Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa
File:                     57a291ec-9029-3bb0-b770-6419cd621358.roa (raw, json)
Hash identifier:          KhN6Sc0fGxRjNi9WFoDAAU5d3WZXGptHAMyDqn9nZmY=
Subject key identifier:   03:1D:A8:51:B9:F9:1D:A0:DE:91:29:EA:79:B4:22:36:64:54:3E:C8
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584EDC91FADE0B58020A2FA0A0E0
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     5050
IP address blocks:        192.231.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fa:de:0b:58:02:0a:2f:a0:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=50b7dd91-6b2f-421d-892a-eaa4e55c7e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:93:28:80:6e:10:05:d0:f2:b6:cc:54:3d:51:
                    87:25:6a:40:02:d2:d9:2b:cf:ce:e9:b8:85:8f:eb:
                    8e:ea:f0:76:c0:3c:14:4f:f2:22:2f:54:4e:65:17:
                    17:5c:f6:4f:01:b2:aa:70:3b:71:ca:ba:d4:dc:26:
                    03:6a:f2:4f:18:eb:fc:a4:4b:23:70:86:c5:26:91:
                    f4:5c:8f:89:08:28:12:b3:d4:40:2d:f4:32:d6:7b:
                    e7:07:79:c6:40:eb:0c:cf:ad:a9:a3:44:e3:f0:99:
                    5e:12:16:7a:20:7d:b0:8e:22:4e:47:50:2b:c4:3a:
                    38:e2:bd:89:39:cc:ee:eb:7d:16:75:16:d3:61:dc:
                    78:34:3d:b8:26:57:db:80:54:d4:67:0e:9f:5e:ff:
                    05:e4:91:2d:9f:90:e3:2f:43:2c:91:5c:ef:e7:91:
                    ab:5a:c2:36:2c:62:eb:63:2f:62:00:35:7d:8b:ac:
                    92:ba:f4:dc:1b:b2:cd:a3:7c:54:ce:f9:64:b3:4c:
                    2f:8f:fe:e1:dd:83:72:cb:bb:cf:bc:9b:2f:0d:f8:
                    30:1a:ea:73:bd:fd:19:20:b3:cc:9e:ca:c5:8a:28:
                    54:d6:5b:0c:1a:5b:d9:bb:49:11:5b:58:21:e4:d3:
                    63:58:2c:61:b6:52:4a:2f:4a:1a:a9:71:77:d0:0a:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1D:A8:51:B9:F9:1D:A0:DE:91:29:EA:79:B4:22:36:64:54:3E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:88:03:b5:bd:fd:f6:c4:f5:c3:ad:26:02:a6:39:eb:3d:
         9e:d1:1f:bb:22:ab:7f:42:ab:33:68:09:92:2c:b5:ce:f0:52:
         d0:ef:9e:78:87:6c:21:65:68:80:23:f8:89:89:7a:a3:f2:b9:
         b0:41:07:7e:53:51:b6:b3:62:45:aa:02:3a:0a:44:91:97:1d:
         f2:6f:b6:b8:96:37:ca:dc:71:51:d8:eb:f0:a5:6b:c6:58:99:
         87:72:af:51:7e:d0:c8:82:d5:e1:53:34:47:f1:eb:12:19:99:
         d1:6f:f6:19:53:eb:94:b6:e3:2c:d1:c5:1f:78:65:e7:6d:ed:
         81:c8:4a:8e:51:76:b2:fe:a6:79:01:31:df:4e:ac:f3:52:d2:
         77:29:ef:73:76:7f:c7:a9:e2:b2:9e:05:9e:23:21:d5:97:b1:
         6b:bf:2f:fa:a8:d8:a2:44:89:60:a1:c8:48:03:e0:32:a7:77:
         07:09:6a:9d:ef:85:12:a7:fd:a6:f5:38:3b:25:1a:7e:d0:b3:
         1e:e1:35:4c:80:db:47:14:39:3d:f5:00:64:ba:b4:f6:73:0b:
         ee:20:ab:89:94:2f:11:45:1d:9c:2d:9a:92:74:9b:2c:48:b9:
         76:65:5c:6a:30:a3:ea:b2:51:eb:f5:d0:50:95:61:32:ae:4c:
         a1:db:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:57:33 2026 by rpki-client