Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/d55dd133-3bb5-3511-9cbc-7e3c712992f0.roa
File:                     d55dd133-3bb5-3511-9cbc-7e3c712992f0.roa (raw, json)
Hash identifier:          Bc1coK2hITsAtzN2skk5AQI97GhHDfLqQ+xYQFL+LW4=
Subject key identifier:   25:9A:15:44:48:0C:76:F1:68:6C:AD:E5:8C:1D:0A:89:C9:DB:FE:3E
Certificate issuer:       /CN=47dcd76c-a53c-4746-b38d-ab33e0246341
Certificate serial:       010D0C9F4328584F48FBE1E649804608F6267680
Authority key identifier: 47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/d55dd133-3bb5-3511-9cbc-7e3c712992f0.roa
Signing time:             Thu 24 Sep 2026 21:01:10 +0000
ROA not before:           Thu 24 Sep 2026 21:01:10 +0000
ROA not after:            Wed 23 Dec 2026 22:01:10 +0000
asID:                     17215
IP address blocks:        192.189.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:fb:e1:e6:49:80:46:08:f6:26:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47dcd76c-a53c-4746-b38d-ab33e0246341
        Validity
            Not Before: Sep 24 21:01:10 2026 GMT
            Not After : Dec 23 22:01:10 2026 GMT
        Subject: CN=6d7590ff-fdd3-4d98-80ca-1acae75b6b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:8e:8d:26:e4:21:43:05:b2:bf:7f:49:1e:
                    60:f1:82:b9:dd:60:f0:b9:19:07:c9:b8:38:ae:05:
                    68:dc:94:e6:9e:da:5f:3a:bc:19:5f:e2:6a:eb:e0:
                    9e:14:21:78:04:9b:27:32:3d:67:f8:95:e3:69:48:
                    8e:13:91:0a:4b:c4:3e:fd:af:59:be:75:34:b3:10:
                    4b:dc:39:a5:6d:e4:04:e8:1d:e6:b0:8b:98:62:fb:
                    b3:7b:61:58:f2:15:fc:42:b8:b0:ae:95:c7:ac:cc:
                    02:0f:62:bb:12:98:ae:cb:c4:c1:94:a0:17:66:a3:
                    ae:db:90:30:9f:02:20:42:1d:ac:cf:d6:cd:50:a1:
                    08:53:f9:67:6e:5e:6e:a9:9b:5b:6f:9c:d8:68:00:
                    0f:7d:c3:9e:57:84:bf:e8:e3:eb:6d:32:bb:ab:bd:
                    3c:6b:fd:a9:30:b7:9b:27:c3:80:b4:df:4b:fa:79:
                    02:15:e7:48:63:1a:99:4f:3e:4a:76:3c:14:3c:be:
                    6f:55:05:db:50:bc:2b:fa:0d:96:60:60:ee:b9:c5:
                    d9:cd:af:23:89:94:3e:76:7c:79:f8:20:b2:f5:94:
                    9d:99:82:03:2c:a9:c3:1d:ef:ef:1c:fe:55:af:ef:
                    9a:a6:22:80:aa:d5:2b:91:fc:de:f1:16:cf:18:be:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:15:44:48:0C:76:F1:68:6C:AD:E5:8C:1D:0A:89:C9:DB:FE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/d55dd133-3bb5-3511-9cbc-7e3c712992f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl

            X509v3 Authority Key Identifier:
                keyid:47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:eb:99:ae:e8:02:e9:49:6f:5f:25:4c:6b:76:a6:d7:99:
         03:06:a1:d3:19:e1:07:79:28:3c:a6:1d:54:42:25:d3:9a:3f:
         c5:66:cd:ab:64:b1:9d:42:b2:a8:72:93:d1:35:8d:25:ef:9d:
         b1:fd:3c:63:87:cc:73:b0:0a:2f:5b:1b:fb:35:a5:6a:dc:d2:
         99:43:99:ad:32:76:65:e0:11:a5:b6:3f:aa:51:2c:ee:cc:a0:
         6b:e6:bb:06:bf:08:b9:f7:95:56:74:79:c8:d9:ce:13:05:35:
         23:48:37:b3:56:35:96:23:e9:04:da:1a:b3:e7:cb:37:d5:c5:
         70:37:17:5c:3c:4d:d5:3b:de:46:4b:5f:a0:47:b2:bc:19:a9:
         4a:c8:bf:ca:7a:34:c5:9e:ad:60:29:49:14:84:69:2c:bc:7f:
         1f:cb:38:0c:3f:b1:ad:c0:c7:37:04:5e:4b:6b:08:00:5c:ac:
         f1:53:78:0c:62:d0:11:88:bb:ee:24:9f:73:c4:4f:71:a7:05:
         1c:ef:51:d3:a6:67:0e:8d:bb:c7:a7:dd:6c:b3:9e:30:d5:d4:
         d3:e6:16:55:02:d2:3a:d5:97:16:41:38:83:68:cd:78:23:db:
         97:2c:f6:15:e3:2e:fe:95:e3:38:e0:49:36:96:81:f1:e7:86:
         46:78:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:24:24 2026 by rpki-client