Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
File:                     2f0b7f49-a633-3566-aa0c-7f199a78611a.roa (raw, json)
Hash identifier:          CSj6V+QHUoADaFViIrWfz7CiiXaDUn3AYXDdM4D1Yj8=
Subject key identifier:   9C:BC:91:97:77:B4:DB:4E:7B:C2:8B:F0:E4:06:06:FD:95:01:7E:CE
Certificate issuer:       /CN=9c841696-0857-4d7c-8db5-21941a77450c
Certificate serial:       010D0C9F4328584F4976B342BDDDCC6331950780
Authority key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     237
IP address blocks:        192.138.137.0/24 maxlen: 24
                          192.160.192.0/24 maxlen: 24
                          192.160.204.0/24 maxlen: 24
                          192.245.252.0/24 maxlen: 24
                          192.245.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b3:42:bd:dd:cc:63:31:95:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c841696-0857-4d7c-8db5-21941a77450c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bed9c426-716f-468a-bbf3-4d520fd83195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:b0:71:4a:57:6b:d2:89:88:26:a6:cb:fd:
                    78:5d:3a:94:ce:67:62:ca:67:32:9a:be:d9:59:0d:
                    62:37:1e:b3:82:67:ea:38:97:cd:05:3b:08:dc:df:
                    80:5c:d5:00:67:a7:7c:d9:9e:79:2d:fd:27:92:c8:
                    2a:62:41:54:7f:b0:97:44:d8:a9:bf:10:ed:10:e5:
                    bf:1d:13:bc:f5:7b:35:17:3c:c3:be:07:46:25:15:
                    75:2c:96:41:55:88:62:f6:f2:dc:3d:5e:2b:8e:1f:
                    b6:c8:dc:9a:f8:3d:b2:de:24:fe:87:03:c7:03:13:
                    93:22:fe:17:5f:10:12:37:f5:89:61:2e:99:06:26:
                    8f:80:e0:5c:44:8f:83:6d:ea:60:94:50:b1:1d:88:
                    9b:cc:2b:0a:62:82:f8:a7:df:60:0b:cd:cd:66:e4:
                    fc:ad:bd:b6:31:b3:7d:49:f7:e0:dc:67:6f:ac:cb:
                    55:01:bb:db:4a:17:10:41:1b:0b:a7:9d:d5:6a:1b:
                    dc:9d:51:67:ef:97:14:da:af:b6:d3:99:5d:16:17:
                    a8:e3:f9:ed:64:05:7a:5a:70:8d:95:92:af:95:0c:
                    ab:fe:bc:cd:be:c9:2d:c2:41:c5:48:f7:ec:6d:52:
                    f4:c9:bb:b9:6a:df:5e:cc:67:54:73:6f:3b:6b:57:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BC:91:97:77:B4:DB:4E:7B:C2:8B:F0:E4:06:06:FD:95:01:7E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl

            X509v3 Authority Key Identifier:
                keyid:62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.137.0/24
                  192.160.192.0/24
                  192.160.204.0/24
                  192.245.252.0/24
                  192.245.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2b:df:7e:bb:3c:0b:c4:58:79:26:77:86:56:ee:5a:93:10:
         d5:81:3e:34:87:8f:bf:4d:f3:fc:cf:16:5f:ae:74:6c:d6:48:
         2f:a6:22:82:da:c7:0b:d0:4c:a5:cd:82:d5:36:6c:97:ad:af:
         8e:7a:9c:d7:50:23:a7:74:38:99:b9:df:95:df:5e:90:29:3d:
         1d:fc:48:4d:79:1d:d3:8f:f8:8c:6a:4a:48:a9:b1:a5:bc:c8:
         83:7e:21:18:90:8a:e2:78:6b:48:35:e1:e8:85:1d:39:e6:29:
         45:80:44:d2:c3:d6:fd:6d:e8:3c:d2:10:d1:0a:1c:3f:6c:e5:
         de:b1:0b:f9:87:62:f5:36:b4:d4:89:c4:5d:04:7c:56:17:e0:
         44:5e:6d:c2:a5:9a:2f:d3:c9:fa:76:04:b3:81:d9:91:b3:36:
         cc:4b:6a:bf:f1:87:89:57:67:51:97:9f:a6:50:94:fd:85:00:
         28:3a:84:4e:01:27:98:47:5a:51:3d:55:32:f6:77:77:23:91:
         9d:ad:6b:39:46:f5:45:64:96:fc:aa:7b:24:d1:76:c1:b0:25:
         cb:1d:98:5c:04:20:96:8c:f5:60:2a:17:fc:56:89:58:92:14:
         c2:9e:6b:f0:bf:39:22:b0:ac:57:02:95:12:7b:0b:8a:ab:04:
         34:3f:60:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:48:08 2026 by rpki-client