Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/b6746157-54e0-32a4-9a62-bcb9f4fb79ad.roa
File:                     b6746157-54e0-32a4-9a62-bcb9f4fb79ad.roa (raw, json)
Hash identifier:          BSq/Hv53Fe+n8TpIZT/pyuyeTB4FBMCJcLC7KrJC4aY=
Subject key identifier:   D4:37:D4:05:A1:D2:D8:C6:5D:41:AC:89:6C:DC:B5:B3:8D:AB:81:ED
Certificate issuer:       /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial:       010D0C9F4328584F498BD1EA0EF63911A16F4C00
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/b6746157-54e0-32a4-9a62-bcb9f4fb79ad.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401041
IP address blocks:        192.25.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:d1:ea:0e:f6:39:11:a1:6f:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a6dd6ff0-8ff4-4bdc-9c29-dfa15d492784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:71:35:b3:2f:08:13:46:2b:aa:f1:c9:9e:
                    d0:74:cc:c4:c5:ed:92:9a:00:26:e5:58:0a:15:c2:
                    2f:a4:cd:56:7f:6a:94:1a:36:f8:d1:5a:8e:80:cb:
                    71:e7:87:5f:31:6f:42:27:df:ca:e4:10:71:f0:94:
                    60:49:77:96:20:60:7a:a9:65:53:1c:4c:86:cb:9c:
                    39:08:05:28:18:dd:6a:af:73:e3:9c:b8:6b:33:79:
                    3f:44:ce:c4:57:41:12:96:cb:20:cb:29:87:b4:bc:
                    40:5c:fd:f7:33:e5:e7:70:dd:2f:cd:24:24:ef:b3:
                    af:d9:18:17:7c:44:cb:e4:c2:d0:fd:bc:08:03:6e:
                    e3:d6:d2:c2:a2:b0:15:7c:84:4d:18:4e:6a:db:27:
                    f7:03:3e:09:3f:50:77:37:df:b1:9b:81:19:b6:d7:
                    22:3a:63:3c:90:50:71:7e:6f:57:aa:60:9d:cf:30:
                    02:c6:de:93:9e:f3:3d:92:2a:32:d4:8c:ae:96:df:
                    4c:20:f6:f5:82:1b:22:bb:f2:89:a7:70:61:84:00:
                    c0:df:cf:9c:48:18:50:59:57:fb:e3:ea:38:08:b1:
                    12:2f:45:41:ab:0d:e3:78:9b:32:6c:5e:ac:e2:ca:
                    a8:25:83:0c:24:79:8c:c2:a6:e4:09:ba:a6:d0:4a:
                    98:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:D4:05:A1:D2:D8:C6:5D:41:AC:89:6C:DC:B5:B3:8D:AB:81:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/b6746157-54e0-32a4-9a62-bcb9f4fb79ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl

            X509v3 Authority Key Identifier:
                keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:94:4c:b1:24:66:f3:3f:15:43:39:6e:49:a3:b3:e6:09:
         f0:9b:2c:57:2d:b8:d3:af:99:e8:70:e2:a0:e8:54:81:2f:15:
         6a:50:a8:91:8e:2a:26:c1:77:14:51:01:2e:24:6a:bf:61:6f:
         38:ba:09:b3:8a:1e:51:e8:fd:55:37:57:28:db:ef:76:e2:bb:
         74:26:bb:3c:7c:76:3f:7d:70:fc:9f:9a:10:e2:e4:c5:05:08:
         a3:e6:92:a6:92:84:ee:d2:f9:e1:0c:b2:6b:6d:98:0c:5c:92:
         6e:54:8b:fd:aa:5a:7f:dd:a0:93:e3:d6:ab:be:9b:7b:f4:6e:
         4f:91:80:52:a6:95:48:8e:57:18:74:96:13:29:b1:2c:be:40:
         ca:fd:23:e0:6d:56:01:a0:59:91:02:91:98:30:42:97:50:4d:
         06:8d:1d:d1:f1:c7:2d:3d:a0:17:4e:5f:ce:d4:32:46:be:88:
         6f:9c:66:a1:5d:ac:da:67:26:77:48:30:e0:a8:5a:91:e0:33:
         c7:19:73:25:d4:4f:65:0c:58:27:bb:01:f0:5a:80:07:7e:c3:
         6f:e2:97:af:e6:8f:5d:92:b4:ec:02:da:70:01:69:35:59:19:
         f0:f3:f5:4e:81:91:2c:2f:8d:4a:5b:69:0a:83:4c:3f:67:c9:
         5c:d9:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:22:43 2026 by rpki-client