Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
File:                     c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json)
Hash identifier:          GhJ5u5tp7NCi25dwZq4YggXhiBz8y3kzic6bq9s9/zY=
Subject key identifier:   B7:44:D8:4D:44:26:D9:50:25:58:65:D3:8F:51:B4:01:13:6F:29:8F
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584F49757AC798E8626E16EF3100
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3738
IP address blocks:        192.250.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:7a:c7:98:e8:62:6e:16:ef:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=517a919d-f97d-41f0-a994-89e7a8dbcd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:25:d1:af:b5:5f:72:a0:d4:5c:76:82:7f:
                    a0:4a:6b:41:c5:9d:70:de:5d:3b:b2:29:4c:96:1d:
                    c5:a2:ae:17:43:30:97:ba:39:97:13:33:0e:ea:ef:
                    2f:1d:2e:88:73:d2:09:b9:6c:00:fd:cd:19:a0:d1:
                    6f:80:d8:0e:cf:1d:aa:6a:84:03:31:e7:25:5d:2e:
                    6b:1a:54:8c:dd:63:79:d5:38:23:6c:9f:64:3c:75:
                    f5:fd:a6:62:c5:0b:6a:36:fa:a2:72:a2:8d:fb:4e:
                    e7:8e:49:f4:42:50:22:80:b3:7b:b8:01:5e:78:32:
                    b3:bd:65:b7:cb:02:57:68:34:80:5b:c9:e1:d4:8a:
                    9b:5f:10:e9:73:d6:d4:27:ef:6b:97:4e:7d:67:a0:
                    01:96:4f:67:1f:31:92:91:12:16:1b:f1:58:bb:e5:
                    bf:71:bd:4f:b9:0d:eb:54:2d:4a:b7:a0:a9:ed:94:
                    2e:31:67:08:e2:9a:e9:f8:54:1c:c9:35:8d:97:76:
                    9c:cc:16:21:58:6f:96:30:fa:8c:f2:2b:fe:10:2a:
                    51:be:cf:f3:93:d7:4a:4e:c0:b3:07:f6:ef:76:44:
                    95:53:91:eb:76:b5:39:56:01:92:55:c1:45:61:a7:
                    dc:92:49:b9:a9:ff:2d:0f:d0:01:75:30:95:10:a6:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:44:D8:4D:44:26:D9:50:25:58:65:D3:8F:51:B4:01:13:6F:29:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b0:bd:4c:59:89:57:1b:48:49:88:2c:cc:39:21:97:3b:cd:
         5c:d2:09:35:f2:19:29:60:31:0a:a3:81:92:df:79:9a:6d:51:
         7a:d3:6e:92:17:4a:de:b2:97:ff:97:8d:af:3b:42:a1:c8:e8:
         84:8f:48:e4:95:18:0f:ae:9a:0d:c8:43:0c:f2:e2:d9:8e:18:
         04:3e:a8:3c:a8:41:44:f6:e2:c2:6c:1e:22:95:59:22:1b:f0:
         f2:8e:5c:fb:3a:05:5a:bf:ba:e6:61:8e:44:11:db:51:33:19:
         b0:7f:b1:14:ef:c9:27:37:11:4e:a3:2f:3c:14:4c:5c:bb:04:
         69:4f:8b:1f:6c:dc:a9:9c:9a:6f:9a:b3:b2:6c:f5:b0:ff:4e:
         1c:b2:b6:01:6b:fb:33:e6:86:56:97:88:a3:dc:f2:9f:26:cd:
         42:3e:a5:2d:a2:52:47:d1:73:4f:93:17:0b:c1:2c:d9:cd:1c:
         f9:9d:7d:b8:a0:c8:ec:8d:cd:7e:1e:da:4e:27:32:c2:59:0a:
         2a:bf:e9:32:f9:f3:8a:60:d2:55:3c:b0:f8:8a:f2:f2:bb:1f:
         29:bf:a3:cc:36:46:80:06:f4:7e:60:c5:f7:01:6b:c0:36:fe:
         79:01:ff:ab:38:94:ae:4d:2a:f2:d9:3b:0a:ad:96:57:1a:26:
         5d:ef:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:22 2026 by rpki-client