Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2460e024-c20c-3919-847e-16f75f666038.roa
File:                     2460e024-c20c-3919-847e-16f75f666038.roa (raw, json)
Hash identifier:          7sXWtI4hmaKKaypyS1OOMCeZ9kfRsl9PCtsrQi4fGu8=
Subject key identifier:   2D:63:3F:62:43:11:62:EA:CB:FF:98:F2:AA:89:F9:74:4D:64:A2:2C
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584F79AD9F91AB582880E605FE80
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2460e024-c20c-3919-847e-16f75f666038.roa
Signing time:             Mon 12 Oct 2026 07:38:05 +0000
ROA not before:           Mon 12 Oct 2026 07:38:05 +0000
ROA not after:            Sun 10 Jan 2027 08:38:05 +0000
asID:                     49182
IP address blocks:        192.157.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:79:ad:9f:91:ab:58:28:80:e6:05:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Oct 12 07:38:05 2026 GMT
            Not After : Jan 10 08:38:05 2027 GMT
        Subject: CN=a0d77b51-b070-4fa5-b239-e7f5d7e3ea49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:0c:96:1a:e4:2a:ed:c2:44:b1:4b:5f:7e:
                    ad:f4:42:82:1c:cc:ed:08:a0:b1:9f:07:93:68:41:
                    c9:31:e3:b1:b0:94:90:fa:73:99:db:e2:ca:92:dd:
                    d2:41:28:33:5d:4f:e6:42:8c:7b:90:70:7c:d2:fb:
                    b3:fc:1a:e9:98:47:8b:83:cb:0a:14:49:09:a9:a5:
                    52:c5:ae:34:7d:7c:a7:1a:f6:3b:b2:45:ab:fa:38:
                    de:22:fb:fd:82:18:df:bb:15:f7:75:29:f1:ce:06:
                    76:c5:20:8d:37:63:22:9e:d4:e2:98:34:e4:bf:a4:
                    79:52:3b:fc:8a:91:e8:45:5a:97:78:1b:52:7e:4a:
                    9c:af:2c:8d:d2:e9:97:08:dd:5b:b3:21:92:83:bf:
                    4e:0e:2e:fe:cd:2f:66:91:14:97:11:af:49:9a:ae:
                    34:e2:52:19:72:c0:d6:e1:17:3e:b0:e6:a6:74:46:
                    2c:fc:ca:82:4b:8e:04:4f:ff:75:7e:61:7d:b5:1f:
                    fc:29:e6:70:f7:81:a1:2f:14:59:90:a3:c2:66:b4:
                    6a:5a:42:9e:57:58:fc:5a:9f:1c:1e:a1:d9:61:e4:
                    af:05:0f:4c:75:59:ce:bd:1f:4d:67:7d:25:a1:df:
                    26:5a:00:e3:af:90:be:80:49:f2:0b:84:69:eb:cc:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:3F:62:43:11:62:EA:CB:FF:98:F2:AA:89:F9:74:4D:64:A2:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2460e024-c20c-3919-847e-16f75f666038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:93:36:61:00:ff:8e:a2:5f:16:80:e6:4d:67:a1:8a:4b:
         ba:03:0c:16:d4:db:59:12:68:57:0c:96:7b:ff:6f:23:cf:30:
         99:f9:3a:a8:f8:16:b7:c3:9a:6b:a1:92:da:aa:e8:7b:d1:b6:
         bf:7e:03:91:ac:de:4a:97:0c:4b:35:6b:96:8e:aa:ac:b1:91:
         a6:57:bf:97:be:c8:74:36:1c:76:25:bd:d8:11:de:fc:b1:37:
         05:36:15:07:a5:03:e9:e2:cd:63:7f:ad:a9:79:45:d2:1c:1c:
         de:15:bf:27:6e:31:04:1a:af:40:21:f3:c3:71:4e:f7:d4:77:
         a0:df:6d:5d:1b:9d:26:4a:0a:77:2c:f2:5f:79:e0:b3:03:45:
         7b:fb:4e:53:bb:97:cb:9f:99:03:ee:29:00:65:11:38:bb:5a:
         90:35:1b:04:74:ce:00:59:4a:53:ce:3e:f9:c4:b9:ed:c5:69:
         b2:e2:29:ed:49:a6:d4:17:c0:6a:19:e1:a3:91:c2:06:73:c9:
         20:a2:e0:b1:51:38:f4:8a:29:99:a5:14:70:68:98:50:fd:dd:
         56:2e:3d:c4:c9:14:02:05:98:bd:fe:09:0e:00:19:69:3d:b2:
         83:db:18:c7:fa:62:e5:53:3d:2a:d6:30:eb:d4:e7:b6:f9:ee:
         56:16:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:50:47 2026 by rpki-client