Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/ec2408c1-58ce-3409-8bf6-d0ea61761fdc.roa
File:                     ec2408c1-58ce-3409-8bf6-d0ea61761fdc.roa (raw, json)
Hash identifier:          laSfecpfzh0dqPkFIH5jY1ZBarkgteTaDEgdSeTVElY=
Subject key identifier:   34:44:C9:FF:71:64:5B:83:BB:7E:F1:B0:DC:7E:2C:8A:2C:A9:8F:3F
Certificate issuer:       /CN=4570ac5d-95b2-439d-a982-7c4acd15929f
Certificate serial:       010D0C9F4328584F69CA711922E4511909307A40
Authority key identifier: 39:92:FA:F1:A4:E9:DA:C3:9E:1E:93:C9:5F:1D:DF:05:10:26:A1:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/ec2408c1-58ce-3409-8bf6-d0ea61761fdc.roa
Signing time:             Tue 06 Oct 2026 15:03:13 +0000
ROA not before:           Tue 06 Oct 2026 15:03:13 +0000
ROA not after:            Mon 04 Jan 2027 16:03:13 +0000
asID:                     32756
IP address blocks:        192.139.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/4570ac5d-95b2-439d-a982-7c4acd15929f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/4570ac5d-95b2-439d-a982-7c4acd15929f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:ca:71:19:22:e4:51:19:09:30:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4570ac5d-95b2-439d-a982-7c4acd15929f
        Validity
            Not Before: Oct  6 15:03:13 2026 GMT
            Not After : Jan  4 16:03:13 2027 GMT
        Subject: CN=d818883b-31ca-44d6-9282-fa3569702d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:65:02:41:6e:ac:12:f2:80:0d:44:3f:93:
                    61:45:ae:66:3e:dc:57:b4:bb:87:d6:ef:03:75:4a:
                    6d:73:63:77:e4:10:e2:71:25:93:32:84:0d:cc:60:
                    86:c8:ba:c5:c1:ac:2d:58:c8:b0:47:d6:a6:b0:44:
                    87:c9:76:ad:0b:f2:20:85:4c:bd:d9:39:e3:71:5e:
                    02:41:74:8b:6b:94:ae:6b:9f:4a:81:a9:4f:8f:1b:
                    d1:a1:ed:3b:50:7a:46:6d:f8:8b:22:23:a7:c1:f5:
                    4e:85:61:ea:40:a6:80:7a:04:aa:23:45:b1:31:7b:
                    c2:80:03:1a:10:7d:5f:0a:f6:be:ab:d2:58:b7:90:
                    e0:cf:27:98:85:17:55:15:62:72:3a:67:4a:34:b2:
                    e1:00:f9:32:dc:88:46:9d:8b:8b:21:ec:72:e5:fd:
                    55:ce:4e:d0:d0:2f:2a:a3:7a:f7:91:0c:2f:bd:47:
                    48:7f:8f:11:6d:4e:e6:e3:f1:14:af:3b:78:4a:84:
                    d9:b5:81:13:5f:d3:e4:16:f5:7c:8b:dc:fb:ac:dc:
                    57:23:06:a5:0c:82:1e:ae:3e:22:ea:2d:f0:bb:6d:
                    ea:3c:9f:89:d1:31:9f:58:df:52:b0:d6:b2:75:bd:
                    1b:96:f3:e3:3a:ac:e7:32:6c:ce:03:ca:a6:e8:35:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:C9:FF:71:64:5B:83:BB:7E:F1:B0:DC:7E:2C:8A:2C:A9:8F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/ec2408c1-58ce-3409-8bf6-d0ea61761fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f/4570ac5d-95b2-439d-a982-7c4acd15929f.crl

            X509v3 Authority Key Identifier:
                keyid:39:92:FA:F1:A4:E9:DA:C3:9E:1E:93:C9:5F:1D:DF:05:10:26:A1:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4570ac5d-95b2-439d-a982-7c4acd15929f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:57:2a:ab:78:ba:c7:ad:a4:85:8c:b2:3f:94:cc:5f:f5:
         e6:24:01:e8:f4:49:9b:43:1d:39:d8:96:b4:f0:08:b2:de:52:
         b5:79:3c:00:ba:74:57:2d:86:22:28:62:c2:8c:ff:9a:b9:7d:
         70:3d:27:9a:01:85:d4:f2:66:4d:76:a8:86:50:01:1c:d0:a2:
         89:12:05:b1:21:6f:4d:9a:94:94:0c:d5:14:75:65:41:9b:43:
         80:cf:0f:c7:90:0c:81:66:23:d4:ed:51:b7:9a:04:43:69:8f:
         7a:30:4c:e0:39:dc:3f:e1:83:53:6c:28:11:36:bc:0a:5c:72:
         4a:51:d4:3d:1d:6b:38:ff:49:1d:75:c1:0a:cd:ff:a7:7d:d3:
         74:a0:0b:9b:5d:aa:b9:27:52:d6:07:c4:1f:85:bf:08:29:15:
         22:ca:78:71:25:45:31:3c:11:5f:db:72:ea:a9:33:eb:f3:03:
         1b:a0:33:02:20:5e:eb:55:91:4a:d7:9c:7e:80:c4:0d:58:3e:
         0a:eb:18:67:94:f2:88:11:e4:45:f1:f7:a8:14:9d:6d:a7:91:
         02:b9:5e:8d:68:26:57:f7:f4:10:f2:aa:ab:74:08:b9:a0:f1:
         b5:50:00:ea:bb:93:b8:a8:bf:10:19:45:cc:40:57:ae:9d:84:
         e5:79:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:54:07 2026 by rpki-client