Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1192e41e-02f8-3af4-b26e-4e8c1de6e54c.roa
File:                     1192e41e-02f8-3af4-b26e-4e8c1de6e54c.roa (raw, json)
Hash identifier:          0kbWEsOqCailNCELeBjQSloxzZAz0mVWVoJXJ0s/xNM=
Subject key identifier:   76:AC:36:BE:38:F1:83:0A:B2:4A:08:D7:17:E7:7A:7B:74:F5:27:5D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F49742CFF6B8CE176AA3712F0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1192e41e-02f8-3af4-b26e-4e8c1de6e54c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53813
IP address blocks:        205.220.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:2c:ff:6b:8c:e1:76:aa:37:12:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=755e2e6f-6890-4a74-afd2-0bad580f44ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:86:1c:67:ba:ca:81:95:dc:11:9e:68:88:
                    22:11:d7:d1:4f:f3:70:07:2c:3c:5a:ea:5b:17:d2:
                    d2:58:e1:b2:4d:ea:24:08:4e:dd:12:83:bb:79:fc:
                    64:a2:1d:a1:47:cf:86:fc:85:c2:fd:85:40:56:35:
                    90:28:21:77:40:15:60:09:7c:60:d8:f8:08:4b:7e:
                    0b:1c:a0:ee:69:64:2c:96:c9:13:f0:a4:39:76:0b:
                    0a:3f:be:c4:a7:33:e0:ee:89:e0:f0:ff:07:3d:a4:
                    da:2c:e6:3f:40:fd:27:fc:7a:ce:ce:c5:75:31:f7:
                    54:9b:6e:ba:3e:05:14:7c:18:5e:1f:b1:09:d5:ca:
                    70:70:4e:eb:5d:1d:ca:3e:89:15:52:78:9d:61:e6:
                    12:d1:72:98:7f:af:8a:0b:e1:73:dd:8e:94:29:a1:
                    ce:57:0c:73:b7:ac:5e:7b:fa:19:56:88:66:4e:ff:
                    01:e5:10:e6:08:0d:98:cb:42:c0:89:08:f2:03:8a:
                    37:65:dd:c3:37:5f:9c:42:a5:13:32:e7:38:09:e4:
                    07:8d:cb:c2:cd:a2:4e:e9:56:a0:f1:c7:64:9b:0f:
                    e9:d0:a7:56:ee:fb:dd:2a:9f:53:41:c1:d1:f5:ea:
                    de:b5:1a:a9:f5:7f:1c:3a:b0:7a:94:00:eb:e7:e2:
                    77:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AC:36:BE:38:F1:83:0A:B2:4A:08:D7:17:E7:7A:7B:74:F5:27:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1192e41e-02f8-3af4-b26e-4e8c1de6e54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:ba:c3:06:b1:c2:4c:e3:b9:15:c8:c5:c9:a7:38:f3:e9:
         18:60:d2:fb:8d:e8:1f:4f:92:ad:0b:76:31:ba:2f:7c:75:30:
         72:70:91:a9:07:e5:07:0e:50:8e:ec:87:69:aa:d6:2a:27:a9:
         f1:a3:d1:56:e3:47:c9:ac:ee:6a:8c:38:9e:26:58:a6:a6:8a:
         8f:ee:51:c4:53:31:3d:e7:62:fc:9f:26:d4:9b:33:a6:c7:9e:
         df:09:b3:50:12:6c:13:bd:0c:f7:74:14:27:0b:87:5a:42:fc:
         e0:bc:49:00:d5:f9:15:18:47:81:53:dd:7f:ad:da:f8:a2:80:
         25:f8:a4:b9:9b:f5:8f:c9:83:e3:d7:7e:ee:55:f8:1b:64:70:
         7e:5f:e5:a9:5b:d9:56:a0:68:40:0b:ec:48:8b:78:57:9e:09:
         c4:9e:e1:5e:39:ae:51:1a:f2:d0:a8:b5:64:a9:a4:69:f0:b1:
         44:69:f4:b3:8c:46:37:44:c7:b2:06:ae:df:ef:da:3e:fb:00:
         ba:8d:7a:a0:ad:4f:75:fe:35:69:84:b2:ac:94:3f:6a:10:a8:
         b8:04:bf:9b:b2:9a:23:94:06:54:c8:85:fa:7a:5f:d2:db:89:
         e2:d6:31:f8:88:ab:48:19:72:72:d8:8e:45:c4:08:f2:88:d6:
         65:19:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:03:33 2026 by rpki-client