Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa
File:                     d79b62cc-36d6-3e6c-97bd-3d162be55196.roa (raw, json)
Hash identifier:          bnf9G3caJRJSPa9cfngXsA1SrKcll90iHquuDnpdPAg=
Subject key identifier:   39:BE:56:EB:11:0A:36:FE:0B:79:60:60:93:A8:10:36:4D:48:20:82
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584F2D87B71C9F78EAE5FFE8F000
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     52347
IP address blocks:        192.34.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b7:1c:9f:78:ea:e5:ff:e8:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=37adc347-a218-4c6f-af51-15b80ecf4ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:aa:d9:69:72:0d:30:99:a8:d2:89:83:ce:
                    09:ea:84:87:fa:78:c0:24:fc:50:a9:f4:9b:36:c6:
                    fd:d7:8e:d0:dc:3a:c9:9e:88:c7:65:91:64:fc:7d:
                    88:17:4d:58:1c:b6:28:a9:e5:ca:0e:71:8f:52:fc:
                    b1:f6:25:6d:3a:55:aa:fb:c1:d4:a6:45:32:0a:86:
                    6d:21:f3:35:3a:f8:85:b0:75:55:a3:b7:9d:14:d2:
                    4e:6d:f5:f6:9b:a6:a7:20:eb:7f:0f:cc:ba:91:3b:
                    64:ea:89:29:37:38:ea:d0:74:07:b0:69:d3:d4:18:
                    73:57:9b:3e:ee:76:3b:f4:d3:e3:eb:69:a4:a6:9c:
                    3a:09:b1:41:f3:d1:70:4e:cb:a7:7a:68:94:ab:77:
                    72:22:b0:8d:bb:a9:f3:25:57:a0:47:11:3b:c4:ab:
                    77:94:3a:c6:5a:23:2e:7b:b3:ff:f3:b0:0a:83:80:
                    47:b4:66:12:a3:a3:de:9a:ec:1a:59:9a:db:ab:97:
                    5a:89:5a:aa:f6:06:07:11:bf:77:34:b0:4f:90:13:
                    56:d9:00:47:ac:a0:e4:4b:db:73:6c:65:3d:ad:5f:
                    90:5c:c2:a6:7c:1d:48:22:ea:39:50:89:67:15:6e:
                    da:bc:41:e8:19:01:d8:4a:7a:b7:cc:5a:10:33:a0:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:56:EB:11:0A:36:FE:0B:79:60:60:93:A8:10:36:4D:48:20:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:1a:9a:68:3e:25:31:0d:46:52:31:ab:0e:9d:d0:85:6b:
         da:b4:d8:e3:35:e0:b3:cd:4e:a7:12:fa:d9:4b:8b:9d:75:55:
         e7:70:5e:5e:67:72:4a:ab:ad:51:ef:65:ce:c1:88:38:cd:78:
         5a:d5:38:e0:d7:91:ab:da:cf:fb:e7:2b:d6:2c:ed:c1:b2:19:
         b0:e7:c6:ed:18:52:c8:27:93:bf:51:a8:59:77:69:46:dd:27:
         79:33:25:e3:ae:21:59:2a:5f:2b:51:a7:b4:3c:d6:3b:2d:68:
         c3:92:13:ac:03:7d:b2:1d:6b:56:2f:cc:f8:15:fe:5d:31:5e:
         45:13:2c:ac:60:2d:65:af:6d:26:94:d2:88:26:09:43:62:80:
         d4:a8:3e:4d:38:6c:29:78:fe:ee:9c:ad:c0:bf:6b:bb:31:39:
         30:53:a9:c9:a3:df:b5:22:25:26:f4:d4:e0:61:03:b3:8e:5f:
         ed:e6:48:bf:41:77:39:23:0e:70:67:e7:52:f0:92:95:a6:b5:
         f7:4a:96:36:2d:0d:d0:6e:62:bd:ba:16:57:22:2b:da:d0:78:
         aa:04:d1:e6:17:a4:5b:7a:62:d4:22:16:91:21:7e:02:4b:12:
         fd:4e:7e:d9:a7:8a:88:21:13:40:ac:1b:f4:51:dc:6f:12:f7:
         0e:23:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:58:56 2026 by rpki-client