Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa
File:                     8ca33817-b7b1-3448-8920-6e02588cebe8.roa (raw, json)
Hash identifier:          cGBbks26YaJMBLCigsaJy4yrmXbBEu/sIkUWifHCIAo=
Subject key identifier:   87:E8:8B:F4:BF:4C:E9:C6:89:9B:5E:A0:35:56:A7:12:FD:D4:F5:D4
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584F06722DA91C84E7817071A980
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        193.149.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2d:a9:1c:84:e7:81:70:71:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=041f6b25-5a0f-488b-9620-78549996883f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:b6:61:db:98:de:14:5d:0f:b0:b4:fd:b1:
                    1e:fa:6f:db:5a:a1:09:12:19:f8:48:08:70:12:a6:
                    08:4e:d3:45:7f:3d:78:e1:4f:23:be:01:ef:b2:fd:
                    d8:43:35:19:5d:ec:e1:07:4b:fa:e6:53:e0:04:f6:
                    a4:e2:18:ac:ce:74:42:7d:95:61:5a:af:01:fd:d8:
                    da:9a:ab:76:93:0c:e2:cf:c4:51:05:ae:a3:8f:d6:
                    05:61:c9:c6:1e:e6:e7:0d:fe:99:73:c4:2e:f8:d6:
                    c5:01:7c:aa:69:08:05:39:92:6b:e0:b3:d7:d3:d5:
                    9d:ca:d9:d1:7a:c0:2b:4d:6a:2e:31:e1:0f:82:24:
                    78:e2:40:fc:02:ec:90:34:88:ec:fa:4c:75:c5:e9:
                    7a:be:c9:d5:3f:1e:99:f3:3a:76:45:aa:ae:bb:47:
                    e1:81:a7:55:3f:cd:3e:e2:a5:d9:ea:1d:af:25:8c:
                    bf:04:cb:07:17:4c:43:79:34:2b:49:57:2f:26:cb:
                    b8:b5:34:52:03:08:81:04:f9:3b:2b:5e:0f:bc:3e:
                    96:10:d5:c8:15:d1:0e:3a:77:c5:7d:67:0f:a6:5d:
                    ea:c2:a0:40:07:41:4b:03:ae:84:90:ea:1c:8b:38:
                    41:92:21:55:fb:4d:6e:82:b9:0d:c8:80:3c:d8:59:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E8:8B:F4:BF:4C:E9:C6:89:9B:5E:A0:35:56:A7:12:FD:D4:F5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:94:07:63:2c:7c:80:8c:0d:03:79:bd:bc:53:a7:eb:18:2d:
         d6:dd:27:31:c6:84:35:ac:4f:fa:7c:50:ee:0e:33:67:d6:29:
         73:3b:af:f4:cf:d7:97:3d:b8:ba:bd:60:89:81:7e:96:f4:1f:
         78:5e:9b:dc:25:e3:e8:46:04:32:f3:65:ec:a6:40:b6:df:3b:
         51:48:07:3a:f5:a5:69:c7:c5:5a:1d:5e:19:76:36:04:1e:7d:
         46:f3:6f:6d:35:f2:43:8d:95:a5:69:2a:6e:6b:9f:51:d3:b2:
         c2:51:7d:93:26:d4:a4:d3:71:60:22:43:13:fb:7d:97:4e:fa:
         c6:60:83:dc:43:cd:d5:10:38:51:a9:cd:39:52:58:0f:8a:82:
         06:a1:ea:e6:79:2d:8d:63:88:13:68:4a:c8:39:99:bd:fe:b1:
         5c:62:83:3e:0a:bf:bb:ed:12:f1:02:05:a8:e0:4b:5b:79:a2:
         b3:9b:9f:3f:d9:76:4b:b2:20:b7:07:78:c9:a6:bf:ff:bd:1f:
         06:49:54:d6:28:37:8d:a9:09:d0:d3:52:cf:6a:5c:25:18:fc:
         27:6a:3a:6f:80:b4:0f:85:6e:f6:65:40:a7:1c:3d:3c:2a:62:
         85:0c:cf:af:bb:cf:7c:36:68:e0:dd:96:6b:85:2d:01:fa:17:
         22:71:f5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:44:54 2026 by rpki-client