Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa
File:                     789da6a0-2c7a-3a3d-9143-50da694cacaa.roa (raw, json)
Hash identifier:          FvBoIz16MZbBl+AK5AINpjMzKLfuUyKys8UqGjZl6Dc=
Subject key identifier:   8A:36:B0:B8:FA:1D:29:12:5F:ED:FD:EE:07:4D:CD:94:20:D6:30:5A
Certificate issuer:       /CN=e2311284-478e-4111-8d73-27148a01fa21
Certificate serial:       010D0C9F4328584F4976AB574BC3379291885F80
Authority key identifier: 8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17056
IP address blocks:        199.168.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:ab:57:4b:c3:37:92:91:88:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2311284-478e-4111-8d73-27148a01fa21
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=03dcb875-5a0b-4848-b178-d75585b5a208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:34:f1:eb:5a:a1:8c:34:a9:7e:1b:8d:b2:
                    f8:89:3e:b8:d3:1c:ef:4d:ba:8a:49:d3:13:82:26:
                    b3:38:7d:30:7f:54:50:06:7b:86:89:cb:16:fe:db:
                    91:b4:01:03:2c:37:cf:78:d4:d4:e1:cb:94:4a:de:
                    71:3a:5d:9a:41:ee:a0:1c:c3:8d:1d:44:b2:e5:78:
                    c3:88:42:16:9b:fe:15:ad:22:b4:f2:de:f5:3c:24:
                    7d:ca:53:b5:e2:7d:ae:76:8c:60:ad:c2:27:03:7a:
                    e2:f7:3c:e2:eb:35:6c:5c:4c:5a:c0:02:83:cd:c9:
                    32:9e:0e:bb:71:c3:2b:b7:2d:f7:c6:97:92:1c:dc:
                    3c:88:c4:a4:a1:3f:c3:01:d9:71:2e:b9:76:ff:53:
                    f9:82:b9:9b:c4:33:08:e6:0e:e5:5d:fb:e6:ba:6f:
                    89:40:f4:f7:3a:ff:98:49:3b:ed:aa:f5:ae:f2:fa:
                    8f:c3:c3:35:a7:ad:ff:4a:d1:26:93:6e:e9:57:ea:
                    de:20:9e:90:03:7a:9c:0b:64:2f:52:cb:62:11:fb:
                    16:d3:5d:63:7a:bb:b4:84:64:a6:4a:24:1a:d4:cc:
                    82:c8:d3:48:f7:ba:7f:36:5c:86:aa:01:f7:99:dd:
                    b3:da:f0:f1:6e:a0:fd:9e:52:7c:c8:fe:51:62:44:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:36:B0:B8:FA:1D:29:12:5F:ED:FD:EE:07:4D:CD:94:20:D6:30:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/789da6a0-2c7a-3a3d-9143-50da694cacaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21/e2311284-478e-4111-8d73-27148a01fa21.crl

            X509v3 Authority Key Identifier:
                keyid:8C:F0:68:8D:CD:E2:2E:A8:36:9C:31:30:10:0F:98:75:1A:87:DB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e2311284-478e-4111-8d73-27148a01fa21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.168.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:88:16:24:80:59:c0:00:cc:d4:85:4c:37:72:dc:56:22:de:
         c0:f7:bb:5a:0b:45:aa:4d:85:78:d8:d4:e1:2d:8d:a5:74:ba:
         8e:d4:f8:86:2b:49:09:58:e5:e0:cf:53:be:e3:1f:b3:72:9c:
         a1:6b:ff:8d:04:06:fb:f7:bd:d0:dd:31:5c:59:a7:46:98:5d:
         ee:65:d9:f5:d3:61:04:a7:b9:ab:9f:61:5d:87:6a:5b:1c:5e:
         b0:e9:92:79:14:c6:38:59:7a:ee:6f:df:13:d5:8e:2f:a7:98:
         cd:c5:73:7f:f0:54:26:84:a7:eb:e2:e2:31:94:6f:b7:37:15:
         31:b1:06:ea:00:25:ce:4a:e3:27:0a:ba:f4:dc:de:2a:fb:13:
         f9:dd:26:7f:aa:b3:13:85:f9:d1:4f:4b:d5:fd:22:1a:b4:f1:
         cd:bd:b2:06:97:4c:62:c3:c8:a6:e9:a7:15:f9:0e:d3:15:99:
         54:bb:9e:8c:4b:fc:91:c6:be:0c:85:75:77:44:b2:7c:3d:9a:
         61:22:d4:64:12:97:23:55:40:06:6c:3f:c6:cd:29:96:56:8b:
         82:bf:34:c2:80:e2:e8:0c:39:2a:a4:e9:46:4b:06:c4:5b:de:
         d3:a1:d4:17:ba:33:9e:a9:c4:1c:9f:47:bb:16:c4:ba:7a:5f:
         83:7a:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:08:39 2026 by rpki-client