Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa
File:                     95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa (raw, json)
Hash identifier:          VDOurKf6aA+RJEggMnuUJqHjbAIXAAd7Hh1Cm2wqgTs=
Subject key identifier:   53:D8:71:35:2C:E1:96:FD:90:54:B3:A6:65:15:68:BA:23:18:DF:29
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F4328584F4989544EE59EE6AF1B329F00
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393607
IP address blocks:        192.152.158.0/24 maxlen: 24
                          198.169.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:54:4e:e5:9e:e6:af:1b:32:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae71ef3c-fa90-493e-878b-bd4a94b3fc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:b7:a2:5e:dc:06:4b:65:ff:07:99:43:15:
                    a6:4a:1b:32:62:2a:39:b5:4d:4a:26:04:f5:e1:37:
                    0d:39:5a:28:39:de:80:76:d3:63:82:3a:be:53:e6:
                    06:6c:60:44:ae:19:cf:09:5e:bb:bc:e8:b8:41:7a:
                    93:02:66:f7:0a:0f:01:31:a5:4a:27:31:02:d5:46:
                    65:b9:bc:b2:41:57:a3:69:a9:10:c0:fa:8b:9e:5b:
                    1a:a3:13:42:e4:d9:f6:47:fe:82:f6:f7:bd:3a:ea:
                    b0:cf:76:99:2a:67:35:dc:f9:d1:a2:5e:6b:0b:26:
                    81:f5:f1:68:77:6a:49:31:07:cf:71:81:7e:33:7f:
                    b6:34:b1:73:42:1d:80:a6:61:9c:e6:04:92:d3:2b:
                    29:6f:54:d8:54:52:11:b6:f3:0b:54:7a:b2:ac:ec:
                    4d:55:ae:bc:a1:b8:e7:a8:75:2f:3f:9b:1e:d2:62:
                    ed:5e:88:98:86:3a:1d:29:40:58:2f:67:00:45:c3:
                    2d:01:5e:d1:e5:ee:5f:7c:d9:b0:73:eb:d4:67:10:
                    3d:35:8f:1f:13:6f:37:97:f6:0d:2d:e3:4b:d1:21:
                    d1:e7:d8:d6:cb:3f:99:44:41:3a:92:0c:ee:0e:51:
                    9a:85:c5:2f:50:79:b7:70:f8:7f:25:52:7a:7a:a5:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D8:71:35:2C:E1:96:FD:90:54:B3:A6:65:15:68:BA:23:18:DF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.158.0/24
                  198.169.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:72:06:36:be:0c:7b:04:64:75:33:5b:ac:1b:e8:63:d4:02:
         ab:39:23:7d:9e:5f:83:9c:a1:78:7d:52:7f:02:ab:ea:54:ca:
         05:1e:53:98:de:cf:93:df:bd:61:b9:85:fc:56:ca:8f:bf:22:
         1d:69:75:6d:4a:47:26:d4:94:1c:2a:26:8d:81:93:13:e5:70:
         b3:07:bb:95:24:6d:c0:d7:6b:40:fe:25:4e:1d:1f:5c:12:ff:
         ce:3b:8d:7a:85:54:29:ad:00:fe:22:47:be:68:e4:14:31:3b:
         e3:19:42:aa:64:b3:de:09:5a:05:3c:9b:00:5c:e3:a8:f9:99:
         29:b8:b6:dc:bf:90:0c:0b:9d:ce:49:6c:2f:b2:19:11:ea:19:
         df:b4:17:4c:32:ed:17:4d:50:72:aa:a1:2d:25:92:92:ed:0d:
         ff:8d:5d:82:4f:35:27:8f:30:2b:d6:59:43:7c:48:9a:58:7a:
         da:7a:57:9e:e9:5f:b7:85:10:9b:c4:f4:ec:86:2c:23:92:1f:
         e4:45:e7:7d:2e:94:26:d9:87:20:4f:fc:bc:3b:67:ce:b4:ec:
         01:cf:48:5b:1a:9e:03:eb:b4:cb:f4:53:a2:fa:19:57:d4:87:
         0a:35:ae:19:92:ed:1c:3b:be:eb:65:15:25:08:0c:61:3c:cb:
         9f:38:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:09:54 2026 by rpki-client