Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa
File:                     1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa (raw, json)
Hash identifier:          TyDdgoR9XbIRiVXHTT0czIwPRmFMkU0lSzy0vyQ8zW0=
Subject key identifier:   44:A2:AC:4A:60:69:0A:2E:59:45:7F:A5:DE:96:DD:8C:FF:FC:F0:28
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F4328584F46A7E042A2E2087AE2620500
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     62563
IP address blocks:        192.102.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e0:42:a2:e2:08:7a:e2:62:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=658903ac-32f3-4e09-a31d-a6fec09af262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:fb:67:eb:dc:b2:cd:28:d4:8c:a5:c5:6a:
                    6d:b0:3c:e1:9a:ef:29:16:68:fd:bb:2f:03:4b:04:
                    ba:eb:f6:b1:ec:1d:ca:11:ca:9e:a6:69:0a:85:c3:
                    64:e1:f9:1b:21:74:bf:49:62:b4:f3:e2:3c:ec:c3:
                    7c:f6:b8:7d:d7:6b:f3:f4:3a:bd:06:44:bd:50:f2:
                    a2:fa:26:3f:92:71:2d:f8:ae:5e:de:b5:6d:5a:a1:
                    3b:2b:da:54:d2:82:88:94:bd:85:5a:bc:8b:5d:d7:
                    d5:7c:47:c3:f8:57:3b:ef:fe:a1:cb:af:63:00:92:
                    44:aa:78:61:24:fe:fb:7d:0a:63:31:33:8a:3a:16:
                    52:2d:4a:28:ce:4c:1b:54:46:6d:a9:60:ed:d9:fe:
                    c7:d8:08:6f:54:44:8e:a7:52:0f:7c:89:bb:90:22:
                    d0:e0:8f:81:d7:b1:3d:09:1d:95:9d:86:e6:bc:bb:
                    57:c7:db:4b:66:a3:e1:0e:96:32:39:8f:38:ca:56:
                    7b:9c:bf:58:17:06:aa:4f:88:79:cf:1c:a6:ba:30:
                    c7:4a:39:d6:ed:cd:a0:02:b6:05:f5:98:8c:a2:06:
                    67:ab:cc:cd:da:96:1f:53:d5:53:1e:e9:a7:2f:70:
                    61:9b:5a:aa:f1:5a:81:a4:f1:6b:33:dd:b1:8e:15:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A2:AC:4A:60:69:0A:2E:59:45:7F:A5:DE:96:DD:8C:FF:FC:F0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/1c71c415-ff78-3f91-bfda-d4a71b48f9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:65:9e:5f:09:f0:84:ae:9c:31:2e:61:2a:b2:c1:84:70:
         c2:48:38:ba:70:c6:f4:ba:d7:ad:c5:d6:3b:1a:f6:88:3f:40:
         05:31:97:a7:b5:51:99:4d:f3:d5:e9:5d:78:bc:cd:33:62:37:
         0d:72:0f:c9:64:5a:54:71:be:5a:f5:83:53:c6:f1:32:bc:ba:
         d6:03:c9:91:a3:85:0a:43:d1:7d:3f:68:4b:d9:3b:9f:34:9c:
         8c:df:51:13:b3:01:02:d5:b3:6c:97:5a:84:07:54:76:f7:5c:
         4b:0e:e5:ed:8b:04:83:3f:6e:67:6c:91:b2:72:26:00:47:05:
         a0:56:a4:3f:b3:a6:39:e2:1e:5c:de:94:72:bc:b5:44:5a:2c:
         39:fb:04:91:73:d9:0b:0f:91:bb:69:7d:95:d8:c0:43:52:e0:
         93:b6:3e:b1:8a:5b:bd:e3:40:8a:2a:92:f9:be:5e:c0:68:73:
         f0:1f:5e:77:dc:70:9d:13:7c:62:d7:e8:ec:df:a9:64:f7:9d:
         a9:c5:ca:4a:5e:61:41:81:b8:f1:39:35:68:b2:e1:34:fb:da:
         3e:4c:30:c5:3f:43:22:56:ba:54:4d:80:a0:9a:e1:c2:74:82:
         44:10:85:47:21:24:24:55:3e:6b:fa:37:57:3e:a0:d6:54:cb:
         37:36:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:56:38 2026 by rpki-client