Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b3f00458-a136-35b3-ad08-5b39fe91d777.roa
File:                     b3f00458-a136-35b3-ad08-5b39fe91d777.roa (raw, json)
Hash identifier:          cV/yUd67khUnQ1h5hUR0MKDGRWR729YF69qPbnwfFyc=
Subject key identifier:   5B:1F:7A:54:7B:D4:C0:09:DA:9B:68:DA:0C:78:A7:7A:DB:3D:48:10
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584F4972B2EDD30C189C8BE5F400
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b3f00458-a136-35b3-ad08-5b39fe91d777.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55256
IP address blocks:        24.239.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b2:ed:d3:0c:18:9c:8b:e5:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=544da508-7d19-40fb-94ea-839afbd123a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:57:f7:4f:59:82:ff:bb:2b:fb:7d:79:cf:
                    66:a6:53:92:bc:e3:f3:a4:66:31:7c:f7:58:4b:a0:
                    dc:86:a1:25:6b:dd:0d:a8:99:0d:f6:a4:be:28:54:
                    0b:2a:bc:64:2e:b7:83:4b:45:01:bd:40:04:fb:d7:
                    a9:65:2f:72:dd:e6:2c:c4:16:78:d4:e9:57:63:56:
                    6e:25:e9:49:25:07:2c:66:7a:c3:55:9c:80:17:b9:
                    22:48:e3:6f:4b:df:93:43:86:67:04:cb:51:15:17:
                    54:68:33:4b:0c:fd:af:e1:81:bb:bf:72:67:d1:22:
                    59:94:84:4f:d5:a3:31:3a:a3:93:4d:cb:0f:25:9a:
                    ed:89:17:d3:a4:b6:df:92:1c:09:7e:2a:a1:3f:ec:
                    b5:20:79:97:ef:08:4b:fa:3f:c8:52:88:d9:f7:ba:
                    1d:29:b8:e2:0b:7a:82:73:aa:c9:62:d2:c9:39:da:
                    5a:da:ad:b6:30:33:b7:be:b0:5b:f8:d0:c3:d5:3e:
                    69:d1:19:59:4c:60:e2:1a:29:4f:c5:5d:dd:b4:53:
                    97:9d:2d:1f:0e:fb:8c:04:35:d8:5a:25:db:bf:d0:
                    4f:e6:dd:07:30:3d:b2:d2:cd:0d:46:a0:72:90:8e:
                    17:bb:73:e9:80:17:29:74:63:a3:f0:ca:6f:33:00:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:7A:54:7B:D4:C0:09:DA:9B:68:DA:0C:78:A7:7A:DB:3D:48:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b3f00458-a136-35b3-ad08-5b39fe91d777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.239.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:d6:ab:05:6c:b0:d3:65:bb:d9:82:38:44:3f:5d:bf:62:
         2f:0e:cd:9b:6b:c3:b1:15:52:7c:78:db:b2:73:93:3f:01:f5:
         c3:d3:d7:5c:72:55:48:af:4c:05:53:02:78:ba:66:19:20:39:
         34:f2:89:65:e7:eb:ec:28:56:77:a7:66:53:cc:cc:9a:74:21:
         9b:0e:97:c3:37:af:f1:7b:59:a0:23:a3:a2:09:6d:b9:5c:67:
         4b:6f:86:24:98:0b:9a:ab:c5:fb:d4:88:58:64:de:0b:5c:5b:
         9c:f2:6a:06:88:0f:5f:dd:cc:3f:73:af:c0:1d:65:d9:b5:0e:
         a8:d9:52:6c:51:1a:d0:9b:28:b0:85:a9:e6:c8:95:7c:b6:0c:
         6c:09:71:66:cc:bf:c8:3c:fc:07:e3:d3:96:1e:43:12:91:1d:
         7f:97:18:b3:71:97:32:aa:1c:4b:45:1d:cb:22:9c:ab:6f:f6:
         66:d0:56:43:06:9e:c3:dc:02:ad:6e:87:cc:8f:57:aa:e7:29:
         2c:8b:2c:4b:47:92:81:0a:e6:ed:b4:fd:87:84:97:26:24:c0:
         84:d6:0e:37:1b:16:5e:7e:7e:64:7c:4b:59:26:1d:2c:e9:56:
         5a:1b:e1:7d:f9:43:6f:f8:9a:7d:31:95:34:91:0b:c2:59:65:
         fe:f9:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:48:47 2026 by rpki-client