Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/e675c2b1-edd6-39f9-b3b4-46725d9aee0e.roa
File:                     e675c2b1-edd6-39f9-b3b4-46725d9aee0e.roa (raw, json)
Hash identifier:          2NWaCLY7hX8c+QAOgRpRrBoZD9oAdLUD8x9Z4MXOm9Q=
Subject key identifier:   67:BB:38:2F:13:82:DC:0B:0F:00:42:4F:53:3E:22:EC:1A:81:20:49
Certificate issuer:       /CN=a3bb7575-3f60-45fd-85ee-371d0bbae24f
Certificate serial:       010D0C9F4328584FA2C8779CC814166651928C80
Authority key identifier: 4F:87:DA:17:DB:49:01:AD:8B:E5:F9:AF:A4:47:0D:0C:2F:D5:12:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/e675c2b1-edd6-39f9-b3b4-46725d9aee0e.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     16509
IP address blocks:        192.159.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/a3bb7575-3f60-45fd-85ee-371d0bbae24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/a3bb7575-3f60-45fd-85ee-371d0bbae24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:77:9c:c8:14:16:66:51:92:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3bb7575-3f60-45fd-85ee-371d0bbae24f
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=67f10bb0-28e9-4a81-b531-2afffb2490ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:9c:7b:65:16:d4:77:8d:fb:6a:4f:39:fa:
                    f2:ef:6d:cd:ce:27:28:ec:02:51:1e:6e:ef:62:cb:
                    cd:68:92:14:d6:fb:d0:8d:05:aa:1c:e4:64:22:f5:
                    00:0c:1f:68:21:2c:65:61:7d:b3:26:a6:19:5e:53:
                    be:90:4f:d7:57:f4:65:4f:ea:9e:eb:f4:56:cb:f8:
                    bf:4a:24:8e:b4:57:2f:f5:ae:c9:3a:38:d3:50:ed:
                    06:33:c2:32:44:49:84:38:dd:62:e9:a1:0f:85:7f:
                    9c:1e:6c:5c:1a:3c:d1:3a:82:05:5a:2c:cd:e4:2f:
                    4e:36:e5:22:87:42:13:d8:3a:12:34:4c:6d:89:c5:
                    b1:45:2f:44:5a:f7:9f:5c:cd:b7:62:17:cd:3c:4c:
                    42:0d:30:74:7b:34:e4:f3:ce:9d:e6:bf:3f:3b:d3:
                    7e:59:d2:07:a7:6f:9a:3b:f2:08:bf:13:61:aa:27:
                    6f:0c:12:1e:9c:34:18:6c:e5:d6:8c:9e:08:82:6d:
                    1e:06:2a:c7:a8:5a:23:6f:10:60:2f:8e:81:af:dc:
                    6f:1a:ff:60:a3:da:c0:99:12:63:89:8f:6d:18:66:
                    4e:4a:da:a6:89:d4:3f:02:b8:29:cd:2f:bf:a9:db:
                    07:d4:32:a7:45:7a:14:24:ed:f3:58:d4:0a:9f:3e:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BB:38:2F:13:82:DC:0B:0F:00:42:4F:53:3E:22:EC:1A:81:20:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/e675c2b1-edd6-39f9-b3b4-46725d9aee0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f/a3bb7575-3f60-45fd-85ee-371d0bbae24f.crl

            X509v3 Authority Key Identifier:
                keyid:4F:87:DA:17:DB:49:01:AD:8B:E5:F9:AF:A4:47:0D:0C:2F:D5:12:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a3bb7575-3f60-45fd-85ee-371d0bbae24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:ab:93:ae:c0:e5:ee:60:ad:a9:47:50:93:2a:0e:23:18:
         06:45:e0:ad:f5:9e:9e:5e:e3:36:66:7c:7a:ea:b8:bf:01:31:
         18:89:2c:53:e7:f1:2a:7b:85:7c:8d:b4:2d:06:aa:0f:76:6e:
         ae:e7:13:40:0b:2e:e9:c1:cf:df:d7:f3:a7:3f:b7:6d:b2:45:
         61:7d:a2:17:74:f8:81:41:e0:05:33:fc:8e:60:e5:ae:08:02:
         bb:13:03:32:d8:45:67:fd:a8:60:fc:33:9b:7d:33:cf:c7:bd:
         57:09:8c:7a:10:d0:9c:23:64:b5:91:0f:f7:c7:fd:79:f8:8f:
         7a:80:cd:4a:74:63:b1:3d:74:26:c3:2d:43:77:14:fa:90:87:
         94:8c:3d:4b:01:16:c3:a7:25:00:1d:e5:cd:d8:d8:25:30:ed:
         5f:14:50:c0:80:ed:a2:5a:fe:ac:f6:9c:f1:67:4e:e5:cf:ac:
         fa:f9:fb:45:05:d1:df:75:26:14:e6:cb:5d:54:0b:da:47:9f:
         e3:66:0d:24:fe:79:98:a6:f5:ec:43:c8:5c:7c:a1:62:59:28:
         cf:81:ad:b8:f5:4e:97:3a:66:f8:c4:b0:19:7c:33:12:bf:e1:
         2f:70:f0:6d:79:26:66:92:a9:90:b9:89:bb:20:e8:5a:05:a0:
         53:f8:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:53:50 2026 by rpki-client