Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97f1ea23-b241-3ef6-92e3-69f53afd03db.roa
File:                     97f1ea23-b241-3ef6-92e3-69f53afd03db.roa (raw, json)
Hash identifier:          HY0/Ralk5pNDL52RqDWPHKENrGPAuZ3SlwS//I87mCU=
Subject key identifier:   F9:0B:6E:95:6A:64:FA:3B:23:37:FA:2F:55:54:3F:7B:79:D3:68:76
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5A33018B09236874D74AC8F0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97f1ea23-b241-3ef6-92e3-69f53afd03db.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        192.171.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:01:8b:09:23:68:74:d7:4a:c8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=4cc846ec-f184-4fb6-a85e-591f6137ec6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:f8:74:95:8e:fa:2d:7d:b8:b9:eb:0c:12:
                    be:3f:be:28:89:26:84:5f:bf:e8:f1:22:c0:9f:b3:
                    eb:dc:cc:bf:95:64:2d:7b:83:70:0f:b9:61:4a:cd:
                    36:10:26:82:eb:0a:b7:1f:72:3e:be:ea:9b:78:35:
                    5d:0b:45:7f:c5:58:1a:b0:19:e1:3c:f5:b2:31:e9:
                    2a:2b:bd:54:f7:da:9c:1c:ca:92:7c:da:81:50:44:
                    ce:71:ee:87:7b:bc:00:7a:6e:41:f1:35:85:07:45:
                    f8:5e:4c:fd:60:b5:63:18:4a:87:5c:a8:b6:f2:90:
                    22:c8:39:04:96:19:5d:db:03:12:fd:71:7b:50:37:
                    32:37:4f:02:16:d4:e5:68:a4:01:fb:a5:99:4f:51:
                    9a:18:a8:d5:dd:37:8b:fc:43:ae:a6:59:c8:1a:a4:
                    45:ed:0f:c4:94:f0:2b:89:d5:d8:2a:17:97:59:06:
                    04:30:59:a3:dc:fd:68:f5:11:70:8b:f3:49:40:1d:
                    01:be:31:a9:56:9b:fe:76:fc:12:fa:67:7e:21:52:
                    bd:08:46:39:c0:3c:c1:79:04:91:c9:8c:a7:bf:d2:
                    2e:4a:c8:3e:82:b5:5b:75:8f:37:f3:6b:88:10:a9:
                    46:b8:55:e1:c3:d1:b6:c0:f4:17:60:fa:f0:4a:f9:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0B:6E:95:6A:64:FA:3B:23:37:FA:2F:55:54:3F:7B:79:D3:68:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97f1ea23-b241-3ef6-92e3-69f53afd03db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:60:ae:2f:06:42:7a:1e:5c:b0:4d:24:84:2f:59:41:b4:04:
         64:9f:a5:6b:f6:a7:83:13:e4:74:ca:37:cf:76:0b:ac:6d:1e:
         cf:3a:f5:53:64:2c:ac:5c:49:e1:ba:a8:38:cf:f6:db:b9:ed:
         cf:2c:a6:e9:2d:4e:e6:a8:00:9e:9a:3e:a9:e4:b4:5f:f6:7a:
         0b:8e:a4:50:85:f2:0f:ac:fd:54:56:46:b0:b6:cf:ef:74:d8:
         87:92:16:b1:1d:a4:50:0d:b6:f1:62:cb:62:cb:dd:f3:14:43:
         b9:a7:36:e6:e4:5b:24:e1:cd:71:64:c2:1d:23:91:7c:30:c5:
         d3:e4:1f:00:39:33:2e:15:76:e9:e5:5e:61:3f:a8:7a:24:a6:
         0b:67:b1:c9:a5:37:ff:89:46:08:c1:be:eb:bc:20:c7:45:1e:
         21:79:ee:4f:3f:6b:4b:43:a3:ff:fc:2d:97:f5:19:56:1e:50:
         34:0c:37:97:f1:41:1d:93:8f:9d:8a:33:3b:5f:5e:c0:53:6a:
         bd:fb:d0:a1:57:01:3d:96:0a:2d:30:11:06:cb:6e:39:16:20:
         1d:e6:57:fa:b7:e2:30:5e:26:65:01:50:a1:8b:57:31:f0:6a:
         1b:81:a8:ae:ed:ef:44:90:73:c2:ea:61:c2:4d:e0:6a:c9:1c:
         3e:21:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:37:42 2026 by rpki-client