Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
File:                     8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (raw, json)
Hash identifier:          9OffMtBmRJsck6Z/NFgzmktL2uFy9WAMqX4Z7p99nyE=
Subject key identifier:   BA:44:50:EE:C7:E9:EF:FB:43:6B:C7:7F:CA:BF:86:AA:9E:33:5A:0E
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584F497516D2CF16F5B4A264FF80
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20237
IP address blocks:        192.103.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:16:d2:cf:16:f5:b4:a2:64:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=75195d91-8137-469b-80f0-ce85a17b4f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:6c:76:8c:fd:53:bc:9c:05:f3:8e:11:c9:
                    ad:81:7d:0f:95:44:36:8c:cd:52:97:08:a7:89:6a:
                    9d:89:fb:32:37:a9:a2:09:66:dc:63:13:77:2c:db:
                    34:74:25:f6:6d:7c:c4:c3:88:ad:25:2d:93:02:5b:
                    06:70:21:df:46:3b:87:96:51:2b:5e:62:cf:dd:b8:
                    9b:f2:d0:7a:d5:5c:3e:61:23:78:93:c9:ec:0d:e6:
                    b4:8a:76:7a:a9:d1:81:3c:5d:67:e0:e9:c7:d3:c3:
                    bc:a6:d9:f5:93:63:94:c6:0e:9e:f4:be:e0:3c:c2:
                    83:3f:20:91:88:58:85:06:0d:75:d4:56:06:6e:cb:
                    06:2f:fc:6c:84:58:0f:f8:f3:fd:5f:87:44:3b:70:
                    d8:a5:05:93:17:25:ae:09:fe:0d:5b:f4:8e:07:4f:
                    58:97:93:49:a9:ea:ed:32:91:11:4a:a6:a8:f0:4d:
                    ff:71:65:b7:7a:40:11:e9:82:48:f1:f9:06:2c:6b:
                    ec:50:cb:97:78:bc:a2:bf:aa:31:8c:32:6f:92:14:
                    2c:fe:d8:f1:a1:4c:5f:d3:5a:e5:8c:29:3d:47:62:
                    05:12:89:ec:05:5e:29:a7:e7:4f:71:b2:4e:67:e3:
                    ee:1c:ed:0a:2f:17:66:52:f4:49:1f:2d:5c:d5:48:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:50:EE:C7:E9:EF:FB:43:6B:C7:7F:CA:BF:86:AA:9E:33:5A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/8eb6de6b-8c71-3506-8c2b-efa177569f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:8c:be:a8:05:7d:38:aa:87:9e:8e:43:24:b9:e8:fb:dc:
         b1:52:86:e3:6c:4b:e8:cb:d3:85:fe:df:e1:d6:5e:6c:a6:f3:
         04:9a:c9:81:7b:65:86:bc:5e:f0:18:01:cc:b7:82:18:fd:98:
         b8:77:26:bd:27:ff:84:a7:c0:a1:8a:74:9f:20:c6:f4:1b:f3:
         8e:69:0e:c3:8b:ce:f5:6e:1f:c0:10:9e:4a:c2:f9:aa:8f:bd:
         59:ea:a3:3b:22:1c:ac:62:ae:98:ce:6b:da:3a:81:12:6a:d6:
         6e:81:74:64:15:7d:3d:8f:2e:f5:1b:ab:30:74:c3:b4:50:b2:
         ce:8d:7e:cf:69:63:0d:8e:36:36:2c:d0:19:92:52:57:80:8c:
         e2:02:c5:71:0f:90:a7:0d:c5:2a:c9:8c:78:16:66:e0:4f:38:
         67:69:39:eb:48:84:5d:88:b8:94:65:cf:2e:d8:ff:4e:99:8a:
         55:9b:19:3b:01:8c:aa:01:c4:e5:90:cb:a8:ae:e6:4f:94:4a:
         7c:08:06:f6:ba:87:e3:28:58:a8:92:cb:17:cd:b6:03:74:ab:
         6e:64:1d:9a:cf:92:a3:bc:1d:f9:22:c0:ca:14:de:20:9c:36:
         29:bc:e3:3a:9c:c7:5d:0d:ec:7a:3b:cb:2f:56:d2:2a:35:99:
         07:eb:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:16:41 2026 by rpki-client