Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa
File:                     8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa (raw, json)
Hash identifier:          OgQdz7pAPQCa57YVjgJtG2BuXOo+iEx3QSvO346buu0=
Subject key identifier:   58:E8:65:9C:EA:AD:DB:DC:C0:75:D0:CC:43:DC:CD:8A:E1:9D:C5:CB
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F4C3DE6635BC15A882D05C500
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     9304
IP address blocks:        192.25.206.0/23 maxlen: 24
                          192.78.218.0/23 maxlen: 24
                          192.120.124.0/23 maxlen: 24
                          192.170.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e6:63:5b:c1:5a:88:2d:05:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=871efc95-7e16-48a9-b92a-56a7347cb7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:80:ae:c7:88:eb:05:eb:7b:3f:e5:a5:c6:
                    04:03:20:a7:2a:a4:cb:fc:d2:0b:28:b4:5b:15:1c:
                    01:e3:aa:4f:d4:8c:06:f3:29:52:58:e2:2a:d7:cc:
                    f1:84:ee:4c:23:9b:57:84:6c:c4:77:3d:5e:4b:46:
                    55:2c:72:46:cf:57:99:d8:7d:db:b5:e9:a9:ee:6c:
                    89:5e:12:a0:df:48:70:e0:0b:b0:d2:5a:16:c2:ea:
                    3c:ca:f2:05:ba:86:1d:20:41:ba:70:9f:10:72:fe:
                    2c:aa:f8:4d:c5:85:f2:4f:7f:a3:18:ed:e6:af:ee:
                    2b:82:47:64:a5:ad:f0:01:58:93:f9:2d:07:3d:74:
                    93:a2:6e:64:f3:d6:51:f8:d7:c3:d9:9e:46:ef:fd:
                    df:63:2e:7d:12:fb:1f:36:e5:c0:f1:6d:76:17:41:
                    f0:68:a8:39:2d:85:3c:7e:6e:8d:66:6d:c7:7a:27:
                    aa:1b:dd:c1:05:33:a5:de:23:77:3b:de:c8:ad:07:
                    66:c9:8b:3d:0f:f4:6d:04:6b:94:1c:92:8b:c3:47:
                    cd:1c:58:d5:81:77:4c:7f:38:57:8c:d0:69:72:59:
                    c6:54:5b:fb:d2:ae:7d:9e:7d:6f:c4:44:01:f5:ce:
                    62:58:97:a8:79:48:b3:de:d6:75:81:2a:27:5c:f1:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:65:9C:EA:AD:DB:DC:C0:75:D0:CC:43:DC:CD:8A:E1:9D:C5:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/8ca7c2c8-bdc0-3038-ad94-30b6bf5fdb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.206.0/23
                  192.78.218.0/23
                  192.120.124.0/23
                  192.170.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:53:1f:c4:ed:10:d8:92:04:56:9a:85:7d:43:f4:32:13:
         51:48:4c:c4:81:18:a8:d2:a5:d3:be:5c:cb:8b:51:ea:bb:6f:
         3e:01:39:63:28:53:90:c4:91:5a:3a:06:a7:5c:0e:cf:9a:a4:
         b3:db:9c:3c:02:e9:a0:42:91:bf:2f:4a:7c:85:3c:39:ce:9d:
         48:db:f7:de:44:61:ae:20:e3:84:cf:61:06:1f:d9:7c:9c:d6:
         70:30:c3:e9:04:c5:6b:9b:b9:25:00:a9:9b:13:1d:61:d2:de:
         c5:83:d6:ce:a9:fd:e1:e4:27:c7:7c:b2:c4:2c:60:34:0b:19:
         23:f7:5e:2c:9f:b7:a9:4c:ef:70:42:8e:30:f0:cb:0a:ae:a7:
         3d:5f:f3:4f:05:a2:96:8b:4b:c3:f3:6a:42:ce:dd:16:52:b5:
         39:02:90:99:cc:8e:7d:35:a9:1f:31:af:dc:84:14:09:b0:a2:
         f5:a6:08:38:b2:97:73:06:07:fe:8a:cb:94:3f:ad:89:77:0b:
         5b:c1:ac:3e:e4:de:b6:e5:6b:ba:70:cc:36:23:47:46:66:d2:
         61:21:7f:4d:45:9a:db:5d:e5:9e:b1:08:11:39:5c:56:a5:5e:
         93:1c:40:2e:3c:bc:af:44:bc:ba:6e:78:91:2d:c7:2c:81:45:
         c0:75:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:04:36 2026 by rpki-client