:23:84:9f:ef:c4:21:
                    62:d6:bd:e2:ca:61:cf:e8:b2:28:07:3c:46:28:24:
                    ba:77:68:00:4b:81:2b:2d:54:70:34:c5:3b:f8:13:
                    c8:70:cd:70:a3:14:63:43:7f:5e:36:02:fe:f6:cb:
                    62:3c:90:d8:61:b8:c3:61:2d:54:64:4b:71:7c:3c:
                    40:e5:35:37:6e:b4:02:ad:59:c6:99:4a:82:e7:87:
                    e8:b6:f2:81:8d:bf:00:b1:52:32:9d:c6:fa:8d:72:
                    5d:13:f0:b7:63:9c:5a:d5:51:88:3e:20:be:c8:cd:
                    29:ec:a5:10:11:f1:df:20:c5:b7:5c:cc:ba:b3:1c:
                    be:b2:ce:fa:8b:c6:9b:cf:bd:d7:a8:04:24:ae:2f:
                    18:db:e5:78:bc:bb:62:6d:8c:c7:d2:9f:0a:e4:8f:
                    08:65:31:ad:96:b9:5f:fe:ab:cf:dd:b5:33:ff:aa:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A9:C3:15:5B:3A:8A:12:B3:30:3B:1A:C4:A3:67:14:A3:FA:DD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:98:ba:8f:09:df:f8:27:d3:8f:26:6a:b3:4d:10:f6:a0:89:
         f3:9c:ac:f3:04:31:e8:9f:65:d9:a1:39:11:7d:ea:e5:ec:29:
         4e:27:1b:c1:66:dd:b7:99:b6:39:c5:7f:be:c9:0e:0b:21:7c:
         ca:ae:f3:ec:5a:3c:20:7b:5a:b0:5d:0c:89:86:08:5e:85:1b:
         8d:bf:4d:e7:73:f2:4b:8c:74:57:b6:58:23:2a:c6:75:84:ad:
         c8:cb:9e:bf:78:12:69:ef:d0:bc:22:65:ad:15:56:38:9e:13:
         35:c4:1b:ef:75:0c:d4:50:cd:8e:e6:3c:cc:0f:9d:42:7e:ea:
         51:d6:0f:ce:b0:6e:51:dc:d1:10:eb:3a:5c:2d:88:84:25:1c:
         7b:45:fa:b0:12:17:e4:80:b6:65:44:68:89:14:67:d4:0f:9c:
         51:ce:f4:56:7f:4f:df:40:a8:0b:13:fe:b7:a8:97:16:82:9f:
         23:1a:ef:3f:73:ad:3e:39:dc:78:c2:a3:d2:04:99:0b:ee:4e:
         53:fa:89:76:d7:39:9c:f0:a0:51:d7:2d:d1:20:9d:d8:cd:55:
         16:c5:50:22:a1:e5:56:87:5d:b0:93:69:2c:f0:1f:fe:e0:02:
         15:3d:0a:34:24:ee:77:80:fd:ab:e8:5c:1e:e0:98:33:51:da:
         d0:8a:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:05:19 2026 by rpki-client