Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa
File:                     4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa (raw, json)
Hash identifier:          0EKCL3iNR6mfM2bkOvLEp7DxiA+sFTQCfDOBjl6mlpA=
Subject key identifier:   FB:05:F7:EE:08:4E:FD:B6:57:4D:EA:25:A8:62:74:93:96:10:B6:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DDACEEA8C8AC839AB8038
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     394996
IP address blocks:        184.105.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:da:ce:ea:8c:8a:c8:39:ab:80:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=78d2e9c1-a860-43f8-9549-3fcae6c2eaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:6b:67:55:b6:e6:ec:5e:2c:20:ec:7c:e6:
                    55:09:2f:14:48:e4:a0:ce:2c:97:5a:87:60:80:73:
                    aa:bf:8b:89:6d:89:6c:d4:cc:0a:66:d5:1d:0a:6e:
                    84:47:0c:fd:b5:22:6b:0a:dc:08:0c:8f:ca:b0:29:
                    0e:2b:37:a8:ac:34:0a:b7:44:42:49:68:20:86:aa:
                    b9:cf:d4:78:2a:94:99:c2:90:97:3d:85:17:f6:4d:
                    94:cb:ba:f3:02:b9:26:ae:ac:29:32:9a:7a:fc:f5:
                    6a:77:75:d3:70:c0:37:f3:92:91:73:7c:e1:74:1d:
                    a1:69:d0:60:6a:48:5e:a6:ae:47:d6:95:89:5f:4d:
                    6f:df:72:05:65:5f:45:f4:5c:8e:e3:56:56:2e:64:
                    e2:7a:e9:b0:47:0d:34:c9:0d:68:e8:4b:21:d3:d3:
                    1e:03:e7:3d:ee:76:a3:c8:47:4b:9a:02:6f:5f:a7:
                    c7:d8:98:7f:4d:01:ee:23:21:ee:5e:78:55:27:e2:
                    76:0e:c6:6d:a6:ef:2b:fa:a3:69:e5:7b:1d:fa:64:
                    ae:a1:8c:20:41:1f:82:f7:30:2b:2e:29:8b:fa:eb:
                    21:39:f0:c8:4b:b4:a5:dd:f4:8e:c1:ff:2f:67:b9:
                    df:59:b7:cd:04:7b:10:d4:b9:72:6f:c9:96:a1:ca:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:F7:EE:08:4E:FD:B6:57:4D:EA:25:A8:62:74:93:96:10:B6:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4629c7a6-85d1-3c8b-adcd-2de99483ddd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:04:33:6f:2b:50:ff:f3:28:36:fa:57:54:f1:54:34:af:
         fd:3d:fe:1f:02:e9:bf:6f:f6:be:08:ef:04:d9:cb:55:72:7d:
         01:5b:b8:a0:5f:e8:d3:06:2a:44:b6:18:68:58:2d:9a:70:a3:
         63:c8:7e:c4:cb:c1:ab:62:50:20:b4:4d:7d:07:c1:bc:b4:e7:
         37:d4:77:3d:22:f2:fa:ef:dd:12:58:1a:9d:f4:b0:0c:de:03:
         96:01:fa:83:8c:ec:bb:f3:35:70:fb:8d:73:66:97:8e:31:9c:
         e2:3c:a4:46:51:02:05:e2:ec:84:8a:eb:0e:5e:f3:b8:a9:9e:
         60:1f:c9:ad:2b:30:99:fa:e9:00:12:bf:64:53:29:b8:2a:95:
         d4:f6:c9:cc:d9:be:c2:9d:e6:71:11:d3:a3:92:8b:ca:09:ba:
         f5:98:b1:49:79:a8:2d:2d:b4:4f:7e:1b:63:74:f4:33:12:cd:
         c9:94:a1:e8:5e:fd:4a:08:fe:5e:47:74:87:32:fb:db:d1:9e:
         70:7d:f4:74:66:66:21:25:c6:f1:d2:76:24:be:dc:e1:e3:29:
         18:fe:cd:62:b6:6f:bb:c3:80:72:8e:57:48:de:10:07:f3:48:
         57:02:9c:3d:50:be:18:2e:18:ef:25:15:2f:bb:9c:42:fe:0f:
         1b:cf:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:28:07 2026 by rpki-client