Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/0d85d529-f44f-3434-afee-6bac165529db.roa
File:                     0d85d529-f44f-3434-afee-6bac165529db.roa (raw, json)
Hash identifier:          nM8vE2qFTFguhxCzS5xqPLaYlw+lykZgYx55y+rSmPQ=
Subject key identifier:   DB:D9:19:2A:2C:35:99:F0:4C:14:2A:F2:65:65:08:22:D2:52:2D:9A
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F483835C29D5396E54210C280
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/0d85d529-f44f-3434-afee-6bac165529db.roa
Signing time:             Thu 24 Sep 2026 14:26:54 +0000
ROA not before:           Thu 24 Sep 2026 14:26:54 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        192.6.22.0/24 maxlen: 24
                          192.6.34.0/24 maxlen: 24
                          192.6.46.0/24 maxlen: 24
                          192.6.47.0/24 maxlen: 24
                          192.6.72.0/24 maxlen: 24
                          192.6.83.0/24 maxlen: 24
                          192.6.90.0/23 maxlen: 24
                          192.25.103.0/24 maxlen: 24
                          192.25.197.0/24 maxlen: 24
                          192.25.212.0/24 maxlen: 24
                          192.25.215.0/24 maxlen: 24
                          192.25.216.0/23 maxlen: 24
                          192.25.231.0/24 maxlen: 24
                          192.120.126.0/24 maxlen: 24
                          192.120.127.0/24 maxlen: 24
                          192.120.196.0/24 maxlen: 24
                          192.120.197.0/24 maxlen: 24
                          192.120.199.0/24 maxlen: 24
                          192.137.18.0/23 maxlen: 24
                          192.137.122.0/24 maxlen: 24
                          192.170.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:38:35:c2:9d:53:96:e5:42:10:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep 24 14:26:54 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=daf008fa-795f-4154-88cc-32f64ae24b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e6:c5:8e:b2:1f:44:06:4e:e0:56:2c:20:04:
                    c1:17:00:13:34:b6:55:64:e5:65:0b:ca:bd:af:ea:
                    49:ef:35:ab:f7:5a:a3:60:ec:63:b5:54:48:60:f8:
                    a0:33:23:32:fa:5b:e9:04:25:8a:aa:a2:1f:f8:ef:
                    36:94:fd:72:b3:6b:0a:de:39:29:38:17:b6:a1:1f:
                    d3:85:cc:99:52:7f:db:08:89:ef:07:b1:76:c4:c9:
                    64:dd:c6:84:bc:a4:65:9f:60:97:be:5e:52:94:bd:
                    2b:80:91:11:a1:69:e8:1d:fa:36:99:d8:11:42:ac:
                    f3:ae:34:e0:95:0a:9d:dd:89:d9:e1:9e:a3:72:33:
                    ab:ba:f7:19:91:b2:9a:cb:49:18:e8:4e:68:12:0f:
                    1c:1b:89:92:21:b1:4a:b9:08:a2:e4:b4:60:a9:1c:
                    23:ee:5a:8a:cd:e7:82:87:68:d7:da:c3:e1:ce:c3:
                    48:53:90:7d:ae:f8:41:1e:db:4a:f4:bb:b9:8e:57:
                    eb:74:c0:ed:ad:3e:f8:4a:2d:d2:64:6c:ee:f4:c0:
                    7e:1c:66:aa:84:b1:18:82:cf:a0:dc:f0:07:8e:68:
                    09:89:8c:1e:33:aa:19:38:70:30:a4:70:d4:6f:c7:
                    c9:a4:24:ba:99:e9:83:de:bf:96:91:b3:65:da:c1:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:19:2A:2C:35:99:F0:4C:14:2A:F2:65:65:08:22:D2:52:2D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/0d85d529-f44f-3434-afee-6bac165529db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.22.0/24
                  192.6.34.0/24
                  192.6.46.0/23
                  192.6.72.0/24
                  192.6.83.0/24
                  192.6.90.0/23
                  192.25.103.0/24
                  192.25.197.0/24
                  192.25.212.0/24
                  192.25.215.0-192.25.217.255
                  192.25.231.0/24
                  192.120.126.0/23
                  192.120.196.0/23
                  192.120.199.0/24
                  192.137.18.0/23
                  192.137.122.0/24
                  192.170.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:3d:53:21:52:9b:04:a2:0d:ed:55:0a:ee:fb:ed:17:b0:
         ef:e8:b7:61:66:1b:ca:a6:aa:71:b2:96:36:e8:a5:4d:75:65:
         d5:ab:77:a5:2b:a3:06:71:08:de:5f:46:21:2c:24:dd:35:87:
         cc:1a:7f:26:ca:c5:85:8c:81:15:48:c7:43:46:b7:2a:0d:76:
         4b:c7:d3:c7:22:fb:9a:c4:28:66:ed:9c:70:51:d2:4a:85:35:
         80:25:8c:cd:2f:04:83:ff:72:15:ad:8f:bc:b9:10:34:4f:4e:
         ab:80:0b:14:46:d9:7f:f2:d5:7f:72:75:09:d7:a2:f3:3d:d6:
         1b:75:5b:12:8d:e0:d1:cc:f8:d8:9d:df:cd:15:81:28:7b:87:
         c6:24:dc:f2:57:e6:a5:0f:03:28:9e:d0:5b:f9:41:ec:04:14:
         f7:db:c9:27:30:7b:68:0f:4d:ee:7a:45:1c:57:9e:2b:d3:60:
         4d:66:b6:1a:b8:a8:a3:a0:46:76:8a:ff:7e:cf:c7:b1:3f:ea:
         eb:8d:09:9b:82:81:5d:e5:41:df:ba:e0:33:c0:94:bd:e6:e1:
         28:37:09:99:66:9b:00:7b:94:a0:7c:4f:16:75:30:d9:62:93:
         38:35:21:ae:c5:2a:02:09:29:f2:21:34:5d:74:2b:6a:62:ae:
         00:4c:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:53:48 2026 by rpki-client