Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa
File:                     121123d8-f74f-33d5-8776-bedc2864efb9.roa (raw, json)
Hash identifier:          fB7K0Qi16lCcHMjc2sVzkPm5DHRZmVQz6Ei5mMm9eYU=
Subject key identifier:   ED:E2:62:F6:91:63:27:76:B6:0E:70:B4:1F:D7:71:FB:B4:43:B4:47
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584F4976036B2EAE805B93FBF480
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10497
IP address blocks:        192.86.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:03:6b:2e:ae:80:5b:93:fb:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8fcdbf93-1265-4ed5-beca-64dbb7332dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:2f:cc:46:fe:19:5e:48:78:57:29:3b:4d:
                    de:9c:6f:79:48:39:34:29:2d:18:75:76:af:3e:4f:
                    05:d2:c5:5e:05:e6:6d:bb:35:5f:9c:5f:54:0f:7b:
                    d7:b7:f8:14:af:14:1b:1e:fb:0d:cc:7a:2d:f9:33:
                    18:cb:b3:cf:9b:19:3e:3d:c3:4e:ac:5e:b0:8b:22:
                    22:3e:5e:e8:94:5f:1e:00:92:09:90:55:ec:95:63:
                    58:69:c7:e3:e5:cf:83:60:ef:de:d0:c2:ae:ec:4f:
                    1d:05:56:e5:c0:8a:0b:02:6f:98:63:68:5d:79:ed:
                    fb:f3:fb:3d:ec:0c:1d:23:cc:d2:d4:c3:0c:d6:6c:
                    c1:3c:4e:5d:9d:00:97:7a:02:23:e8:63:3c:ef:5e:
                    d1:8d:4b:82:9c:18:65:84:66:05:2c:1f:f9:ff:b0:
                    72:ef:62:19:9a:dc:28:76:a5:2e:49:4c:96:59:23:
                    7d:27:f9:a3:ac:8c:c7:81:0f:8f:4f:8f:db:31:64:
                    7b:0b:9f:15:93:dc:56:2d:84:90:c9:04:b0:4b:f9:
                    90:5d:77:95:04:06:c8:67:3e:9e:ea:8e:44:eb:7b:
                    e2:ca:05:96:6e:06:74:3f:48:2f:f9:a8:f8:08:e5:
                    67:d9:11:b9:e1:ef:13:b8:0e:3f:ec:c9:fb:db:d0:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:62:F6:91:63:27:76:B6:0E:70:B4:1F:D7:71:FB:B4:43:B4:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/121123d8-f74f-33d5-8776-bedc2864efb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:df:c9:24:50:b6:21:95:3e:0a:41:5d:1d:ca:b9:ef:26:12:
         40:de:99:c2:32:3a:46:67:10:09:d6:b6:4a:49:71:f4:fd:8d:
         c3:bb:6b:8c:64:c2:e1:0a:46:b7:db:94:52:78:dc:a7:2d:3f:
         f6:19:92:49:15:79:73:d8:37:6e:6d:5d:96:d7:b4:96:eb:99:
         b4:7f:97:8a:2c:bc:42:33:25:8c:03:14:5c:bd:04:d1:a5:ef:
         2c:8a:78:af:27:c6:69:2f:27:b3:39:f4:68:50:a4:d7:c7:25:
         88:38:d4:e3:e4:4a:79:7a:25:72:37:ce:b3:fa:b3:57:2f:49:
         0c:d7:7a:7b:c8:7c:ca:9f:2c:1a:1a:cb:02:68:5d:6b:e3:0c:
         74:a2:36:96:8a:c1:39:05:45:eb:a1:74:2e:dc:7c:a5:cd:1c:
         50:4e:07:05:a1:bd:fa:2a:4b:67:d3:a5:31:26:06:98:27:7f:
         80:de:d0:6b:2f:5a:1f:01:f1:2e:49:cf:f5:ae:5a:7c:72:79:
         50:41:bf:cf:c7:c7:a4:96:f4:75:93:01:fe:fa:e8:c2:f1:92:
         95:50:17:2f:2e:2b:ae:67:bf:4c:9b:05:ee:dd:68:8c:00:82:
         04:8c:2c:0f:bc:46:23:73:9c:d1:f7:d8:5d:6f:98:d4:bb:f0:
         54:78:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:58:20 2026 by rpki-client