Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/8e1910a3-a333-3289-ac32-c769b9abf29a.roa
File:                     8e1910a3-a333-3289-ac32-c769b9abf29a.roa (raw, json)
Hash identifier:          o1sfZHkqkyBbZi24y/szl3+Dddi6QUE+RYVdyTwZBGg=
Subject key identifier:   2A:29:82:A0:EE:4E:75:10:C8:91:26:24:0B:A3:83:27:F2:7F:7E:FB
Certificate issuer:       /CN=ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011
Certificate serial:       010D0C9F4328584F6292B1042C60E0B9ED35E3A0
Authority key identifier: 6C:6E:CD:76:06:4D:44:1A:D5:03:65:F3:E3:70:73:87:15:2A:71:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/8e1910a3-a333-3289-ac32-c769b9abf29a.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        191.0.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b1:04:2c:60:e0:b9:ed:35:e3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d66b3582-ff72-46ce-8611-4d1a1002d21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:a2:5d:5f:b7:6f:76:d0:68:b4:52:d6:64:
                    7a:97:8c:40:84:d0:1c:a3:6a:b3:7a:3d:76:06:8d:
                    d1:1d:bc:02:ad:bb:e0:d0:42:60:51:63:7a:b1:89:
                    a9:d7:aa:ab:f5:b0:8c:86:d7:9e:5f:6f:05:63:0a:
                    26:05:cd:e1:22:62:c5:e3:b9:cd:ce:13:3f:59:89:
                    e4:dd:5a:b5:ba:06:2c:ac:bc:d2:f8:ac:43:a1:25:
                    a2:1c:19:a8:80:98:51:e0:c7:fa:e5:a1:ae:d2:9b:
                    36:b3:b9:dd:13:b4:1d:9d:52:88:4d:8c:5b:97:2a:
                    ff:29:44:19:3d:37:55:7a:8d:4a:a2:ed:59:46:cb:
                    2e:c1:79:8b:2d:77:b9:ad:5f:34:09:d9:52:8d:7c:
                    a5:3a:0b:a1:de:2e:26:1b:d0:b0:71:ac:9b:a7:96:
                    a2:b8:50:ab:94:52:61:f4:bc:eb:ba:05:0e:93:cc:
                    3e:57:ca:21:d6:bb:0c:c8:b6:c2:ab:b8:18:00:6d:
                    7e:a2:43:fe:14:cd:47:26:a0:3b:d1:67:b2:74:37:
                    f5:75:c8:9b:5a:e0:fb:66:ea:5f:3b:f8:87:33:ef:
                    0b:66:5e:37:b7:34:1c:8a:01:35:cf:52:ab:a5:c0:
                    5c:39:2f:b5:f1:8c:cd:e3:0b:d6:0a:b8:2b:7b:b0:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:29:82:A0:EE:4E:75:10:C8:91:26:24:0B:A3:83:27:F2:7F:7E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/8e1910a3-a333-3289-ac32-c769b9abf29a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.crl

            X509v3 Authority Key Identifier:
                keyid:6C:6E:CD:76:06:4D:44:1A:D5:03:65:F3:E3:70:73:87:15:2A:71:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.0.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:ec:75:7a:07:51:5e:07:18:35:d7:38:4a:d5:35:46:cf:1d:
         0f:58:94:81:fc:ca:e0:5d:82:42:b9:2e:0b:84:2b:a9:0a:72:
         e7:9c:1b:48:ed:04:e0:25:96:3f:70:72:d6:9d:37:a1:b4:13:
         94:7c:24:aa:24:a3:45:fe:94:b9:d6:9f:8e:70:3b:64:a9:ed:
         d1:39:e0:8b:6f:2c:60:dc:f0:b4:05:de:b7:f3:f5:af:8f:79:
         5b:ad:19:26:85:5e:53:7b:cb:e9:26:5c:a5:b1:52:3b:39:60:
         90:8e:ba:f0:e9:1e:ed:8c:70:79:53:2f:8d:a7:83:82:57:2b:
         5c:90:a4:d6:3e:b8:4a:0e:60:b2:04:32:ae:85:11:aa:8a:2e:
         38:a5:ef:86:ae:5d:f4:a2:96:9e:ba:76:de:37:b9:c8:c2:01:
         48:f1:98:48:9e:76:37:6a:b8:39:5c:4c:e9:f6:4f:12:39:00:
         6b:9c:5f:cc:ff:60:32:8f:c5:7c:c3:2d:3e:48:85:8a:83:e6:
         1d:fd:12:8a:46:e0:c4:75:92:d2:02:32:bb:e5:99:b5:77:01:
         5a:f4:ce:a6:8a:e5:cd:0c:82:f9:24:56:05:0b:44:24:51:49:
         fe:89:24:a5:28:77:5f:32:9e:22:39:11:c5:9c:5b:16:15:0a:
         c3:d6:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:28:36 2026 by rpki-client