Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/d9dcfb0e-2184-3838-b643-8f636ac97281.roa
File:                     d9dcfb0e-2184-3838-b643-8f636ac97281.roa (raw, json)
Hash identifier:          REAcoCh2ZjP3i34wCUsa/++X/mUx311By2piNYn/kY4=
Subject key identifier:   E1:1F:78:65:89:BC:D3:A7:83:7E:00:80:DB:2F:20:2A:DF:6D:85:DC
Certificate issuer:       /CN=561b6716-a33e-44ad-bdb0-ba8447deebf7
Certificate serial:       010D0C9F4328584F2D87B2A29C8E65283AABD580
Authority key identifier: 0E:4F:87:BC:56:5F:81:A9:DF:5F:6D:D7:E8:BF:A7:20:EE:BF:BE:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/d9dcfb0e-2184-3838-b643-8f636ac97281.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     19917
IP address blocks:        192.80.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/561b6716-a33e-44ad-bdb0-ba8447deebf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/561b6716-a33e-44ad-bdb0-ba8447deebf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b2:a2:9c:8e:65:28:3a:ab:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561b6716-a33e-44ad-bdb0-ba8447deebf7
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=91b8aace-7474-4792-9b1c-ccacb2a898c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:27:03:41:61:58:d3:1a:35:12:a5:07:18:
                    be:96:dc:20:b2:f6:16:98:e8:d5:28:07:90:2a:cd:
                    1f:5b:15:11:cb:90:9e:7d:fd:0c:18:00:fb:84:4b:
                    23:5c:e0:64:02:38:4b:c9:4d:d8:c5:cb:58:7a:8a:
                    43:aa:7c:16:e4:90:1d:e5:ec:cb:cc:9d:c7:5c:72:
                    72:86:99:58:e4:66:69:1a:1a:c7:6e:d3:6c:9e:47:
                    37:13:e8:27:72:22:d0:a9:d9:2e:64:61:dd:a8:f7:
                    5b:ea:c7:7b:b7:8e:8d:36:72:15:82:5a:3c:e3:e3:
                    8d:90:87:d3:0e:6d:75:cb:ce:2e:32:91:d8:c7:36:
                    ea:06:65:c5:87:52:8d:7f:c7:97:bf:05:81:09:6a:
                    b7:87:e7:39:ba:0b:d3:0f:ab:62:a4:06:75:61:b1:
                    40:e4:d0:b7:4a:95:0f:18:be:6f:19:0f:d8:48:81:
                    8a:7a:27:7c:a9:c9:e2:bb:69:cc:2a:f2:7a:85:97:
                    a3:90:01:e1:58:77:3b:0c:37:dc:d6:b0:5e:60:a6:
                    20:d0:4b:61:d8:10:78:cb:65:e0:35:c2:7e:90:4c:
                    e8:29:90:01:e9:2a:38:aa:3c:e5:23:b5:12:1e:b0:
                    b3:8b:eb:58:8c:76:76:18:ce:9d:d6:81:ea:90:19:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:78:65:89:BC:D3:A7:83:7E:00:80:DB:2F:20:2A:DF:6D:85:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/d9dcfb0e-2184-3838-b643-8f636ac97281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/561b6716-a33e-44ad-bdb0-ba8447deebf7.crl

            X509v3 Authority Key Identifier:
                keyid:0E:4F:87:BC:56:5F:81:A9:DF:5F:6D:D7:E8:BF:A7:20:EE:BF:BE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:72:70:7d:5c:53:a0:41:5c:d6:d8:e8:ef:e2:ed:bd:6e:34:
         3e:f1:76:1e:37:8f:6c:e3:86:e7:c4:f2:b7:ef:39:d8:8f:b0:
         42:aa:9a:1e:70:66:5a:fb:d0:39:5a:af:b5:7b:52:41:1b:0e:
         c8:e7:3b:0d:ea:30:e9:4f:d0:4a:b3:68:33:15:7a:f7:68:1d:
         69:82:6a:e3:31:6e:ce:e0:a2:ac:0c:30:6d:59:00:d7:f8:ed:
         fa:8c:b5:f9:a3:19:c1:18:0b:72:e2:7a:e6:c8:36:00:f2:3b:
         04:32:52:6b:8c:bd:e9:42:9b:b7:93:47:cd:aa:b2:aa:ee:35:
         ab:5e:44:20:27:65:a5:65:d8:b7:72:dd:ae:46:1a:95:a3:c8:
         10:73:42:a5:db:0c:f5:dc:b9:b2:b3:5b:96:70:df:a1:4e:64:
         8a:a1:6f:be:84:76:cb:d6:ce:23:7f:c6:6c:86:f2:82:41:4a:
         9a:07:d7:c6:b8:84:67:2b:f9:20:f1:7d:17:de:24:b5:d5:73:
         25:42:13:24:56:dd:8f:25:fa:b6:cf:ac:c5:dd:5d:49:1d:af:
         7d:72:ec:a6:5c:3f:9e:07:6f:96:c5:17:dc:64:69:09:95:38:
         83:35:8f:27:b4:c9:1b:c5:f0:e1:b0:a0:f2:95:25:95:78:dc:
         81:81:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:50:33 2026 by rpki-client