Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/1897cbad-ffa3-3b05-8005-74e02dea96c4.roa
File:                     1897cbad-ffa3-3b05-8005-74e02dea96c4.roa (raw, json)
Hash identifier:          VCmul4MRY9ab2Zk6bY8nuC5ppr5MTHaG+rDb7WjUFJo=
Subject key identifier:   4A:89:01:91:AF:12:E6:5C:A3:AB:4F:78:AD:D2:6E:0A:3E:FB:D8:1E
Certificate issuer:       /CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
Certificate serial:       010D0C9F4328584F5A32DB1117F6CDD23F6A1780
Authority key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/1897cbad-ffa3-3b05-8005-74e02dea96c4.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        199.34.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:db:11:17:f6:cd:d2:3f:6a:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=04af18da-de7c-4201-8f9d-b285b007e72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:f9:3f:b9:40:b7:d0:a5:17:bd:ed:fb:be:
                    eb:dd:7b:58:04:1b:6e:0d:db:94:23:9d:0a:dd:45:
                    ff:49:47:7b:20:b3:39:91:f7:c8:62:d3:66:6c:2a:
                    7b:73:b1:ed:a1:5e:e2:e8:66:f1:30:bf:9e:28:91:
                    08:58:23:e2:83:7d:6d:63:6d:bc:d4:06:6e:8e:d9:
                    69:c7:9e:da:8a:aa:a0:bb:83:8f:d6:9a:b5:39:94:
                    bd:32:2b:1e:fb:26:cc:b1:76:30:19:96:75:70:09:
                    82:a6:e3:f3:4a:38:96:99:a0:29:38:b9:7b:0e:3e:
                    0f:26:b0:6b:22:45:4b:53:fc:c3:4f:d4:e7:ee:e4:
                    e5:85:b9:b0:56:6a:c4:b9:5f:f4:0f:25:23:1e:03:
                    49:d9:c7:15:5d:d9:d9:c7:48:5d:33:e6:f3:a6:1d:
                    77:19:71:05:18:32:53:d1:2b:ba:f1:b8:47:42:a3:
                    3b:be:dd:75:4f:fd:5e:14:e3:63:75:51:39:2a:24:
                    01:2b:6f:0d:dd:62:19:d4:a4:e5:1c:2a:d6:94:97:
                    fe:11:21:fe:71:0b:d8:c6:34:78:95:df:66:9b:46:
                    62:bd:29:96:8c:aa:15:77:49:0f:8a:75:2a:9f:97:
                    75:33:8a:c1:fd:7f:31:14:a6:15:15:61:2c:8e:92:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:01:91:AF:12:E6:5C:A3:AB:4F:78:AD:D2:6E:0A:3E:FB:D8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/1897cbad-ffa3-3b05-8005-74e02dea96c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:de:21:92:9b:ee:f3:f2:dd:87:e6:fc:5a:08:c2:85:8c:
         9f:f2:1a:05:02:2d:67:6c:48:76:5b:dd:3a:bb:70:b3:af:e9:
         86:99:78:c0:e5:a7:17:be:e3:04:97:67:c0:31:cc:0c:ef:41:
         bd:93:a0:92:be:b4:48:bc:30:04:c8:4f:14:83:39:d5:40:f2:
         52:9b:49:1e:a7:dd:42:c4:30:88:5d:eb:97:e7:42:ec:51:2f:
         6c:8c:d5:d9:e7:33:d3:88:d5:bd:f5:34:bf:ce:2d:dd:cc:12:
         9e:b2:47:31:7c:1d:77:0e:10:b2:ea:45:2b:ec:41:ac:52:0c:
         03:78:2b:3f:5d:37:ca:27:7b:9d:14:a7:e6:95:62:75:22:e6:
         ea:37:7a:2a:d4:9a:0f:bd:e4:38:3d:28:ee:b5:0b:1f:a0:28:
         cd:6c:e7:80:47:44:74:d7:3a:45:41:5c:d5:4c:5a:8c:c8:85:
         f8:c9:af:ab:d8:73:0d:45:fd:cd:e3:41:d2:4d:0b:06:fe:84:
         71:4a:2b:c2:d7:82:34:aa:5a:56:21:e6:9b:c3:f5:04:35:8b:
         56:52:58:7a:c3:d4:1c:a3:d9:8a:cc:48:4f:5d:cc:31:7a:5e:
         84:4a:86:fd:a1:86:44:bc:e5:ae:e5:76:7e:f8:6b:40:0f:bf:
         96:5d:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:32:11 2026 by rpki-client