Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a28a282-63c3-324f-a522-232462563538.roa
File:                     8a28a282-63c3-324f-a522-232462563538.roa (raw, json)
Hash identifier:          IbA5V21zJepyspaXrJWoOkr7WYKF8Zu5Sh+WfNH9Y4s=
Subject key identifier:   B8:4D:7D:0A:F3:7A:7D:72:C5:56:DF:FB:F4:BE:C8:A0:85:33:E9:BD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E296F14F705012ADE267CFF80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a28a282-63c3-324f-a522-232462563538.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     15169
IP address blocks:        192.178.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:14:f7:05:01:2a:de:26:7c:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=b0819235-e861-452c-945e-f99a6e5c9bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:d1:05:61:0c:b4:26:d2:fb:c9:2e:44:a2:
                    2a:f8:b4:72:dc:21:ae:e2:42:f2:ba:3e:7f:c5:a0:
                    b8:e5:a2:cc:a5:bc:8f:ad:d0:8c:06:e6:87:cb:ac:
                    3f:a8:b8:c1:26:81:3c:31:26:70:93:e5:47:dd:26:
                    c4:10:0b:76:0b:d6:f3:14:98:8d:77:43:ba:73:1a:
                    0c:2c:f2:f7:6d:b0:84:f8:61:56:aa:e1:40:67:4f:
                    f5:e2:06:4a:81:2a:32:d6:ba:19:0c:df:57:19:57:
                    b5:f0:90:cf:a3:dc:52:e8:94:cd:77:82:85:4e:82:
                    47:cc:3a:c1:42:20:ea:cd:5f:89:c4:95:37:46:9b:
                    0e:67:5c:4c:11:ce:7e:35:51:87:5d:68:da:fc:30:
                    eb:93:a9:dc:da:d2:d8:7a:26:81:31:f4:39:06:4e:
                    91:32:19:f1:f4:dc:45:a2:2b:ed:63:d4:55:57:f7:
                    12:1d:95:5a:fc:20:19:76:22:d2:9f:38:6b:dd:fc:
                    66:c0:c0:ea:c1:b2:02:d9:cb:b9:ab:4d:ec:3c:23:
                    84:4f:1f:88:ae:83:9f:d2:d7:64:1a:1d:50:70:ba:
                    2c:24:06:8f:66:ca:8c:1a:56:98:ed:ad:f9:0d:64:
                    e3:1d:55:21:97:38:95:f0:94:e6:83:2e:da:33:ca:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:7D:0A:F3:7A:7D:72:C5:56:DF:FB:F4:BE:C8:A0:85:33:E9:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a28a282-63c3-324f-a522-232462563538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cc:52:ae:0c:28:64:32:a5:b5:45:ae:07:66:44:c7:1c:be:
         ae:1b:b1:7c:c6:6c:82:4e:ee:cb:fb:f1:48:db:46:93:e3:a8:
         50:fa:d3:05:c7:e4:2e:87:31:f9:44:4d:b8:e8:24:ca:f9:2c:
         95:f2:7f:cf:da:2e:2c:7b:24:45:a4:56:89:f2:22:0e:21:a9:
         b5:c5:b8:31:6c:f6:84:85:6e:fa:bd:ce:31:1c:59:fd:bf:f3:
         6a:5e:df:22:fb:72:b7:5b:7d:ff:5a:35:b7:51:5f:eb:89:47:
         65:b4:d6:64:1f:63:d9:f0:71:af:8b:80:f5:d3:0f:0f:84:6a:
         89:43:c9:2b:8e:a3:18:d1:ba:62:e0:80:c3:70:82:fb:cc:86:
         5c:f8:17:a8:bc:3d:f7:d9:13:8d:91:28:0a:c7:a8:e5:61:23:
         f2:74:87:d4:1f:39:59:98:66:0c:b4:e8:d0:c8:3e:63:96:9f:
         89:7c:a5:fc:95:e1:77:16:f9:b9:eb:be:e5:6b:53:c9:d1:41:
         db:5a:99:e8:0a:93:ca:fb:c7:86:b1:d3:b0:44:a8:ab:12:53:
         6a:f3:1b:5a:2c:7a:e0:1e:a3:4e:91:b2:a1:b7:c0:1d:84:92:
         c6:e7:1a:53:b2:4e:8b:32:22:cc:da:da:0f:f0:8a:f0:85:33:
         a2:07:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:37:50 2026 by rpki-client