Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/187932a4-d329-330b-8838-666077e93df4.roa
File:                     187932a4-d329-330b-8838-666077e93df4.roa (raw, json)
Hash identifier:          J5aabIaIraxqiTqA1u5WCca+mz/bfkY3A2j4HCQ3GJw=
Subject key identifier:   9A:2C:74:D3:22:65:AD:3C:C8:F4:6E:EE:A8:37:22:72:4A:2A:D1:52
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584F5EB6A8BFCC344AD9CFB60680
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/187932a4-d329-330b-8838-666077e93df4.roa
Signing time:             Fri 02 Oct 2026 15:49:28 +0000
ROA not before:           Fri 02 Oct 2026 15:49:28 +0000
ROA not after:            Thu 31 Dec 2026 16:49:28 +0000
asID:                     213683
IP address blocks:        199.244.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:b6:a8:bf:cc:34:4a:d9:cf:b6:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Oct  2 15:49:28 2026 GMT
            Not After : Dec 31 16:49:28 2026 GMT
        Subject: CN=bf78e951-054a-458c-ad60-de1f9783b6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:06:f1:39:4d:c0:08:e5:c6:65:88:cc:ca:
                    f4:2f:c3:65:42:89:22:72:8d:9b:92:75:49:e1:f4:
                    0a:31:b4:ef:46:e2:36:05:08:8f:c9:2c:53:92:35:
                    82:cd:53:f6:17:83:54:8c:2d:d8:ad:65:b6:59:02:
                    ed:9c:f7:e6:39:d3:da:e5:63:dc:f0:33:4c:3a:06:
                    2e:5c:9e:16:0a:24:89:3e:12:3c:f9:f3:ab:77:77:
                    df:03:a7:c1:f4:11:02:a3:03:fc:49:f0:ea:38:a7:
                    06:54:e2:69:ef:df:d3:4f:20:21:f5:09:b7:5f:6b:
                    32:8b:e2:da:3f:52:89:13:06:c8:2f:2f:ed:a5:97:
                    01:38:ff:4d:65:96:cd:f3:f9:ea:3a:a9:99:d2:66:
                    ef:0c:af:f1:d3:a9:79:73:ff:00:77:c9:86:df:e5:
                    c2:5b:23:62:02:02:47:1a:4b:71:e5:ef:bf:33:09:
                    1a:1a:a4:15:12:46:96:13:c0:68:05:05:44:25:c9:
                    9f:85:03:f1:c2:33:c8:2f:71:9d:c1:2b:47:74:3f:
                    6c:ae:6d:dc:08:dd:7e:f1:42:29:61:1a:c9:ec:34:
                    35:8c:8d:78:11:32:e6:65:bb:47:b6:cf:4d:d4:73:
                    37:8d:e6:c3:bd:f1:45:96:5a:5f:f9:ac:74:2e:f3:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:74:D3:22:65:AD:3C:C8:F4:6E:EE:A8:37:22:72:4A:2A:D1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/187932a4-d329-330b-8838-666077e93df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:d0:7e:98:54:da:c7:7d:73:4e:41:e9:34:8c:cb:dd:0d:
         5e:74:95:1a:47:98:cd:27:ff:d8:4a:73:3e:c9:83:af:ec:11:
         b2:08:68:20:7b:97:fe:21:5c:f9:fd:2d:aa:c9:ea:8c:0b:e2:
         e8:81:37:a7:e9:d4:5c:cf:be:d3:a0:0b:93:4e:69:2b:2d:0f:
         c4:05:ce:63:17:63:87:7f:a7:d1:ea:29:c4:c8:82:2d:d5:a1:
         a0:b1:20:03:6c:54:38:db:eb:fc:dc:73:a0:75:49:9d:4f:45:
         4c:f5:76:7f:8f:c1:69:ad:97:d3:e5:24:3f:64:7d:0a:bb:84:
         61:f5:66:89:47:bd:29:48:ff:f3:2c:d2:14:d1:d5:6e:d5:39:
         c1:bb:73:00:d0:6e:4f:ba:d2:8c:fb:3b:d4:50:08:f7:80:5f:
         f6:b9:cb:a1:52:1d:fc:69:b7:22:66:d2:38:05:d1:b1:46:2b:
         ac:78:f4:bf:1c:cb:7b:80:a5:5b:62:a1:89:b1:56:04:ef:57:
         ba:36:5a:50:ed:dc:d9:31:b9:9e:27:cc:38:b7:ae:e9:51:c4:
         9c:06:8f:9f:f3:12:c5:c2:31:3b:3f:9a:8b:14:0f:fa:f5:bb:
         dd:e1:a8:8a:3a:13:92:e9:e6:5e:b1:fd:69:81:de:55:0c:01:
         68:73:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:49:10 2026 by rpki-client