Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
File:                     875cadce-0a07-3252-b823-2dab07525f7b.roa (raw, json)
Hash identifier:          zbNUrpDJshjAY0GguGCmjd+J4Lyf+VuivHMAVr5+xoA=
Subject key identifier:   2E:54:31:5E:D0:BF:FA:41:50:DC:EA:B7:15:4C:AE:AB:EC:DA:E6:DB
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584F4975E12B478569DAAFA35000
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e1:2b:47:85:69:da:af:a3:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1cef1da8-c75b-46d5-8147-8f4612424cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6d:b3:82:e3:f5:4d:f1:d4:2c:46:01:35:3b:
                    6f:36:52:fd:fe:4d:a8:c1:d1:f6:d8:af:85:3e:e2:
                    92:0a:b4:06:5c:38:23:55:a4:2a:37:12:c5:37:f6:
                    5e:92:43:f6:d2:6d:55:34:e6:d7:43:82:f0:2e:33:
                    f6:cb:d8:33:47:cc:df:68:98:94:b4:c4:30:c5:b9:
                    b4:14:1d:83:1d:90:53:0c:bc:13:1d:a2:ae:18:4a:
                    8a:62:e0:c1:70:e0:87:27:59:60:62:97:75:ad:76:
                    35:e5:60:13:ca:c1:7c:df:00:3e:ed:a2:0e:c3:47:
                    69:02:90:e6:c7:05:6c:d8:a4:3c:31:90:c2:69:88:
                    cb:15:51:3b:ba:ac:fe:ea:aa:25:a3:9e:9c:67:60:
                    c1:51:e9:0d:e4:f1:54:20:12:52:30:7f:be:5e:b3:
                    57:36:87:bc:22:86:4d:d7:87:16:ea:ed:67:b6:0e:
                    31:00:a9:bb:d1:d6:62:38:12:e0:08:8d:29:f5:33:
                    07:9e:80:30:56:6e:ef:ba:6d:10:2f:67:ce:17:26:
                    9e:7a:74:1f:fc:6b:f2:1a:da:69:6b:cb:b4:20:70:
                    6d:0a:d4:3a:99:7b:ad:df:95:a1:ec:81:97:1f:db:
                    23:32:d5:1e:a0:50:dd:24:88:a5:1c:a2:30:71:0a:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:54:31:5E:D0:BF:FA:41:50:DC:EA:B7:15:4C:AE:AB:EC:DA:E6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/875cadce-0a07-3252-b823-2dab07525f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:a3:54:0e:ed:9c:e8:e4:de:20:03:8f:5c:ee:59:0f:83:
         c7:99:94:06:f5:67:aa:dc:82:8f:35:d7:a8:d4:65:12:87:0b:
         df:5f:9b:00:79:ac:7d:3c:9e:a1:e8:c3:e6:9a:5f:98:4b:be:
         c6:8e:cf:26:dd:8c:6e:1b:28:2d:76:ae:5d:20:23:58:4b:42:
         f4:19:7e:ea:4f:6d:09:86:48:38:f7:09:c4:71:8b:b7:14:f8:
         ce:5d:6d:e5:e7:43:1a:e7:70:12:05:00:67:20:b8:3b:0b:ff:
         15:94:31:42:27:94:e4:17:2f:e8:b4:8f:3f:c4:79:10:13:13:
         2b:23:58:36:8a:0a:86:56:bc:d1:31:46:60:17:56:7d:5a:05:
         1e:81:32:fe:20:fc:3e:aa:ad:33:07:78:43:8f:c5:00:4b:77:
         ef:bd:22:4b:98:85:a2:f3:51:ba:0c:5d:5a:e5:8f:a7:65:bd:
         8e:56:95:89:03:92:b5:12:76:d9:e3:62:c1:7e:df:da:f0:2e:
         2d:d8:ab:0f:f7:34:46:d0:c4:d8:12:17:98:98:b1:30:81:e8:
         fa:a9:ab:89:4c:32:6f:e2:33:87:08:b3:85:7a:a1:32:4d:79:
         1f:bd:e6:ab:89:06:82:3b:93:80:e3:9a:ad:f6:80:4f:fe:e9:
         86:9f:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:59:42 2026 by rpki-client