Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b7ec4455-0393-367e-8c7e-142fb88b89d7.roa
File:                     b7ec4455-0393-367e-8c7e-142fb88b89d7.roa (raw, json)
Hash identifier:          74jWTBvKRd0So1dlAcmP+JHw5zTuf7hFZw6I5q3iND4=
Subject key identifier:   95:6E:DB:75:BE:90:2F:00:21:E3:02:F6:90:78:C2:3B:DA:B2:B2:A8
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584F49767D32541D20B07974DE40
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b7ec4455-0393-367e-8c7e-142fb88b89d7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3738
IP address blocks:        192.250.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:7d:32:54:1d:20:b0:79:74:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=27b5b2eb-bbe6-4ffd-a026-3f64828da4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:38:ae:95:d2:09:e7:cf:af:f8:d5:83:1e:
                    f4:f9:26:c3:a3:1b:db:1e:0e:cc:a5:37:22:60:b2:
                    59:4b:f3:3e:74:e6:6f:69:07:d7:87:19:a8:b5:bf:
                    5f:87:39:1c:71:8d:b9:62:d6:6c:5c:92:30:db:f0:
                    40:d9:a7:77:c9:df:99:37:5e:2d:4a:e1:5f:0a:f4:
                    27:d5:bd:16:ac:6a:f2:a2:c0:12:39:5e:6d:e8:82:
                    f2:44:0f:6a:d0:bd:3f:7e:f7:7f:d3:76:1b:30:37:
                    ec:ce:a6:0d:b3:8e:fa:08:9c:ad:bf:c4:7c:a3:7a:
                    9f:f4:87:3b:2d:c1:45:66:e4:54:73:8f:9e:9a:ad:
                    0d:89:88:a9:44:68:73:c6:27:21:ce:c2:a2:5b:92:
                    a5:03:9c:5b:69:bf:ae:79:24:04:41:6a:52:9f:60:
                    63:48:02:8b:ef:70:7c:5b:f2:35:a6:f1:bc:5d:22:
                    6c:62:ee:18:9f:42:6a:32:84:33:d1:df:b9:c2:02:
                    d6:3f:0b:28:05:7d:a1:3c:c4:15:cb:fd:57:d7:8a:
                    f0:8d:e5:9e:3f:81:fb:41:8d:ba:13:44:84:38:42:
                    cd:b0:4e:88:69:99:68:e9:2c:c0:c9:37:82:e8:c8:
                    ab:e6:f3:9c:35:7c:bf:e5:2b:5b:91:ac:4c:71:0b:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6E:DB:75:BE:90:2F:00:21:E3:02:F6:90:78:C2:3B:DA:B2:B2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b7ec4455-0393-367e-8c7e-142fb88b89d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:ec:e3:ea:ad:c5:aa:57:62:aa:76:e2:29:66:5d:cb:90:
         d0:2b:c4:76:27:3b:89:8f:eb:cf:4a:75:3b:59:0d:73:d7:6f:
         92:c7:c6:6a:d0:2d:27:b6:e5:9a:35:15:fc:7b:a6:50:e6:0d:
         75:2a:cd:8d:d7:9f:15:4e:9a:a4:4c:9f:e1:08:e7:12:4b:13:
         c2:b5:80:7d:0a:82:00:b5:73:ac:f8:72:38:25:e1:ab:95:eb:
         d9:77:d7:8e:e2:59:b6:79:a1:91:f8:fe:5b:a3:df:58:fe:1e:
         5b:8a:95:1e:e0:64:38:26:c0:c3:9e:e5:6a:89:47:8f:7f:de:
         ca:77:72:ab:b9:48:78:00:e1:4a:08:26:66:f6:36:32:b0:ce:
         25:0e:06:20:17:1f:35:f1:d5:ea:38:77:ff:c7:bf:0a:3d:0e:
         f3:99:e4:27:dd:cf:bf:14:1f:52:41:b1:7f:2a:1b:3c:e5:ca:
         b0:27:86:c9:68:31:c8:2a:1b:a8:ef:23:35:e7:4a:89:0c:28:
         d3:8f:fc:d8:6e:a8:aa:9f:34:7b:f5:a4:8a:39:de:d3:69:9a:
         14:5a:7c:ec:54:4b:d3:d8:58:24:fb:77:39:06:20:8c:31:5c:
         7a:ee:be:11:b1:c6:7b:2b:18:af:35:2c:84:a1:23:a3:78:27:
         11:36:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:12:34 2026 by rpki-client