Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa
File:                     33c0f0c7-189d-3673-9471-4ef912728a13.roa (raw, json)
Hash identifier:          U2dpDwJ+2SOXj8GVWHZjiEaUmAO7aHABllwIsjS35wU=
Subject key identifier:   34:64:4B:B3:3C:78:FD:2F:D9:3F:AE:27:29:75:33:EC:B4:3A:5D:DD
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584F62931ECCD9792523021FE678
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     29888
IP address blocks:        192.136.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:1e:cc:d9:79:25:23:02:1f:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=19798734-0aa0-4a07-8a0e-2ad70217ffb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:12:af:7e:01:1f:78:f0:75:e0:96:97:a2:
                    48:c4:5a:dc:f8:2d:a4:27:c6:c9:d9:43:01:61:8e:
                    8b:af:81:e8:07:ba:82:a9:24:a2:f6:be:76:4b:b0:
                    a8:9e:a5:c8:32:90:d7:64:ee:b5:cd:9a:a8:ad:71:
                    75:8f:21:30:79:fa:4d:04:c3:77:23:04:08:31:b8:
                    4c:13:82:84:74:89:d1:97:c4:df:ce:64:a2:88:8e:
                    eb:a4:6c:01:28:74:c5:e0:90:b9:ae:6f:1e:a8:02:
                    a3:ad:d8:94:e2:0a:8f:de:2d:b6:b4:f2:de:65:21:
                    66:80:3b:b3:c4:f2:39:a6:9e:7f:40:27:dd:da:ba:
                    bc:ef:63:27:07:19:e7:ec:8c:56:8c:a3:23:67:34:
                    85:66:2d:4a:76:64:25:37:40:f8:35:39:ff:8f:bb:
                    b6:83:e1:29:ba:a6:66:e7:47:2d:39:f4:cb:ee:fc:
                    23:b2:0f:33:54:9a:bc:90:58:b7:b6:2b:58:66:7b:
                    06:f0:71:60:49:1b:46:bd:0d:e3:15:a8:90:b9:23:
                    ee:9c:de:60:af:d3:a1:1c:27:4a:c1:30:22:21:11:
                    6c:ea:37:31:3e:1e:42:d8:6e:3b:81:a0:23:6f:3a:
                    0d:04:7b:0e:23:e4:a4:80:e4:5b:cb:fa:d7:22:af:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:64:4B:B3:3C:78:FD:2F:D9:3F:AE:27:29:75:33:EC:B4:3A:5D:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f7:c4:3d:3d:0e:6d:09:46:aa:d5:bd:c9:60:d0:3b:5a:73:
         d5:86:3f:79:a4:0c:a7:76:2b:96:ba:a8:d5:50:f6:03:ea:ed:
         72:67:b6:96:bc:da:e8:bd:88:4d:af:83:16:cc:6a:25:76:77:
         59:46:2f:51:4c:0a:4a:1f:7c:51:e7:eb:d1:29:45:13:e4:46:
         93:1a:a0:d5:62:9a:df:66:ba:44:97:b5:ec:c9:29:35:ce:67:
         30:5d:76:aa:ff:a4:6b:38:6e:e7:f8:85:dc:db:61:bf:0b:52:
         8f:06:06:aa:5d:ec:0b:01:aa:7f:09:dc:ba:da:29:28:53:58:
         c0:33:e0:e0:d2:7c:48:49:f1:4d:be:0d:0a:1c:d3:ab:37:79:
         f8:79:fb:a2:b4:f4:20:76:39:c0:c1:e8:e5:6e:4e:3c:4a:0c:
         27:b7:3a:db:bf:12:f8:13:b9:14:ee:72:2b:7b:1d:7b:9c:a1:
         d7:55:9e:24:e0:42:8e:43:8b:c3:1a:4d:6c:ea:a1:af:5e:c3:
         a0:56:46:d8:3d:7a:87:37:23:0d:d2:84:2c:b6:d7:0d:3e:e7:
         04:3c:7c:1a:c0:5e:f9:b3:57:4a:48:80:b0:ff:23:c1:48:4e:
         42:f4:69:21:c5:c1:49:ca:81:49:d1:93:28:3e:f8:9f:86:52:
         64:4e:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:02:58 2026 by rpki-client