Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559/9b3d4190-9ede-37ee-9409-954cda1585c3.roa
File:                     9b3d4190-9ede-37ee-9409-954cda1585c3.roa (raw, json)
Hash identifier:          LZTWdYDflAhDZrtHTAmcox3SCPNGpZ/o8w+/kCKX1YA=
Subject key identifier:   24:48:CF:BA:C8:CE:EF:3B:A2:AA:C1:68:CC:2F:DA:02:EB:5A:9E:1D
Certificate issuer:       /CN=60287db1-d1c2-4133-a32a-9c64f2800559
Certificate serial:       010D0C9F4328584EE7BC952C4E574A39EEC08400
Authority key identifier: 43:2C:46:A6:69:8C:11:38:BA:3C:43:23:63:88:6D:D8:34:4B:67:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559/9b3d4190-9ede-37ee-9409-954cda1585c3.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     22616
IP address blocks:        192.26.208.0/24 maxlen: 24
                          192.26.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559/60287db1-d1c2-4133-a32a-9c64f2800559.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559/60287db1-d1c2-4133-a32a-9c64f2800559.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:95:2c:4e:57:4a:39:ee:c0:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60287db1-d1c2-4133-a32a-9c64f2800559
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=7a78cbc6-5344-4613-8e91-b21ca7c19631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:90:a7:03:88:6a:eb:7b:51:e4:86:90:64:
                    d2:0a:ab:93:9b:60:f5:11:f9:3f:15:af:a6:17:ec:
                    e1:c0:c1:9c:8e:59:90:6b:66:59:d3:88:27:35:5c:
                    57:9c:57:a9:d0:9d:f5:9d:2b:d7:81:8b:b4:5c:db:
                    d5:0f:bf:78:c7:4a:b7:d9:f2:67:2f:f4:48:fe:78:
                    e7:4b:5a:b0:37:01:a3:8c:ed:5d:f6:44:c6:1f:ea:
                    13:3e:32:d4:70:9e:64:a3:c3:78:9c:6c:1d:03:39:
                    85:a6:93:c7:ec:ce:ce:73:db:e4:47:44:12:bb:71:
                    18:2e:73:ea:78:0f:34:a3:1b:18:30:b0:76:a3:d6:
                    ae:d1:4b:ca:4a:ff:14:95:0d:ca:7e:f6:97:7e:38:
                    ee:a8:1a:ae:d0:f7:12:cd:a8:7c:01:ff:c0:36:14:
                    49:4e:c5:de:b9:cb:e0:0b:5e:d4:75:25:73:11:32:
                    0f:b4:0e:96:d6:ed:68:cb:29:0f:09:4a:2c:66:12:
                    a4:c8:c5:24:6d:10:98:ed:75:d7:16:7c:5a:6f:ba:
                    96:6b:6c:37:83:64:58:5d:7e:ea:c5:81:cf:e7:7f:
                    64:ed:3d:cb:40:64:e8:99:22:8c:3c:b0:08:51:97:
                    32:b8:52:7e:aa:9c:5a:5f:3b:44:6c:ee:2f:46:cd:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:CF:BA:C8:CE:EF:3B:A2:AA:C1:68:CC:2F:DA:02:EB:5A:9E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559/9b3d4190-9ede-37ee-9409-954cda1585c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559/60287db1-d1c2-4133-a32a-9c64f2800559.crl

            X509v3 Authority Key Identifier:
                keyid:43:2C:46:A6:69:8C:11:38:BA:3C:43:23:63:88:6D:D8:34:4B:67:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/60287db1-d1c2-4133-a32a-9c64f2800559.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:76:2a:44:0e:7a:49:ce:6f:3b:06:4d:65:46:10:08:84:
         69:8b:7a:92:dd:29:48:0c:2c:7d:c5:b1:45:2b:09:8e:b8:26:
         5e:fe:de:13:6a:da:99:06:c0:68:26:ac:89:04:55:cf:70:99:
         da:b8:b2:80:0b:51:41:51:7c:66:8b:af:f0:35:da:82:62:f5:
         7a:1b:98:63:93:fc:aa:5b:f8:ca:2a:12:18:cb:f0:80:99:d9:
         ed:be:1b:02:67:90:e9:66:73:23:0c:6c:62:78:03:0c:44:d3:
         8f:d3:96:3b:45:75:89:95:9d:d6:d6:56:b2:72:36:3a:75:1d:
         71:12:5d:25:f2:e1:84:b0:1c:f0:2a:57:12:f2:c9:f5:da:d1:
         98:d4:22:37:5d:10:ac:fc:ee:46:38:00:97:bc:1c:88:bc:63:
         cf:ad:a5:09:f6:79:c4:c8:82:fd:50:0a:4f:df:a8:98:16:ac:
         5f:a6:07:34:d2:ca:81:c7:f6:6d:52:6a:6d:eb:29:65:f9:30:
         12:d1:e4:44:45:d9:ce:68:01:9f:76:0b:e5:85:79:09:69:c3:
         63:c8:a1:55:9c:5a:5f:c6:21:02:c2:e1:6f:86:ed:d4:82:18:
         92:36:ee:59:b1:b5:1e:f0:72:3d:01:ed:07:7a:0f:b8:d3:66:
         ca:36:aa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:50:26 2026 by rpki-client