Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa
File:                     de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa (raw, json)
Hash identifier:          eFzW8yYTor7FhH9bPfXYsezVuZoSwnXIuh9GzfQMdJw=
Subject key identifier:   D5:85:D8:71:29:29:E5:3B:0C:B1:3C:58:50:E4:7B:CC:BF:F6:C4:72
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F497CE21AD360300E64D6DC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        173.194.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:e2:1a:d3:60:30:0e:64:d6:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e4ecdcba-9d67-4278-b5f3-4c1962930d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:de:cb:48:67:73:4f:ae:a5:3b:20:24:67:
                    42:77:44:71:12:8d:d8:ac:97:5f:e9:bf:73:39:82:
                    5a:57:5b:57:98:ba:07:f7:31:72:fc:cb:ac:64:1f:
                    32:e5:a5:97:06:46:6b:df:1f:91:02:e6:ae:15:53:
                    87:f3:57:cc:83:30:a6:f4:fe:8d:02:d9:fe:04:26:
                    39:be:23:d9:05:6d:4f:d2:d6:7b:53:83:08:61:1a:
                    b6:52:eb:3e:cf:96:e6:4c:b3:ee:c2:5c:cb:63:e2:
                    86:71:36:08:1d:10:d6:85:43:2c:49:c4:e9:5d:29:
                    0f:6b:ef:96:a3:4a:89:55:9c:73:c5:d6:a7:83:44:
                    1e:af:3e:ad:47:c9:56:c1:ea:a2:d3:10:1e:bd:fc:
                    af:c4:56:0c:76:02:d4:06:58:71:14:63:cc:62:92:
                    71:3f:0e:d0:ca:f2:21:e4:e4:e7:fc:79:cf:5c:08:
                    57:24:ef:5a:b4:bc:b0:60:7f:27:07:c4:80:da:f9:
                    68:9f:24:6e:d3:4d:d8:5c:86:0a:12:be:be:e3:df:
                    04:8b:05:b5:eb:6b:d2:08:0d:4a:f5:66:73:38:f4:
                    91:e7:b3:17:88:b0:00:da:52:d6:5e:d3:d2:93:ad:
                    80:e5:bd:18:0d:ae:4f:e5:98:0a:4c:fb:ea:64:d8:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:85:D8:71:29:29:E5:3B:0C:B1:3C:58:50:E4:7B:CC:BF:F6:C4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:32:ec:84:e7:52:33:8d:07:69:46:d0:7a:36:6e:89:ae:
         b5:08:79:16:b7:1e:74:34:6e:c3:c5:c9:5b:1c:d9:42:13:b0:
         2e:7e:9b:43:e9:c6:87:cd:7a:d9:53:9c:28:51:93:6c:70:63:
         38:87:a4:d7:d1:3b:92:63:4c:e5:62:d0:54:86:26:c7:8c:54:
         1c:ef:2b:35:37:0f:1f:d3:67:7c:29:5c:b4:b0:a8:28:37:a7:
         a0:83:ee:6e:52:4e:1b:20:dc:22:8b:d7:94:44:b7:e7:65:ee:
         7b:88:1f:23:95:f4:28:1e:71:a7:cb:fc:04:5c:34:36:3f:b2:
         33:db:c7:02:69:37:0c:ca:6e:80:70:a9:d4:46:4f:50:4c:0c:
         f0:d4:e1:98:44:a4:74:b1:7c:65:bd:ce:14:f1:fd:b0:75:58:
         a1:f4:a3:93:2c:25:00:23:53:64:41:3e:5e:0e:c9:35:5e:9b:
         b4:2f:b5:a1:eb:3e:2c:52:e1:84:e5:ce:89:11:40:36:e4:33:
         82:0e:fc:f4:46:d9:9d:1b:71:3a:ec:93:8d:3e:44:71:65:99:
         b2:50:ce:76:da:ff:d4:9c:da:20:47:c1:cd:b5:3a:07:b1:03:
         18:0e:17:a4:d6:ab:9d:80:8d:1e:3f:50:bc:ca:4e:b3:f1:fd:
         b1:4f:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:51:59 2026 by rpki-client