Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa
File:                     8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa (raw, json)
Hash identifier:          VCCM+6U6CRvDu9BOZVhnSYtnC+A4iEw1mLkiKufcHpg=
Subject key identifier:   ED:CC:AD:54:D9:6D:81:5A:CA:AD:A3:21:82:BC:6D:47:4D:08:2C:FC
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584F698D823D300C4364EA329300
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     55178
IP address blocks:        192.230.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:82:3d:30:0c:43:64:ea:32:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=d371d5a4-f26a-41dd-863d-53e15d73a9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:0c:f5:17:53:ba:32:bd:69:30:d9:04:ef:
                    a6:29:8e:56:fb:de:fc:2a:85:9b:ec:ca:4d:38:ac:
                    c7:c6:f9:68:fb:69:29:4e:5c:8c:48:84:ce:06:84:
                    14:45:cd:65:bf:63:22:54:ae:14:db:62:44:17:41:
                    aa:4e:54:09:8a:bb:39:39:e5:a0:41:9e:f1:00:ea:
                    62:14:1d:92:f4:0a:6f:db:a7:93:70:61:ed:97:8a:
                    cf:27:71:90:a4:cb:57:dd:9a:96:5b:ee:57:96:81:
                    52:4b:ce:ca:d0:53:0c:43:54:b1:8a:9a:dc:01:67:
                    4f:32:70:27:72:75:90:9f:c9:25:e9:70:d7:67:ed:
                    cc:b6:e5:66:fe:e3:73:62:01:c2:a0:73:42:a5:dc:
                    f8:c0:db:25:8f:e1:0b:cf:44:20:05:c4:15:6d:97:
                    8a:39:c0:e8:5a:c6:48:88:66:aa:d7:cc:b0:d4:80:
                    91:85:5b:3d:62:da:59:1a:32:d4:39:cb:e3:18:94:
                    4e:59:cd:58:f8:bd:08:f6:97:75:13:03:8d:43:c8:
                    13:76:ee:56:56:8c:b7:b6:21:74:03:7c:0c:e4:b5:
                    4f:44:9f:17:fc:d6:55:2f:7a:7a:10:66:c0:32:e5:
                    0a:6c:b5:dd:be:44:88:0d:89:2b:92:ff:c5:92:ab:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:AD:54:D9:6D:81:5A:CA:AD:A3:21:82:BC:6D:47:4D:08:2C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/8c5636e0-f1ea-3cad-bfdd-0d5251de72b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:59:d4:bd:76:28:49:a0:77:2f:08:76:58:91:4d:6c:59:
         79:ee:3a:c7:b9:5e:83:f0:59:7b:c0:3d:a0:bd:eb:09:d0:0d:
         2b:65:0b:74:56:14:48:77:97:1f:e5:47:6e:94:df:cd:c2:a7:
         1f:e7:f6:85:9c:8e:33:d5:10:56:bd:fb:b5:0d:e8:91:7b:06:
         8c:2a:16:e5:4d:61:6e:46:c8:e6:2c:42:45:ba:d5:79:c7:22:
         af:b9:14:04:d6:cb:f2:14:85:45:32:0c:f5:1b:8e:cf:26:6f:
         d6:c7:14:54:ae:55:62:76:bd:de:86:3b:18:e5:29:fe:e9:7b:
         1a:bd:30:26:b8:bf:4c:bd:a4:46:55:ba:30:e7:86:77:e3:30:
         59:26:72:0e:75:73:c0:3c:fb:d8:b3:eb:6d:f2:ea:a2:67:ae:
         0e:db:23:41:9f:40:d2:d0:6f:f8:a3:b4:f9:d5:70:0f:d6:af:
         dc:38:78:1a:0e:99:71:ce:fe:37:7b:01:97:9b:a9:fa:28:33:
         b2:c7:80:07:6f:0c:87:2b:34:f7:fb:1e:ed:d3:6e:56:e3:60:
         93:e5:51:be:c1:8f:fd:17:1c:1d:da:8d:f5:81:dc:57:0e:65:
         b1:5b:c0:c9:b8:6f:18:5c:db:99:66:36:d1:e6:68:6c:3c:7d:
         80:45:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:52:14 2026 by rpki-client