Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d6955a48-35da-382a-bf44-8cdde64ca12a.roa
File:                     d6955a48-35da-382a-bf44-8cdde64ca12a.roa (raw, json)
Hash identifier:          Rgq9G7fHZBPYHZNHd+PClOZYghGPVZox6XjvlBCyjbk=
Subject key identifier:   57:BD:85:43:E2:E6:BC:2C:05:30:92:E8:63:B6:73:95:BA:42:79:AD
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584EDE58A94107A866CE16AD1125
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d6955a48-35da-382a-bf44-8cdde64ca12a.roa
Signing time:             Mon 17 Aug 2026 16:16:36 +0000
ROA not before:           Mon 17 Aug 2026 16:16:36 +0000
ROA not after:            Sun 15 Nov 2026 17:16:36 +0000
asID:                     55286
IP address blocks:        192.186.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:de:58:a9:41:07:a8:66:ce:16:ad:11:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Aug 17 16:16:36 2026 GMT
            Not After : Nov 15 17:16:36 2026 GMT
        Subject: CN=4e571295-9fdd-4bc0-a2e9-8ff6aab132cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:3c:14:65:34:2c:02:ca:95:ec:a3:02:94:
                    35:16:77:ba:b9:75:6f:4d:ed:2e:68:68:36:df:d3:
                    3d:f6:91:a2:03:9d:18:1f:b8:02:1d:02:54:89:0f:
                    9d:5c:37:83:c5:4c:01:ca:06:49:f8:9e:8e:97:25:
                    d5:08:34:94:64:7a:63:17:9e:5c:18:23:4c:3e:6b:
                    0d:7d:22:41:05:a8:21:4d:9d:01:57:94:1d:9b:dd:
                    6a:20:03:f6:fe:ff:a1:c3:4a:28:41:d0:e7:09:eb:
                    ab:a5:9b:6d:f3:4f:9d:4f:65:ee:6e:bf:e3:6f:09:
                    78:45:0c:0a:c4:36:33:bb:2c:e9:77:02:46:f2:6c:
                    fb:60:a5:a6:de:98:4e:08:f1:f0:8c:48:a7:69:52:
                    45:05:c6:1b:51:8a:29:48:3a:bb:c9:46:77:47:ac:
                    3b:c3:18:70:da:7c:e1:cc:c2:77:a1:e0:58:6f:52:
                    31:2d:40:9f:db:c1:6f:b0:3d:2a:f5:18:a0:7b:2b:
                    25:ab:08:56:a5:29:7e:39:97:a2:58:75:22:1b:93:
                    50:59:e2:12:3c:20:85:de:a5:d8:27:a7:b0:ce:34:
                    f3:d2:9e:25:b7:b1:aa:d8:c0:e0:0c:3f:23:50:0a:
                    34:4c:3a:f2:3f:c5:5c:f5:94:ee:de:53:5b:b7:21:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BD:85:43:E2:E6:BC:2C:05:30:92:E8:63:B6:73:95:BA:42:79:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d6955a48-35da-382a-bf44-8cdde64ca12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.186.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:6f:a8:2c:d9:35:5d:0d:fc:48:4e:3d:18:ba:4d:fc:92:
         c8:09:5f:4c:4c:51:21:31:49:ae:46:5c:ca:f8:80:38:29:e0:
         c4:15:70:cc:07:75:e0:33:80:ec:00:51:dc:a4:15:49:f9:38:
         7b:63:aa:69:46:77:c4:c6:1a:c2:55:60:f1:ac:90:f3:ae:49:
         7f:74:94:5d:53:51:3b:b1:d5:b7:00:5c:b0:92:f6:14:05:64:
         26:53:18:99:ac:cf:b0:64:51:c3:7f:ad:e5:fd:cb:d3:f1:38:
         b2:a6:c2:d8:92:9e:b6:a0:a6:a4:f4:f6:66:b8:1e:12:e5:7d:
         4b:d5:84:4b:04:f4:8a:ba:d6:11:b0:a5:0b:7e:e2:37:49:8c:
         cb:ab:c1:a8:a9:59:ac:8d:f3:40:0a:02:18:fc:06:1e:e5:cd:
         8d:10:dc:32:b5:b4:66:16:26:9a:cc:46:07:58:fa:5a:72:da:
         2f:97:c5:85:f6:7f:b2:c7:fe:dd:e9:d3:71:cf:8b:53:a9:96:
         46:80:92:8c:9e:f3:05:1b:f0:4d:03:14:44:07:10:d9:9f:f2:
         89:8f:21:ea:9a:ba:fa:dd:b7:e4:fc:18:ea:b3:32:35:a0:7d:
         2c:7b:f4:1c:9a:3a:2b:45:1e:6d:7e:cd:85:db:52:07:5f:4c:
         ec:16:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:16:25 2026 by rpki-client