Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa
File:                     8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa (raw, json)
Hash identifier:          PVYly8HyRfR+cKBQ3MY72UFf6VnN9w067+BnnQcWXf0=
Subject key identifier:   64:96:A0:75:C5:41:3F:2E:C1:DA:7C:D5:97:51:DD:CF:C1:97:60:B0
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584D0D426716D3FD77E4ACEEAF80
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     10497
IP address blocks:        192.86.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:67:16:d3:fd:77:e4:ac:ee:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=a0b3b5c5-bce6-4977-9f0e-d6b36fe59c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:03:05:2b:b8:e8:e4:11:e2:17:4c:66:bb:
                    55:24:80:b8:de:1f:f0:41:8b:a1:03:64:54:68:8f:
                    66:4c:73:32:17:79:97:de:07:eb:14:e5:8f:56:97:
                    3b:14:76:1f:11:95:ea:c2:2d:5b:24:7d:df:d7:be:
                    2a:ac:9e:90:6b:af:7e:95:dc:a6:e9:38:5f:3d:72:
                    44:d0:fb:0c:a1:65:d4:a6:9a:5c:d2:15:cc:08:5b:
                    37:31:1d:bb:a7:74:64:c6:e3:6a:51:aa:fb:0f:27:
                    5e:57:3a:dd:d4:c1:fe:42:7f:58:9e:0f:c4:c0:73:
                    3c:06:bc:e0:fb:d8:e8:ab:95:44:48:08:40:ca:31:
                    91:72:4c:48:19:8c:16:95:b2:41:99:b4:d6:9c:e8:
                    9d:94:0b:98:08:c5:b2:5e:1d:b3:91:1a:ed:d2:0d:
                    12:17:31:37:69:eb:2f:58:4a:a8:1c:bd:50:aa:94:
                    71:3b:87:5d:b7:08:35:ad:fc:16:53:6b:ea:12:fd:
                    ce:d2:c2:89:c8:94:81:9d:39:07:b4:04:f4:a8:fc:
                    19:90:45:fa:30:17:58:0f:d6:75:b7:0e:f0:71:9d:
                    17:4b:fb:74:8c:cf:a4:b8:1f:20:07:4a:2a:69:b0:
                    9f:09:8d:d8:ae:b6:1f:b0:5e:2a:48:0d:b8:ae:c1:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:96:A0:75:C5:41:3F:2E:C1:DA:7C:D5:97:51:DD:CF:C1:97:60:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:71:10:8d:e6:44:07:39:6a:4c:d3:67:7a:6c:30:a2:25:b9:
         6f:2e:c2:63:ed:b2:60:20:08:08:f4:d5:39:9d:38:91:d6:4e:
         92:0d:75:6f:e3:16:37:dd:d3:84:31:ec:15:74:14:38:d5:dc:
         70:a4:46:ed:02:4f:4c:d1:a3:ca:48:16:26:59:0e:e6:db:f3:
         e1:0c:d7:9c:4a:60:e2:e6:88:ae:95:71:59:5e:54:2f:23:6f:
         7a:8e:7b:49:16:a9:58:8f:60:27:2a:a4:86:46:ba:6d:8b:69:
         db:23:64:11:27:92:5b:00:76:7f:35:d2:aa:d9:f7:4b:63:c4:
         3f:cc:2c:ae:c3:c3:2f:94:44:87:10:a3:7f:a3:18:40:9d:4b:
         96:29:a6:b1:e7:c8:0d:b5:b1:ea:b3:e5:d3:12:05:f0:ab:37:
         df:4e:94:a3:2d:0b:79:66:a5:89:75:81:12:92:75:68:09:76:
         ff:4f:d1:76:74:aa:a7:a1:6e:8f:2b:43:72:04:69:8b:92:8c:
         2f:cd:5b:7a:f5:a8:07:3f:11:0f:d8:9d:22:66:e6:fc:c6:06:
         fb:38:c9:7d:b0:4e:eb:69:30:4c:28:4a:b9:0f:82:cf:1e:7d:
         a2:7f:26:31:4c:eb:c7:a1:87:9f:31:fe:95:91:10:25:eb:78:
         9a:cf:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:55 2026 by rpki-client