Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78/d5721231-0a25-3b6e-9c35-b5f1b8630d7c.roa
File:                     d5721231-0a25-3b6e-9c35-b5f1b8630d7c.roa (raw, json)
Hash identifier:          n2e3t6tsu5l9BFQgy4GTJF+/pYMzXlmV87n8ZMM9L2U=
Subject key identifier:   FD:23:E1:31:52:94:77:D8:97:F6:02:01:80:30:52:C3:4B:2F:14:83
Certificate issuer:       /CN=18d35b3c-190d-4bee-b8c7-ff522cda0f78
Certificate serial:       010D0C9F4328584F4974C62DF71AC685FF17F200
Authority key identifier: F2:29:45:63:A8:81:21:BF:21:6D:46:83:AB:AE:65:04:E7:71:D3:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78/d5721231-0a25-3b6e-9c35-b5f1b8630d7c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        192.133.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78/18d35b3c-190d-4bee-b8c7-ff522cda0f78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78/18d35b3c-190d-4bee-b8c7-ff522cda0f78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:c6:2d:f7:1a:c6:85:ff:17:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d35b3c-190d-4bee-b8c7-ff522cda0f78
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=19329de1-533b-471f-90c5-3575be4ab607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:f1:76:a2:43:0d:f3:cb:f5:27:1f:a5:5c:
                    7d:da:b3:dd:06:fb:24:10:f3:1f:24:09:d5:93:25:
                    cf:8b:d8:c0:57:8d:59:0d:5d:d5:c0:0e:08:64:b2:
                    5f:7f:e1:91:f5:be:a0:d4:c2:93:1a:70:f2:07:a6:
                    15:7e:82:8e:fe:15:9b:ac:f7:10:b6:50:af:c4:a5:
                    30:8c:92:50:09:54:2a:b9:31:3c:e3:89:27:ca:ab:
                    ab:67:96:b9:30:05:a0:64:9f:74:c0:d4:a9:d8:eb:
                    d7:94:4b:d9:b1:b8:a7:f5:7a:94:b1:99:6d:f9:bb:
                    58:70:67:64:30:de:35:5a:93:9d:04:4e:94:db:d8:
                    bd:10:68:6a:d7:96:0b:22:de:f1:d7:69:8b:96:a1:
                    9f:c0:11:a2:f8:d8:f7:9a:93:06:cc:75:ff:46:42:
                    47:61:4c:14:db:c4:16:52:fc:17:fc:48:bc:53:12:
                    0b:5c:af:41:77:c9:56:64:53:8b:8c:0d:fa:85:66:
                    f3:23:5d:28:0f:39:10:1c:dd:c6:5f:af:f9:01:56:
                    6a:d9:16:7d:9d:a3:0b:c8:84:44:d8:00:94:72:15:
                    71:14:e8:cc:45:22:c6:15:aa:0c:d8:87:32:bc:72:
                    a0:aa:7b:d4:eb:e5:18:9c:ee:11:ae:98:32:f1:b5:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:23:E1:31:52:94:77:D8:97:F6:02:01:80:30:52:C3:4B:2F:14:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78/d5721231-0a25-3b6e-9c35-b5f1b8630d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78/18d35b3c-190d-4bee-b8c7-ff522cda0f78.crl

            X509v3 Authority Key Identifier:
                keyid:F2:29:45:63:A8:81:21:BF:21:6D:46:83:AB:AE:65:04:E7:71:D3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18d35b3c-190d-4bee-b8c7-ff522cda0f78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:f1:3b:5e:74:2d:d6:df:d3:2b:70:4c:29:75:34:a6:cf:
         b2:82:fc:7f:b9:73:21:73:b4:4d:61:2f:df:bf:f9:6b:62:ed:
         38:fe:5d:a5:d4:f9:c5:8d:88:aa:40:4a:d4:0d:6c:23:58:18:
         50:ba:0c:90:43:09:f2:4c:5b:49:fa:63:84:0f:8c:8d:95:9a:
         15:da:6d:fe:cc:37:9f:f2:32:b9:f9:70:54:46:ca:04:fa:b2:
         c1:26:23:b5:84:28:2c:12:56:dd:b9:ac:f1:5a:0e:94:1b:31:
         3b:52:b2:bd:78:01:95:52:0e:06:9f:da:b7:1d:ea:6a:2d:eb:
         29:8d:17:b9:c5:f6:0a:b7:cd:ff:08:0c:8d:e7:fd:b5:e5:6c:
         57:af:0f:69:db:69:90:68:3b:12:0e:4d:01:a6:72:b5:cb:16:
         de:5f:a2:80:08:09:f4:92:5e:a9:8d:08:54:1d:eb:02:15:52:
         f0:65:ab:ac:3d:a8:3e:3a:70:8e:fd:ca:96:99:36:72:df:e7:
         67:3d:13:fc:52:fc:88:8e:7a:8b:11:bf:77:d9:27:f2:f4:d1:
         9e:26:1d:4c:7d:f3:49:45:67:01:5e:8e:e6:bc:26:55:fe:66:
         26:b7:3d:bf:31:40:2e:ec:65:03:3e:40:af:a5:97:ba:e1:dc:
         68:98:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:01:01 2026 by rpki-client