Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87692d04-e9f8-3473-92e8-118ebf8ebef1.roa
File:                     87692d04-e9f8-3473-92e8-118ebf8ebef1.roa (raw, json)
Hash identifier:          ++SrTw+7/WY7366g/OqAmw8rDlT2yrIFPSjVbLc3B7o=
Subject key identifier:   06:E9:A2:F7:00:6F:39:DA:1E:2E:1D:EF:17:78:CD:33:39:A9:2E:53
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC92223426C3EA255A103580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87692d04-e9f8-3473-92e8-118ebf8ebef1.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     32552
IP address blocks:        184.105.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:22:34:26:c3:ea:25:5a:10:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=8f34cd5d-b61e-4b8a-8e25-8b119c83af7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:46:e1:18:b4:cf:26:ce:92:28:34:1e:ca:
                    31:0e:23:e8:3c:d8:82:27:27:4c:be:5d:8c:4c:1f:
                    12:f9:24:79:ea:1a:b5:51:d3:fe:dd:22:7b:7c:22:
                    40:8a:70:d4:32:e2:12:83:aa:f7:d8:09:18:c5:56:
                    19:3c:eb:37:7a:cc:90:1a:84:12:08:af:9b:2f:2f:
                    bf:fd:30:35:56:66:90:f7:b9:f0:12:31:d3:b4:bb:
                    f2:ec:bb:c9:6a:da:13:37:fd:ea:80:20:43:fb:55:
                    30:7a:79:62:a6:e9:21:89:4f:bd:a8:c7:16:6b:2c:
                    6d:f4:cc:fb:03:45:da:6a:3e:fa:60:42:6a:08:d3:
                    41:3c:83:f5:85:f9:bf:21:1c:ae:18:5e:d8:a0:d7:
                    b3:8d:ef:4e:70:78:78:f0:48:9a:c5:7f:66:79:d8:
                    42:86:0c:ab:c1:96:b9:3d:aa:aa:7b:4f:a0:60:3e:
                    bf:aa:de:63:df:95:ce:2f:f6:c6:e9:77:e7:17:36:
                    97:cc:d5:04:66:94:11:ed:cb:62:c0:d7:67:ee:02:
                    09:e3:6d:fe:b7:3f:26:e0:cd:d9:f3:d4:59:b4:a7:
                    f7:6b:5d:78:0b:ea:f5:bd:9b:e4:f1:84:12:24:4a:
                    6d:4c:b2:af:20:f9:3c:0e:91:75:cf:cb:75:81:52:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E9:A2:F7:00:6F:39:DA:1E:2E:1D:EF:17:78:CD:33:39:A9:2E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87692d04-e9f8-3473-92e8-118ebf8ebef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:54:35:2d:0e:23:d9:c4:bf:20:5e:65:44:16:85:5a:8e:79:
         01:1d:4a:b2:93:04:1c:be:db:b8:4c:44:4a:bf:bc:e7:d0:6d:
         91:a3:a3:97:69:7b:f1:a3:11:32:86:6c:99:0f:6b:5d:13:61:
         48:25:9d:2d:d2:09:6a:84:76:23:f6:ad:42:e6:3f:1b:ff:ca:
         c3:59:77:e3:40:a7:e4:df:df:5c:a3:4c:00:68:db:32:2f:99:
         45:33:cc:2b:d1:c8:0d:20:8f:11:39:a9:53:b4:3c:7c:89:1b:
         f4:cb:70:d1:62:01:e0:52:98:51:d0:8b:23:cb:58:2b:04:f8:
         0e:f7:bf:5b:e0:82:1e:a7:50:30:d8:0d:d1:0d:86:a0:62:85:
         f1:b3:95:02:07:6e:50:b9:1f:2c:18:b3:54:39:2a:e7:79:c6:
         41:5a:bb:ea:b2:50:b7:bd:ee:2c:ed:4d:01:cd:33:1b:8c:ea:
         cd:ad:4c:b6:81:05:05:cd:44:09:be:e3:68:08:c2:3e:cb:45:
         32:05:21:6d:b4:1a:55:82:41:fd:d2:d9:12:61:0b:8f:da:40:
         e0:3e:88:ab:a7:86:5e:8f:ef:32:46:c1:a8:3f:1b:7a:31:74:
         99:a7:66:21:56:ea:62:f4:4c:f2:bd:7f:38:e6:81:bf:45:f4:
         a2:21:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:50:48 2026 by rpki-client