Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa
File:                     1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa (raw, json)
Hash identifier:          4twRFQX8cLVRrcdxPalKnrPbLhpCwIaGgLaBMH783Gw=
Subject key identifier:   83:CF:FF:85:CF:45:FA:03:15:B5:0E:F6:21:EC:9D:E6:0B:1A:DE:92
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F4328584EB8471A0345624F67D0137060
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     54054
IP address blocks:        192.110.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:1a:03:45:62:4f:67:d0:13:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=06f121c8-d28e-4643-9fdd-fad6a3567821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:e7:2f:37:ef:6b:85:89:15:74:f8:a5:21:
                    54:e5:0b:2b:9b:0a:82:0a:5d:70:46:a4:81:b0:fa:
                    31:33:3c:41:83:38:9d:b1:d6:29:d8:f5:51:74:f2:
                    fe:74:30:11:4e:79:7b:d8:4c:c9:f3:0f:66:33:e8:
                    93:d9:aa:7b:52:5a:2e:45:0c:c1:ad:95:54:10:c9:
                    7b:9d:68:61:d3:a1:d0:b3:f8:ad:3e:a4:76:58:b5:
                    ca:2b:e0:ba:72:e6:76:60:a0:7c:a6:ad:53:ee:05:
                    da:9c:87:cc:79:85:e0:fc:f4:7a:fd:55:bc:bd:30:
                    f8:be:95:9a:87:96:82:7f:34:94:cc:77:20:ca:ab:
                    85:cf:8c:a7:c7:11:5f:c0:df:db:82:61:e9:09:e9:
                    82:0b:5d:f5:42:99:3c:d5:b6:70:a5:bd:94:14:fe:
                    86:64:1d:e2:13:9c:05:bc:e0:51:37:d5:1b:9b:e2:
                    8f:49:df:fc:00:3b:32:02:82:ff:85:af:42:8f:ef:
                    f9:ff:87:91:1b:a1:3f:7e:24:86:9a:83:7b:0e:07:
                    79:39:4b:53:27:b0:6b:14:19:e0:cc:71:70:05:0c:
                    56:d6:9d:0c:c2:6c:bb:e1:01:4e:14:24:e2:14:5f:
                    60:06:04:e5:72:f0:d4:79:5d:20:70:a1:32:68:2e:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CF:FF:85:CF:45:FA:03:15:B5:0E:F6:21:EC:9D:E6:0B:1A:DE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1a2ab8e2-5898-3fff-81e7-40e601595b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.110.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:d1:c1:5c:74:dc:49:9e:a9:aa:f9:48:36:4c:6f:bd:ce:
         b2:9a:08:12:5b:5b:30:50:66:ae:83:6e:10:f6:69:46:46:1b:
         0d:fc:4e:de:9b:8d:b5:1e:81:10:ab:c4:05:fd:2e:f9:6d:c3:
         7a:08:78:d2:d4:de:55:24:30:47:1a:ae:0b:70:97:8e:f7:7e:
         01:2a:7b:cb:bf:34:5a:a7:b6:d2:1f:ab:51:98:d6:03:2a:eb:
         93:8c:68:47:68:86:fd:69:80:ab:05:6d:b1:b8:6a:2f:99:e6:
         7f:86:42:df:eb:e3:88:72:39:69:b4:92:95:25:44:12:36:92:
         85:8b:a2:c6:06:36:57:9e:d6:2b:70:23:54:de:cc:50:00:94:
         8b:dc:db:c1:94:b2:f0:19:18:5a:75:a0:a3:d4:76:28:00:ad:
         3a:c3:80:df:f5:7b:2f:e4:58:cb:6d:56:ea:60:10:36:ba:1e:
         55:4b:5d:e0:4d:ab:f6:29:67:f6:b5:39:45:ad:f5:be:86:88:
         d7:d4:0c:82:a3:dc:68:59:40:a4:e3:a0:87:84:3f:0a:ba:d4:
         78:32:7e:6a:1b:8b:7a:36:ce:5b:14:78:51:36:03:ce:27:c7:
         9f:91:35:7b:b8:dd:5f:9e:c8:34:e2:65:20:47:bb:e8:26:15:
         f0:79:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:26:41 2026 by rpki-client