Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830/01cafe69-d868-32ad-a590-5346f186092f.roa
File:                     01cafe69-d868-32ad-a590-5346f186092f.roa (raw, json)
Hash identifier:          7mqNmdZoPKo4DUEyAMsBcRZpce1NI4/yMjynJ4qh7ic=
Subject key identifier:   DB:3D:09:C9:29:A7:F1:CA:30:1B:BD:AD:AD:42:0F:44:24:51:2D:6E
Certificate issuer:       /CN=5f6e48b5-9113-47ee-a336-399713f55830
Certificate serial:       010D0C9F4328584F5F20C3B8296307DC811E70A0
Authority key identifier: D6:16:34:9D:33:F1:0E:AE:06:9B:4C:DC:95:C8:6E:A1:D9:4E:89:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830/01cafe69-d868-32ad-a590-5346f186092f.roa
Signing time:             Fri 02 Oct 2026 19:23:16 +0000
ROA not before:           Fri 02 Oct 2026 19:23:16 +0000
ROA not after:            Thu 31 Dec 2026 20:23:16 +0000
asID:                     394000
IP address blocks:        192.196.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830/5f6e48b5-9113-47ee-a336-399713f55830.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830/5f6e48b5-9113-47ee-a336-399713f55830.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:20:c3:b8:29:63:07:dc:81:1e:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6e48b5-9113-47ee-a336-399713f55830
        Validity
            Not Before: Oct  2 19:23:16 2026 GMT
            Not After : Dec 31 20:23:16 2026 GMT
        Subject: CN=d7f83ba4-8544-47d7-9834-9c245bf4c73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:b7:96:7d:3e:8a:d8:37:61:1a:46:bb:96:
                    35:82:9e:1e:ba:52:0f:0b:a6:35:9c:c3:ca:d0:7e:
                    87:eb:a9:59:c1:28:6e:fb:2d:90:98:77:d8:9c:d6:
                    10:64:f1:37:f6:0e:9c:a4:c4:fb:6f:c3:32:68:c1:
                    e1:61:eb:6f:04:30:b8:0c:85:d4:f7:d7:58:8d:e8:
                    fe:2c:31:01:05:e4:8c:70:c8:3a:ae:b9:a6:6c:99:
                    e7:1b:9f:49:95:0c:d0:46:de:58:a2:ce:c7:33:e3:
                    fd:b1:42:54:46:1d:63:e3:88:f7:aa:2d:d5:85:3f:
                    c4:34:03:4b:a1:61:16:5b:0f:61:14:dc:ad:40:7c:
                    81:2e:b2:bb:a0:2f:c0:1d:be:8b:fd:78:76:1f:e6:
                    dc:5b:e8:d9:ba:46:e2:69:b2:9e:ad:e5:61:9b:89:
                    48:36:60:74:82:a5:1b:a0:46:26:fc:2c:66:49:cd:
                    e8:dc:60:d2:4f:3b:1b:b9:37:94:e6:5c:41:e0:e1:
                    a7:45:4e:39:9b:61:13:cd:e8:7b:d7:c3:c5:3c:15:
                    84:51:58:2a:5a:6a:b5:e8:25:e2:c5:52:04:4f:96:
                    b9:f4:57:f3:2d:39:55:e6:09:31:dc:cd:bd:a4:4b:
                    b8:5c:16:2a:5e:f6:35:e6:7b:5f:11:5e:1b:b5:9b:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:09:C9:29:A7:F1:CA:30:1B:BD:AD:AD:42:0F:44:24:51:2D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830/01cafe69-d868-32ad-a590-5346f186092f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830/5f6e48b5-9113-47ee-a336-399713f55830.crl

            X509v3 Authority Key Identifier:
                keyid:D6:16:34:9D:33:F1:0E:AE:06:9B:4C:DC:95:C8:6E:A1:D9:4E:89:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f6e48b5-9113-47ee-a336-399713f55830.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.196.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8f:c1:70:45:ec:23:74:aa:c7:10:00:3c:8a:90:8d:e2:95:
         cb:be:19:ac:57:22:92:0b:35:dd:2b:fb:1f:7b:43:5f:9c:d9:
         ef:ff:68:d2:65:e0:dd:45:83:d0:43:60:94:31:98:88:22:67:
         65:e5:56:9d:ed:4f:82:a5:e6:f8:d7:2f:05:8b:35:9c:8a:2c:
         b6:8b:d3:03:7f:df:63:cc:fb:45:fc:58:93:97:cc:eb:53:18:
         13:be:05:b9:bd:cd:61:23:f2:be:dc:dc:94:a2:49:bd:80:8f:
         af:77:1e:10:18:95:29:1e:29:98:f7:01:4c:64:7e:c0:57:b3:
         0a:66:34:67:8d:f1:9a:09:03:0b:41:94:ec:f8:af:3d:5e:a9:
         08:4d:48:52:b7:81:0b:78:1d:23:fe:e8:dd:61:62:d4:04:ef:
         55:c6:74:73:22:d9:1d:8c:09:ec:ff:fd:b1:f2:3c:98:a9:52:
         d2:20:e8:0e:2d:c3:a7:4c:f9:9b:06:e2:af:ba:2f:3b:3e:3d:
         ea:94:5b:a6:ad:76:92:6c:33:da:34:65:13:80:be:66:28:f6:
         a7:66:d3:31:a7:dc:7a:43:4f:8e:8d:0b:52:42:43:de:69:91:
         c0:53:64:00:4f:8d:7e:17:97:a1:de:8d:1d:b3:12:17:b3:46:
         09:25:31:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:33:28 2026 by rpki-client