Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/5541f7e0-be22-3912-8530-ba893395da94.roa
File:                     5541f7e0-be22-3912-8530-ba893395da94.roa (raw, json)
Hash identifier:          m4GyfzP3sQ7fakiNGRpsxJpNN+vTTff1tdeIthq6wXM=
Subject key identifier:   7D:F0:D9:37:9F:90:1E:62:3A:E2:A1:1F:CC:C7:B4:D1:23:7E:5F:D2
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584ECBD1D3CB7312689FDD1019C0
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/5541f7e0-be22-3912-8530-ba893395da94.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     1206
IP address blocks:        192.101.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d3:cb:73:12:68:9f:dd:10:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=69a0ac41-3802-4452-ad29-69242adf7b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:ee:4a:37:db:f8:7e:ea:b3:1e:de:f4:a6:
                    f3:f0:0c:e1:03:ad:02:61:77:f5:13:45:93:7d:a1:
                    93:45:72:49:38:9a:e1:e8:56:5b:b9:c6:f3:59:7d:
                    17:25:46:51:d5:18:b3:2d:45:90:0b:f8:80:52:ef:
                    91:7b:02:83:7f:26:28:02:51:73:db:f5:10:2f:a5:
                    84:c3:23:93:33:2c:77:f0:f4:57:3b:9d:0a:4a:5b:
                    75:64:e4:06:14:dd:bb:6c:26:cd:7a:ad:18:0c:4b:
                    6d:13:eb:d3:01:4e:51:aa:59:ea:94:89:61:e9:0d:
                    15:41:d5:d3:1e:39:67:7a:5d:8f:b7:68:b0:13:ad:
                    e7:38:1f:f2:e7:83:88:e0:47:7a:e5:cf:ee:b0:2c:
                    f2:ff:48:d6:89:10:a3:d3:8e:e8:0d:81:68:37:88:
                    f9:fd:fd:86:1b:2c:d2:9c:57:f9:48:14:3d:14:bd:
                    ca:11:41:8a:14:98:e3:55:f3:d7:89:ef:04:4a:9e:
                    a6:56:25:d5:72:c4:42:75:7a:2f:99:4d:48:15:27:
                    22:d4:14:55:54:b8:9f:3c:c5:4d:37:2e:f0:d1:05:
                    aa:10:c8:ce:f7:76:f9:4d:1b:46:a8:34:b6:da:31:
                    60:1a:0b:c5:ec:d9:7d:f4:13:47:b3:9c:20:fd:e8:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:D9:37:9F:90:1E:62:3A:E2:A1:1F:CC:C7:B4:D1:23:7E:5F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/5541f7e0-be22-3912-8530-ba893395da94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:91:3c:fb:0a:86:3b:fb:cc:a9:45:34:39:87:8d:7a:67:9b:
         7d:ed:6d:80:20:9d:3e:85:af:1e:ac:e4:35:fe:bf:9d:40:da:
         aa:12:fe:6c:3b:73:5f:27:29:6f:d6:3a:e1:fe:ea:7c:e5:21:
         04:6c:5f:f5:11:a8:88:e9:ab:16:d9:2a:9f:31:d1:ba:06:9e:
         3a:2f:a1:c7:3d:07:10:1a:6e:ed:57:0c:20:a0:64:db:23:03:
         e7:f8:f7:07:2d:0e:0b:b9:65:f4:0d:4a:a6:3e:1b:bc:e4:50:
         cf:37:7e:66:ee:c8:51:76:fd:e8:48:b3:f3:cf:6d:97:af:b2:
         57:91:67:e7:15:17:fc:4d:a6:82:82:8e:32:3c:45:de:b2:96:
         ac:76:6f:b3:ce:30:01:16:04:7e:08:27:d0:60:03:ce:1a:2c:
         29:1a:97:57:06:38:3a:8f:79:33:d8:9f:4b:67:83:4f:0f:e1:
         f0:fa:03:91:44:e9:a5:de:12:17:2c:8b:c4:a1:c3:6b:77:1b:
         15:8f:e9:fd:b8:b7:a0:cb:fb:76:48:b1:ae:65:d5:e6:15:9a:
         03:0d:c8:99:5e:67:71:56:c3:4b:73:21:e9:3e:39:fa:1b:f9:
         91:3e:b8:2f:a0:e8:01:d2:d9:3b:11:29:c2:47:8a:69:dd:69:
         8e:29:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:57:48 2026 by rpki-client