Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa
File:                     14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa (raw, json)
Hash identifier:          Ns3jcqiQzIxk4nUg/5+GwgizcsiEqNz4RphjpK0jrfQ=
Subject key identifier:   F3:B6:71:12:5B:72:B1:E2:84:46:CC:B4:6F:6D:EB:F5:7E:FF:6C:A0
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584F4973CD92C2963FC3AB076700
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46261
IP address blocks:        141.193.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:cd:92:c2:96:3f:c3:ab:07:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5ce30185-77ce-47c0-b876-d5f4cae76820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:7e:ad:7d:42:f1:6c:36:38:4c:03:d2:6c:
                    74:62:f4:91:b7:8f:07:46:ef:de:82:2c:db:90:4d:
                    0f:3e:8d:3d:d0:89:51:86:79:f4:a8:d0:9a:73:55:
                    5a:78:86:60:ef:2e:87:37:12:5b:c4:e0:eb:c4:0f:
                    d6:01:5f:5b:bb:d4:94:17:e1:e4:20:88:19:7f:4e:
                    e2:2f:99:06:4a:63:d6:86:43:b4:b2:f9:65:a2:6f:
                    dc:06:ad:d5:89:c6:91:07:6a:91:84:24:62:46:63:
                    d3:ce:d7:05:8e:06:93:72:f5:e1:f4:54:86:ba:49:
                    5f:27:d3:33:2f:a9:09:0a:2f:71:94:e3:bb:bb:35:
                    1a:90:b9:a5:00:31:e3:4c:36:39:43:23:53:63:b1:
                    0c:fb:5d:46:7b:2e:14:5a:39:de:22:07:00:af:70:
                    05:ae:98:b6:5d:e7:01:fc:36:6d:79:4d:cf:70:0f:
                    6a:c8:b5:c2:f3:ea:1b:f6:82:26:90:3f:f3:c4:35:
                    11:b3:14:fe:52:d4:37:38:e4:ef:c0:14:4e:09:69:
                    d3:a6:73:80:32:88:e0:1b:9e:51:1f:bf:57:08:a4:
                    f7:41:a9:ac:92:5a:4b:ba:c4:80:72:bd:48:41:25:
                    ed:d1:46:13:bf:24:4c:4f:ad:a4:6b:44:94:fa:c2:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B6:71:12:5B:72:B1:E2:84:46:CC:B4:6F:6D:EB:F5:7E:FF:6C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/14e112b0-1e61-3566-aa80-07c95ea5c2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f4:a4:45:c0:65:f2:2c:4d:3c:51:0e:3e:ff:33:49:0c:dd:
         df:96:1d:03:38:c2:a5:5e:46:b2:d9:26:d3:42:93:89:c7:56:
         9b:46:21:f0:ec:e5:ea:34:01:14:21:95:be:bf:e1:e4:b1:5b:
         d9:21:8f:15:ca:d5:45:22:ee:6b:c5:31:b9:a5:60:ef:0e:6f:
         a9:23:4d:bf:67:b2:1a:b3:8c:f7:5a:5b:b0:90:d8:f7:52:b6:
         d7:00:2d:c1:42:fb:6c:9c:00:75:68:23:71:c1:14:fd:cb:dd:
         20:d0:08:d0:14:32:98:62:a3:e2:75:2b:1c:d4:15:28:e9:cb:
         cf:a0:5b:09:44:b6:21:85:bb:05:74:d3:26:78:53:88:12:3d:
         91:af:4a:33:64:ea:c9:98:45:bd:d5:c8:1b:40:8b:71:69:32:
         70:17:d1:e3:31:1a:fb:86:2b:a1:43:bd:c9:a1:f6:54:24:c3:
         b6:55:45:b4:16:e9:37:0a:c0:2f:f8:8b:f4:a1:e8:1b:a7:7c:
         33:95:56:0f:82:ee:07:6a:58:77:25:40:14:20:96:09:ec:a7:
         f8:ae:a7:c3:74:76:98:9a:a0:c1:cd:7a:e2:42:c0:63:8f:84:
         75:32:d5:d4:0c:a5:9c:c7:8d:79:50:8e:f1:f6:a7:c0:29:1f:
         28:2e:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:04:14 2026 by rpki-client