Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/964610f2-1710-3714-93fc-af774fb741d1.roa
File:                     964610f2-1710-3714-93fc-af774fb741d1.roa (raw, json)
Hash identifier:          pRy9OwBz+gXvmMICBqqgQeiRhJULFUqmqP5JXJWTbzs=
Subject key identifier:   F4:6D:13:0B:C7:FF:F0:DB:FF:3A:AD:49:50:1E:1D:F7:48:76:53:5E
Certificate issuer:       /CN=03e58790-8887-4eae-9965-80e3a70bdf97
Certificate serial:       010D0C9F4328584F5C23CCDD1919E5353AC2A400
Authority key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/964610f2-1710-3714-93fc-af774fb741d1.roa
Signing time:             Thu 01 Oct 2026 17:41:57 +0000
ROA not before:           Thu 01 Oct 2026 17:41:57 +0000
ROA not after:            Tue 08 Dec 2026 15:23:59 +0000
asID:                     46293
IP address blocks:        192.82.0.0/24 maxlen: 24
                          192.82.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:23:cc:dd:19:19:e5:35:3a:c2:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e58790-8887-4eae-9965-80e3a70bdf97
        Validity
            Not Before: Oct  1 17:41:57 2026 GMT
            Not After : Dec  8 15:23:59 2026 GMT
        Subject: CN=90a885c4-4017-4e24-907d-0ae5df8564da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:86:17:43:94:8e:92:b6:e3:e4:db:a7:6e:
                    f0:ca:1d:79:bc:23:94:35:bf:1e:ba:c8:14:2c:b7:
                    90:86:32:4a:56:0c:15:29:2b:bb:44:5f:43:d3:21:
                    f1:eb:d0:b9:66:2c:da:7c:90:c2:ec:7c:8e:fd:9c:
                    33:b1:a8:ca:77:b5:e3:e8:a8:f7:12:6d:94:f2:05:
                    09:47:6e:2c:74:6b:77:21:6c:5a:8b:1e:cb:ac:94:
                    03:1e:5f:50:a7:c0:73:04:90:ec:d9:d4:8f:fe:da:
                    93:ae:7c:3e:ac:b3:e1:55:80:36:09:b2:25:db:3b:
                    ec:a6:b6:04:e0:86:15:f9:10:96:56:f9:80:13:4d:
                    ce:82:80:99:df:0d:d1:0c:f6:9f:4e:e8:42:b4:84:
                    32:11:52:94:7f:05:94:2d:28:4d:9c:3b:e8:b0:e2:
                    a9:17:d4:8d:98:63:9b:b2:e5:3a:7b:25:e8:34:58:
                    cb:2a:34:b0:83:1a:fe:c4:c8:fe:df:a6:65:d7:4f:
                    85:b0:ba:92:61:07:f1:f8:87:7e:88:2e:a2:7d:cb:
                    d1:e3:72:48:a5:6c:7b:d4:3f:44:2a:d5:67:4f:65:
                    10:c1:25:5f:30:ad:9a:7f:05:fd:bd:9e:43:2c:8f:
                    39:68:31:91:48:da:e2:5c:b7:cb:bc:02:40:f2:44:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6D:13:0B:C7:FF:F0:DB:FF:3A:AD:49:50:1E:1D:F7:48:76:53:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/964610f2-1710-3714-93fc-af774fb741d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl

            X509v3 Authority Key Identifier:
                keyid:53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.0.0/24
                  192.82.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:2a:4a:30:0f:72:a1:43:25:dd:2c:93:99:d3:9b:10:8e:
         34:0a:c9:1e:47:43:0c:87:4f:68:ee:e5:7f:d0:44:d2:fa:2c:
         ba:37:eb:79:5f:c6:b9:1d:24:9e:00:6b:92:84:f2:8b:80:eb:
         47:0f:be:4e:8f:b9:c3:1b:47:73:37:7a:ab:b9:33:46:dc:4f:
         56:48:a8:c1:c9:06:09:86:ff:68:42:fa:f9:c7:cf:28:71:28:
         3d:16:3c:63:e7:cf:95:81:49:0d:68:fc:57:d1:c8:2e:32:cf:
         25:6f:ef:77:8c:a6:8d:70:9a:49:48:93:69:72:99:0d:7e:2d:
         e4:a3:3d:af:d0:f2:0d:9d:73:3a:db:ef:f7:40:2f:a5:36:ec:
         7f:b7:78:5b:e8:97:de:87:fe:bf:91:9e:aa:07:b7:4b:20:04:
         db:bc:4a:50:4e:18:2c:c2:ad:b6:fc:a6:15:bd:19:28:cb:ce:
         5e:7e:77:5e:30:39:4a:a7:bd:8c:cc:fb:af:45:a5:63:bf:32:
         f5:38:d7:3a:41:ab:3d:f1:8c:0b:20:f9:f1:b8:3f:e5:1d:83:
         24:1e:13:72:e5:99:05:e7:9c:04:b5:ed:ae:7e:df:6e:c0:e0:
         4b:4b:55:3b:d3:e8:29:a7:26:dd:e4:4c:73:f9:f1:7c:20:87:
         c3:3b:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:08:59 2026 by rpki-client