Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa
File:                     d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa (raw, json)
Hash identifier:          qaR+IyKBgufVgL73VKnqMH9gY/FS1aELYKq+a9h6z6o=
Subject key identifier:   D3:0A:A2:CA:95:82:08:51:CC:F9:32:3E:2E:1A:46:F6:41:16:66:7D
Certificate issuer:       /CN=9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8
Certificate serial:       010D0C9F4328584F655E6CAFD726DEC625D8BE00
Authority key identifier: E7:62:4B:80:8E:3C:E1:F9:BB:94:F6:79:09:EE:81:9D:A7:C4:D9:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     23037
IP address blocks:        192.190.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:6c:af:d7:26:de:c6:25:d8:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=0c1f5e6a-6c45-4f5b-a1d4-ce7202779d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:15:fa:1c:2d:ad:b9:9c:c2:4c:66:ee:11:
                    78:b8:c1:e3:09:39:4d:aa:83:a3:99:82:93:46:c6:
                    e4:b6:e8:2f:de:1e:8d:7d:db:23:68:23:ba:fe:7d:
                    44:5d:4f:33:18:85:01:d2:4d:bd:10:6f:4e:0f:21:
                    be:c4:83:d4:ac:3d:de:73:e5:ce:2d:f7:2d:cc:75:
                    9d:71:b8:b4:0c:cc:7b:fa:b2:1a:c3:19:dc:8f:c7:
                    ba:f7:68:08:00:c6:a2:74:9a:02:2c:18:2c:4c:b7:
                    bf:db:02:9a:4a:c6:b8:de:d6:2a:35:cd:88:46:71:
                    1d:6f:e4:43:be:63:9d:7c:2c:be:03:c7:cf:76:09:
                    0b:7f:4f:55:99:df:62:1d:c9:99:97:e7:0b:f3:2a:
                    99:56:6e:e2:c7:16:d1:67:48:bc:16:e4:52:67:6c:
                    cf:16:8f:3c:e7:9a:16:7d:82:44:26:bc:3d:b6:6a:
                    2f:93:bc:94:1f:16:a6:18:82:76:cd:ed:3f:3e:53:
                    5d:20:ab:f6:c1:0e:02:bc:7a:e8:02:11:32:f4:48:
                    f6:3e:de:1c:99:f9:e2:8a:23:13:43:59:96:b9:cf:
                    37:ce:19:5b:d6:d2:41:79:da:c7:53:8a:51:b7:ae:
                    5e:00:b5:97:d9:c2:73:ab:d2:aa:aa:e6:ea:cf:a8:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0A:A2:CA:95:82:08:51:CC:F9:32:3E:2E:1A:46:F6:41:16:66:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:62:4B:80:8E:3C:E1:F9:BB:94:F6:79:09:EE:81:9D:A7:C4:D9:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:b2:04:be:81:cf:68:39:e5:d6:f6:8e:8e:9c:17:6a:66:
         22:b2:6c:ef:fa:2b:f6:14:7e:ba:86:71:01:17:28:19:a4:77:
         33:a2:db:9a:90:15:6e:9a:58:52:48:f8:58:9f:35:64:b4:17:
         bb:43:5f:28:e4:7b:a2:07:36:2c:0f:a2:15:cc:eb:3b:46:24:
         04:ee:01:08:d3:08:22:30:37:b1:64:1a:56:88:51:a9:ce:16:
         13:de:8d:4b:a5:54:a5:6e:46:fb:9d:4c:ff:37:ed:b6:cc:c3:
         08:27:bb:22:dd:84:38:37:70:df:fa:35:64:93:d4:57:5c:fc:
         ef:13:da:23:4b:6b:36:e6:0f:00:13:17:db:63:ec:a4:f0:ee:
         10:db:35:a0:07:40:75:16:40:33:a0:0f:62:ed:5a:43:e6:f5:
         1a:1e:e4:2a:12:c3:fa:87:fb:b1:8c:93:a8:df:cb:72:2d:73:
         92:07:1c:3e:b2:73:1b:03:09:f7:c8:18:15:08:1b:35:88:90:
         f6:36:7b:f5:d1:84:cb:af:68:d4:9d:20:31:2d:c4:4c:11:fa:
         6b:f4:b2:58:cd:01:cf:c6:c3:4c:31:67:18:5f:96:9f:12:d4:
         36:87:45:de:82:33:86:d4:8f:73:4d:7e:3f:1c:c9:e5:fa:9d:
         34:37:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:02 2026 by rpki-client