Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/94cf2e4a-aee5-3b76-88cc-426fa15bc02b.roa
File:                     94cf2e4a-aee5-3b76-88cc-426fa15bc02b.roa (raw, json)
Hash identifier:          PtoR4QNXIzlWzTaIy4dxVsbt5QX1YUVn+NiPS1jKHXo=
Subject key identifier:   00:A9:5D:BB:EB:9F:6C:F5:1F:A1:0B:15:06:CB:6C:40:E8:6A:72:3E
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584F4976016A6576570C2A06D080
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/94cf2e4a-aee5-3b76-88cc-426fa15bc02b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53340
IP address blocks:        192.154.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:01:6a:65:76:57:0c:2a:06:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7cf3759f-4f61-4a0c-95a0-286087eaffdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:66:35:cf:e7:e2:68:64:49:3e:22:ec:ad:a4:
                    cd:05:ff:32:10:bf:67:22:96:20:fc:e1:cb:c8:92:
                    f7:42:b6:88:ef:b9:59:74:a8:2c:fd:ff:fe:3b:a9:
                    09:21:a6:f3:a4:f0:34:dd:25:ce:46:72:fc:37:d9:
                    13:64:da:ec:4d:a9:d9:ff:ac:49:19:77:84:5f:e3:
                    cd:89:dd:8b:ed:15:06:d6:03:40:f8:11:27:8b:c0:
                    31:12:5b:5d:27:d2:99:ca:5e:2d:be:9e:97:6e:9a:
                    0a:ee:67:02:95:3f:c9:44:11:33:be:53:bb:49:ba:
                    32:f6:03:09:8e:ec:b2:61:7c:6a:eb:82:0f:25:ea:
                    20:a6:4c:d6:42:f4:bd:1b:7c:40:16:2d:6d:a1:00:
                    6e:6a:b3:cc:32:70:b4:74:88:88:11:1c:9a:79:b4:
                    3a:68:27:03:ac:7a:2a:7d:9d:bf:20:64:85:70:33:
                    12:d5:13:30:df:88:6d:76:9c:02:f4:74:8a:bf:e5:
                    4b:85:ed:48:ad:8c:d4:41:5f:14:96:44:51:8d:d8:
                    7e:98:ed:2b:35:36:44:e0:12:93:c4:42:6f:ad:67:
                    3c:28:26:50:91:3d:13:f8:4f:6b:5e:f4:ee:18:59:
                    2e:a9:5f:62:59:f7:0a:e6:1c:7b:18:b1:86:e5:4a:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A9:5D:BB:EB:9F:6C:F5:1F:A1:0B:15:06:CB:6C:40:E8:6A:72:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/94cf2e4a-aee5-3b76-88cc-426fa15bc02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:31:60:ce:b9:d7:0f:08:59:31:d9:f9:94:ec:e6:17:67:
         b8:2c:8a:dd:34:d8:93:4e:27:43:9b:65:0e:21:07:95:67:df:
         24:c5:d5:12:65:0c:3a:86:7f:83:49:a6:78:45:38:9b:4a:e2:
         71:df:7c:ab:a0:95:73:85:b6:05:31:4b:b5:9e:5d:4f:36:a5:
         98:de:f3:a3:01:0b:17:03:5a:28:30:a9:af:85:4a:c3:d8:83:
         a7:4d:20:5e:41:a9:50:11:ed:0d:be:7a:b8:44:f4:70:03:1f:
         76:8e:dd:60:94:e6:61:cd:5c:7a:63:72:82:09:f1:48:f8:eb:
         fb:e7:65:02:d6:1e:ac:40:54:ba:3c:c7:07:a1:2c:ff:91:32:
         0b:21:41:c0:e5:42:40:b7:f4:48:17:f2:1b:5f:de:6b:5b:91:
         5c:86:9d:f8:a1:5f:a5:73:b2:96:c1:f1:44:19:2f:d5:43:68:
         59:ef:11:4a:20:24:53:73:a9:d7:0e:2a:00:6b:6c:4a:f0:e6:
         d3:01:5c:3a:f5:4e:30:dc:b7:e3:50:84:83:93:7e:da:1f:51:
         e6:f1:aa:fc:10:9e:dd:2e:e8:10:57:28:17:d6:01:b3:5f:1e:
         a5:11:c9:c2:f3:4e:39:0d:aa:b7:53:7e:df:72:24:fc:f2:99:
         f6:46:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:55:27 2026 by rpki-client