Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8/0f837110-d226-3107-94a4-850397e90749.roa
File:                     0f837110-d226-3107-94a4-850397e90749.roa (raw, json)
Hash identifier:          FMTzochpl0r9faPYYlsUXJmCjpY+DHxze8vVe8Wq3/w=
Subject key identifier:   D9:49:85:C0:6E:EA:CF:7D:98:14:0E:6E:18:65:9F:8C:B1:69:D5:7E
Certificate issuer:       /CN=8f62b14f-5c23-47df-b372-14e5f779eaf8
Certificate serial:       010D0C9F4328584F6292D74903943BAEA6089680
Authority key identifier: 53:B3:0D:BF:A0:E0:C9:89:29:76:51:2E:7E:42:69:C1:3A:4A:88:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8/0f837110-d226-3107-94a4-850397e90749.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     12158
IP address blocks:        192.84.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8/8f62b14f-5c23-47df-b372-14e5f779eaf8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8/8f62b14f-5c23-47df-b372-14e5f779eaf8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d7:49:03:94:3b:ae:a6:08:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f62b14f-5c23-47df-b372-14e5f779eaf8
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=bddc686c-fc3a-4f0e-8bd2-ded365826ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:17:01:c3:ff:a4:9f:72:1e:0f:4e:d4:01:
                    24:48:1e:73:92:e4:6f:64:01:10:0c:52:42:03:db:
                    82:66:8c:90:38:11:9d:2f:66:c8:f3:b7:d0:ed:d0:
                    0a:36:f3:e2:4b:01:42:7f:be:3e:69:c2:2c:f5:da:
                    e6:e7:db:19:22:4e:01:73:e6:fb:16:48:13:d6:89:
                    f5:a2:d1:87:b1:b3:ff:9b:61:23:76:9b:3d:7f:61:
                    1f:c4:20:56:ea:64:7b:c8:ba:17:9a:e2:f7:7f:82:
                    38:88:0e:f2:a0:69:96:8d:32:a3:92:1f:7d:ea:ad:
                    f2:c3:0d:a0:25:40:ee:51:31:3f:a6:45:c8:56:6b:
                    d2:fb:01:da:21:0e:34:f9:1a:57:85:15:71:c8:32:
                    83:0d:76:08:64:67:86:c2:38:ba:79:b5:37:e6:e7:
                    28:ed:70:74:22:17:11:6e:a0:2d:cd:3c:9a:9e:bc:
                    0f:d6:e4:19:d1:2d:6c:69:e3:86:fc:d1:45:26:fe:
                    05:ae:30:b0:d2:4e:cc:2b:72:88:f4:d7:42:1a:bd:
                    64:96:7f:bc:c5:39:16:93:e7:ce:08:96:17:55:74:
                    9f:e3:50:8e:73:1b:dc:26:cc:71:65:8a:91:35:fd:
                    aa:b7:93:1a:7c:cb:e4:58:38:fa:6a:58:9a:71:e7:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:49:85:C0:6E:EA:CF:7D:98:14:0E:6E:18:65:9F:8C:B1:69:D5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8/0f837110-d226-3107-94a4-850397e90749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8/8f62b14f-5c23-47df-b372-14e5f779eaf8.crl

            X509v3 Authority Key Identifier:
                keyid:53:B3:0D:BF:A0:E0:C9:89:29:76:51:2E:7E:42:69:C1:3A:4A:88:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8f62b14f-5c23-47df-b372-14e5f779eaf8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:21:7d:cf:23:1c:96:52:9e:da:13:26:ea:30:d4:8a:ca:a2:
         9f:59:ac:d1:db:7b:92:52:7d:47:1d:6f:95:f8:cb:60:66:69:
         5d:de:93:8c:e8:cc:66:20:92:c9:30:14:9c:63:1d:e0:69:ed:
         c5:6c:f4:c7:01:66:2b:99:91:10:8f:c7:2d:98:2f:cd:3f:36:
         3f:85:bd:3c:c0:7b:f1:1c:23:96:dd:3b:b3:dd:03:16:a2:c0:
         2c:45:a1:a7:e7:c6:09:30:75:3c:f3:32:35:de:98:7a:12:77:
         63:ff:ff:15:4b:8d:1b:5d:ce:e2:46:b4:a6:24:51:e6:17:3a:
         d7:a1:53:31:48:43:8c:b9:1b:c6:70:fd:d9:44:fb:ec:79:e9:
         e8:57:cc:e1:0d:e4:28:2c:82:43:4a:ab:67:45:5e:09:c1:c7:
         e5:fb:9a:cc:8e:15:62:52:f9:09:14:c7:f2:a3:ac:42:81:9b:
         fd:f4:26:63:55:49:32:00:ce:9c:53:19:99:bc:2c:1d:11:9f:
         b5:54:77:c8:41:0e:10:ef:f4:74:da:d7:f9:aa:87:c0:3a:6b:
         a0:a3:96:d9:fe:2e:86:7a:98:d5:51:15:32:77:b5:fe:6a:ae:
         15:f5:cf:55:a7:0e:da:d3:d0:c3:90:73:b2:e8:72:3e:38:bb:
         11:f1:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:22:37 2026 by rpki-client