Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa
File:                     68a0299b-9da0-3984-8e69-8112484fd69e.roa (raw, json)
Hash identifier:          CmUfCUKDOWv+Od0WheGIie6UmUFg0J9Th/9fHi6IJQ8=
Subject key identifier:   94:C5:85:47:DC:86:5F:2E:F2:93:0E:AC:10:B3:DC:1E:5F:37:E5:3B
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584F15CCEA2AE438960AE1ACC700
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        192.80.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ea:2a:e4:38:96:0a:e1:ac:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=d98dec81-e1d5-4c76-a551-203e938b9f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:e0:15:4a:a3:d1:20:b8:ec:f6:1b:81:e5:
                    fb:b3:e8:97:b0:94:2d:e2:b4:8b:7d:c6:bc:4d:00:
                    ad:67:3f:f2:de:f9:44:47:f9:7e:85:8b:e2:3d:49:
                    d4:32:65:81:f1:aa:15:b6:52:66:09:c9:e1:6a:91:
                    50:38:38:7c:8e:bf:3d:97:25:a6:93:c6:02:da:71:
                    9a:32:12:03:2e:ad:e7:e7:fb:9b:56:ad:85:29:d7:
                    08:dd:2f:bc:12:d1:12:95:b7:57:17:33:18:42:0c:
                    8d:ee:2b:f9:2d:68:94:c5:61:45:91:7c:b1:f0:03:
                    68:a4:0c:09:63:9e:73:cd:6a:fe:4b:61:6c:08:1d:
                    a5:4c:87:ff:42:86:72:99:a3:2a:46:ab:5c:c3:af:
                    5b:8e:62:8a:30:33:f9:1c:df:6f:cf:e9:e6:8b:2d:
                    06:e8:e8:31:7f:e0:5c:20:c6:02:aa:c9:8c:19:e5:
                    4f:70:6e:1d:42:0e:7f:df:d3:a8:ac:19:9d:f4:33:
                    b7:7c:82:2a:bb:f0:b6:75:0b:9f:e3:8c:11:2c:6c:
                    f4:87:d0:8c:62:bc:65:65:d8:3d:9f:0a:0b:88:36:
                    af:96:94:62:89:14:e5:d9:03:0a:c1:d3:a1:76:e3:
                    cf:72:ee:f4:0c:88:24:00:3b:a7:c7:47:a6:e7:f4:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C5:85:47:DC:86:5F:2E:F2:93:0E:AC:10:B3:DC:1E:5F:37:E5:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5e:74:9f:ca:1a:6d:76:15:dd:05:75:b2:c4:35:f9:70:4f:
         01:33:18:d4:b7:0a:e3:c7:7b:59:04:c8:7d:86:23:bc:fe:51:
         d0:90:e1:21:a3:d4:88:b3:10:f3:ea:92:58:02:da:21:75:7c:
         77:bb:0c:3d:d4:20:87:3b:e9:9a:7a:85:72:9e:77:ac:08:a9:
         e2:06:ac:ad:b2:6b:bf:ce:6e:3b:e0:34:55:3d:fe:76:dc:0b:
         1f:9f:0f:17:e7:89:14:ea:f8:39:62:f0:06:5b:01:41:b3:ca:
         b0:5a:c2:66:d6:d6:d9:33:0f:a9:77:35:84:e9:8e:da:0c:50:
         d0:22:74:6d:8c:1a:54:15:ec:4e:5a:da:20:ec:10:23:e5:be:
         9e:ed:1f:db:6b:ea:2e:dd:2f:fb:03:9b:85:92:59:a3:ac:6f:
         c6:9d:84:97:05:c7:b1:86:04:0c:ce:9a:58:29:ac:87:5b:d1:
         cc:84:ba:b8:e4:48:f4:a4:e8:c2:5a:e3:24:92:ab:d7:c3:2d:
         e3:d4:46:f6:4c:de:24:5b:c3:87:20:73:8d:e1:8e:bd:cd:62:
         d5:fa:15:4c:ba:94:df:97:9e:41:04:b7:10:e3:d5:54:03:38:
         1f:ee:40:2d:e5:01:7e:1b:29:6d:12:30:65:76:01:d5:e7:ce:
         1c:91:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:24:32 2026 by rpki-client