Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa
File:                     9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa (raw, json)
Hash identifier:          6xjDL2d3ZXKkFqUYy6QFztiv6AXk5Em1Otu+caE0wKM=
Subject key identifier:   58:2F:A1:6A:36:FC:A1:B5:C8:B6:8F:37:DF:3C:1B:53:9A:CB:3E:5A
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584F497750DA6B1829C16C4BD5E0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     213122
IP address blocks:        128.254.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:50:da:6b:18:29:c1:6c:4b:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=80b97d83-8104-4a55-87eb-496403a6eb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:17:89:6d:fa:4c:dd:af:34:cb:27:cc:c9:
                    63:85:e1:7c:53:f3:cd:fe:0a:9a:4d:fa:16:0a:89:
                    bf:a1:9c:d7:82:58:ee:79:0e:6d:dd:49:2d:69:fe:
                    05:5c:dc:ea:7a:61:8f:08:62:00:75:d1:13:54:22:
                    af:a1:36:8c:af:f8:57:c1:12:82:4c:1e:dd:29:be:
                    fa:06:d4:78:ce:22:55:ae:0c:44:71:0e:0d:78:64:
                    20:8a:ca:b4:6a:6c:35:1f:b6:52:76:22:8d:30:7e:
                    e7:37:46:1d:ac:e3:6b:ae:37:cd:c5:4f:01:8d:df:
                    a4:42:23:0e:30:0a:f4:fe:9b:af:5f:b2:f7:4c:1f:
                    db:38:e8:2b:11:3b:6e:e1:49:5f:9c:92:b4:8a:e0:
                    a6:f1:3b:67:ac:09:21:9e:a3:07:a4:06:1c:38:57:
                    13:18:b9:92:1b:15:96:15:e6:3f:f5:5b:19:c4:0c:
                    34:74:66:97:cd:8a:5f:41:dd:09:2f:9c:17:c8:e7:
                    79:91:ee:94:ab:52:2f:d6:bb:dd:71:48:1f:7c:47:
                    b3:00:57:40:d5:f2:f5:6f:97:ef:ee:ae:98:22:ef:
                    0d:f5:d9:ae:6a:7f:c8:66:57:b3:59:61:e5:6a:73:
                    65:3f:d3:ca:c7:e7:4e:f0:a8:7e:72:49:f8:d0:f8:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:A1:6A:36:FC:A1:B5:C8:B6:8F:37:DF:3C:1B:53:9A:CB:3E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:08:9a:c1:91:5d:03:44:92:a1:df:96:09:e2:7b:e3:61:
         62:b8:83:08:17:0e:c2:66:cd:eb:06:4a:68:af:42:8b:af:2c:
         6b:b1:db:b6:f6:3a:eb:96:43:bf:65:f1:cd:95:d9:75:f8:c0:
         78:50:4b:c5:b2:48:fd:43:68:a3:e5:3d:ec:e5:31:9c:bc:a8:
         61:ee:37:c2:5d:72:7f:6e:09:56:0c:8a:5e:df:50:9f:9b:40:
         bc:46:e6:0b:ad:c8:9b:c2:ea:f1:b6:f0:47:ae:fc:1b:db:4e:
         84:1b:5d:85:de:ef:22:df:ba:25:8e:a3:96:05:12:09:8e:eb:
         eb:02:93:76:34:fe:62:08:87:3d:8c:46:da:26:f9:7b:5c:30:
         2b:34:27:48:25:34:3e:fe:ac:01:2a:d5:19:1a:87:51:fb:a2:
         38:ba:86:ba:5d:67:4f:40:1c:1b:72:a3:66:be:5b:fc:c8:76:
         10:77:dc:b5:87:57:5d:db:79:43:5e:03:51:61:14:3b:4c:80:
         67:2d:be:56:d6:35:32:ab:54:ab:73:99:00:07:c7:3c:d4:c9:
         50:a5:c4:fe:d5:b6:26:cf:02:e0:76:c2:4b:0a:18:a9:32:81:
         b0:59:c7:00:6e:97:13:a5:94:16:f4:6c:b9:51:a5:fa:cc:65:
         51:7e:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:31:49 2026 by rpki-client