Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/cecbd351-2e30-35ce-822b-b50f9f4b14d0.roa
File:                     cecbd351-2e30-35ce-822b-b50f9f4b14d0.roa (raw, json)
Hash identifier:          xhgVgFdmZeDLn2JiG/CVvB/E4LITwjqzatPHKQS0zPQ=
Subject key identifier:   86:0C:75:16:52:A9:89:96:29:0A:6D:38:81:3D:AB:89:A8:9B:BF:46
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584F49738425F0C27E2DBDC74A80
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/cecbd351-2e30-35ce-822b-b50f9f4b14d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397688
IP address blocks:        192.16.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:84:25:f0:c2:7e:2d:bd:c7:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=55c17096-b309-4d41-ab04-54a9af94cd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:0c:a1:58:66:31:8d:ab:6f:48:11:ab:e2:
                    5d:70:5a:32:07:70:65:d2:b8:cc:cb:c0:81:5e:6b:
                    40:f1:7c:f4:87:7d:bb:aa:94:e1:f9:00:b1:1d:80:
                    22:af:8c:61:de:bb:3e:2f:94:ea:d7:3d:a8:41:4f:
                    81:6b:b1:03:d8:d8:2c:26:8a:b7:ff:d7:ba:0f:f0:
                    b7:04:58:b7:72:ba:10:77:a0:a3:14:1c:92:5e:f3:
                    93:84:60:69:0b:13:27:06:50:ba:f7:a6:a2:87:47:
                    74:ba:d3:d8:d3:ad:c4:95:23:ab:17:fe:73:42:61:
                    ca:61:a2:1b:0f:2a:c8:56:0b:80:77:e5:9a:e2:61:
                    1f:a4:18:b8:b5:d5:42:3c:91:77:01:5d:36:9d:b8:
                    bd:20:31:7b:16:69:bd:59:b2:14:7b:53:8f:66:dc:
                    c7:67:1e:3e:f3:d8:50:14:a3:0a:28:3d:c1:31:ac:
                    c9:91:7a:13:c9:2c:74:d1:8e:9a:fc:2d:0e:be:0a:
                    a8:62:c3:c7:39:5c:30:a3:ee:b6:a4:3b:71:d8:59:
                    9d:0f:6e:0d:a8:62:e2:6c:21:50:bd:36:09:17:0b:
                    2f:b5:16:3c:06:23:45:f3:9c:5a:cc:84:9f:49:4b:
                    a3:c6:3d:9e:b2:34:eb:6a:a4:ad:a5:e2:00:50:e5:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0C:75:16:52:A9:89:96:29:0A:6D:38:81:3D:AB:89:A8:9B:BF:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/cecbd351-2e30-35ce-822b-b50f9f4b14d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:16:15:f4:b6:91:45:c9:f1:6e:7c:ad:78:d7:a5:bd:b6:
         91:e0:c5:16:09:80:8c:b6:f6:5f:0e:7b:a7:22:09:31:b6:78:
         6b:e4:99:8f:8a:cb:49:10:4d:24:a0:a8:a3:bf:70:fd:58:48:
         f0:00:08:0d:06:d2:f7:36:52:02:db:20:6b:55:24:1a:e4:1b:
         47:30:da:49:ea:a8:44:0d:18:7d:8a:c4:f3:76:bd:6f:26:84:
         4d:93:de:53:42:f6:1b:87:e5:08:72:99:29:ad:c2:a8:30:13:
         42:04:41:ac:66:c0:ad:a2:8b:ba:55:72:75:fd:5a:29:a2:43:
         52:c6:d4:52:bc:9b:03:b1:33:46:96:f7:d6:8c:db:a7:74:77:
         b7:72:34:db:49:89:bc:b4:2d:9b:f4:01:01:49:c0:e8:42:be:
         33:61:c5:eb:b6:3f:88:dc:7e:2f:b8:8c:1b:86:c5:e0:7c:0b:
         b8:0a:b0:7b:41:c7:48:9b:0d:d5:72:2d:72:ca:0e:d0:2e:e6:
         50:51:39:e0:ab:d4:4b:b3:85:6e:ae:0c:ef:46:b3:8d:3b:20:
         00:1a:5c:f9:b4:08:91:e7:43:76:e3:52:b2:82:8c:96:15:3b:
         4d:c9:01:c9:30:54:cf:03:cd:62:4c:ea:cc:11:12:42:e8:4d:
         f7:8a:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:06:54 2026 by rpki-client