Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/d0a9165d-c64f-31d0-801f-e3fb4cb5be39.roa
File:                     d0a9165d-c64f-31d0-801f-e3fb4cb5be39.roa (raw, json)
Hash identifier:          4cu54Dp16HQ1Vz3nXv+a9oDTkVjAgQeBjeGCZrtsIGY=
Subject key identifier:   E1:95:44:74:73:1C:37:F3:BF:9F:6A:40:CD:B9:B2:4A:61:92:56:E5
Certificate issuer:       /CN=19b7c71c-26ab-4c79-8c6d-452479d2d710
Certificate serial:       010D0C9F4328584F498AE20FECFC353472FF1A00
Authority key identifier: A9:18:BF:8A:A5:F4:FC:BE:37:CD:76:A1:9E:FB:62:33:18:06:AC:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/d0a9165d-c64f-31d0-801f-e3fb4cb5be39.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        192.84.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/19b7c71c-26ab-4c79-8c6d-452479d2d710.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/19b7c71c-26ab-4c79-8c6d-452479d2d710.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:e2:0f:ec:fc:35:34:72:ff:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b7c71c-26ab-4c79-8c6d-452479d2d710
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4089cd7b-9aad-40c6-bf8f-86112284830d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:85:62:e0:30:c2:2b:ec:45:99:ca:60:ef:
                    6d:fa:b9:d2:87:c1:fa:7e:a8:40:72:9b:0b:a5:97:
                    7b:eb:37:84:ec:4b:46:be:a0:9f:83:00:32:73:25:
                    b5:ca:9e:f0:ab:7a:5a:86:f4:49:c4:62:29:06:d3:
                    c3:d1:9d:6c:4d:b8:87:60:85:35:b1:b6:26:d6:1c:
                    18:3b:44:84:c9:34:67:66:f1:e4:25:fc:99:3f:61:
                    d6:40:e1:4c:68:46:ef:88:e7:71:36:91:e2:82:e4:
                    14:c5:71:15:c1:0f:a5:c2:e0:ae:4b:b0:fb:54:e1:
                    bb:85:bf:3e:04:e1:32:aa:f1:49:29:db:54:fb:d4:
                    70:d6:b8:2f:d6:ea:00:21:22:1d:e6:7d:a9:64:a5:
                    e9:0a:08:d8:5e:7b:12:40:47:71:5b:19:21:9d:c0:
                    28:c9:63:ac:02:2b:ce:2a:06:1a:d8:fb:16:e3:82:
                    16:10:b0:58:c4:28:05:78:39:ea:81:2a:39:80:d6:
                    48:76:6e:3e:ef:a3:00:93:fb:83:b5:7c:1c:45:a3:
                    61:fb:57:25:00:6b:83:47:34:10:09:93:21:0c:eb:
                    7b:3d:ae:96:83:3c:14:16:09:e5:21:23:68:c0:62:
                    f8:fa:b9:d9:b8:06:01:ec:db:eb:79:4e:12:60:35:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:44:74:73:1C:37:F3:BF:9F:6A:40:CD:B9:B2:4A:61:92:56:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/d0a9165d-c64f-31d0-801f-e3fb4cb5be39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/19b7c71c-26ab-4c79-8c6d-452479d2d710.crl

            X509v3 Authority Key Identifier:
                keyid:A9:18:BF:8A:A5:F4:FC:BE:37:CD:76:A1:9E:FB:62:33:18:06:AC:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:8a:43:94:48:e6:45:66:cb:91:2f:cb:5d:e4:05:64:57:
         c4:30:d9:87:64:15:e6:47:23:e7:23:bb:11:2d:fd:96:9c:55:
         7b:90:81:87:0a:5f:ba:43:94:45:e6:c2:55:fe:a8:4b:97:d4:
         f6:10:99:cc:52:6a:8e:cd:57:2c:ec:6f:ac:28:d6:4c:56:24:
         54:b4:57:01:ce:4b:1b:7f:2f:db:4b:54:13:35:05:3a:82:93:
         11:5a:23:75:3b:89:54:be:f7:55:9c:8f:71:5a:f6:01:86:cc:
         82:e2:8b:f7:90:86:dd:d0:18:52:2e:43:57:e2:d4:1d:58:d3:
         86:63:82:f3:6d:b6:26:a9:c1:6e:55:ec:5a:8a:5b:1f:0e:2d:
         e1:8b:c5:2f:35:e0:c9:45:20:26:b3:ea:de:83:e5:1c:e8:f8:
         8b:75:bb:fb:ed:1a:bd:62:bd:01:7d:e7:ed:8b:05:2c:ef:3b:
         fe:d5:ec:f9:c3:de:80:e4:b1:46:36:7b:f6:5a:38:ec:82:49:
         10:3e:a4:0f:83:51:db:55:c7:d7:60:2b:89:47:a2:0d:2b:4b:
         5d:57:f6:76:ae:bf:98:ff:11:7e:26:eb:3d:bf:1f:00:5b:41:
         fa:ad:e8:e9:1e:a1:be:3e:90:9f:f7:e6:8c:3f:91:4b:73:52:
         1e:e6:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:53 2026 by rpki-client