Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/ed0ebd45-a2ee-39a9-af6a-f1b0f63f52d1.roa
File:                     ed0ebd45-a2ee-39a9-af6a-f1b0f63f52d1.roa (raw, json)
Hash identifier:          NNsHP1xHItt5gyLB2Q5tFeAKDHf7zP9AiGBserEWTmU=
Subject key identifier:   60:27:07:98:4C:F1:B4:56:FF:3F:1E:78:4F:0B:8C:88:0C:A0:0F:F7
Certificate issuer:       /CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
Certificate serial:       010D0C9F4328584F4986FA33834799E95B4D2E80
Authority key identifier: ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/ed0ebd45-a2ee-39a9-af6a-f1b0f63f52d1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13804
IP address blocks:        192.199.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:fa:33:83:47:99:e9:5b:4d:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d97ce9-5a4c-441e-992e-39480606bb0f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=887b35b3-ef87-4a59-86b7-fb38d931224b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:a7:97:6b:13:09:60:09:18:65:cb:2f:db:
                    f5:eb:a8:fc:41:47:ba:1c:d3:3a:fa:cb:d2:02:ca:
                    09:48:d7:a7:75:7e:67:35:fa:8a:23:2b:bf:15:b4:
                    95:c5:20:cf:79:be:0d:17:4d:a3:a0:4e:ee:33:15:
                    0f:97:a7:b9:21:be:55:08:39:9d:85:d8:dd:3f:2b:
                    f4:e6:04:55:c8:ed:94:db:69:8b:50:b0:b0:86:7d:
                    38:12:f5:78:4c:24:b6:e2:b9:2e:b5:c6:43:dc:c1:
                    b4:95:97:d0:88:59:9b:fb:97:ee:1b:86:1f:34:74:
                    8e:0c:2f:bb:96:a0:a5:85:04:e1:97:41:9d:50:a1:
                    9e:57:8a:ef:ac:e2:7a:e1:ca:15:63:99:07:f3:ed:
                    fd:24:c1:7e:a8:21:d4:4a:55:fe:cc:17:83:15:73:
                    99:90:ac:a0:12:ff:60:2d:d9:73:a4:b3:8b:45:0b:
                    ab:45:ab:8f:ed:05:f9:3b:b8:91:96:b2:6d:24:70:
                    8d:f7:90:fb:18:d9:b1:f3:fb:06:f2:df:8f:4d:19:
                    02:f0:31:fd:81:b8:df:c7:79:b3:07:4d:96:22:e0:
                    00:23:7d:f8:6f:fa:1d:99:cb:1d:82:e4:ac:e9:7c:
                    17:19:9e:79:1e:6e:23:b7:bf:93:58:ef:d7:0c:d0:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:27:07:98:4C:F1:B4:56:FF:3F:1E:78:4F:0B:8C:88:0C:A0:0F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/ed0ebd45-a2ee-39a9-af6a-f1b0f63f52d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f/d1d97ce9-5a4c-441e-992e-39480606bb0f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:AF:56:74:C3:55:48:03:79:4E:A3:FA:02:76:02:B5:FE:37:19:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d1d97ce9-5a4c-441e-992e-39480606bb0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.199.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:4e:34:d8:56:53:50:95:ed:a9:ff:de:9a:ff:af:98:b4:
         47:fa:ae:bd:fb:09:45:b7:52:b6:93:d6:ef:d0:44:4d:07:3c:
         5f:16:fa:1a:2d:70:4b:74:dc:a1:1c:ec:13:00:81:c0:99:9b:
         45:98:26:b3:1a:3a:3f:b4:8e:78:d9:36:b5:12:51:56:2f:99:
         9b:bf:53:87:b0:78:07:16:6a:1a:a9:91:14:3c:1a:27:45:fd:
         23:46:9d:50:ec:db:67:8d:e9:68:11:bb:ad:84:91:ff:57:ac:
         49:00:b1:3c:c8:e6:e9:cd:5c:b6:e9:25:df:a5:fb:9e:a5:0a:
         fd:15:1e:06:e0:8e:43:f3:7c:2e:5a:23:19:01:b2:7f:73:e4:
         86:f7:fd:40:6a:99:1c:97:9a:c4:c4:8b:c1:c4:72:2a:02:36:
         33:cf:02:43:01:65:77:4e:2c:b4:e1:64:0e:7e:85:e8:77:d0:
         84:47:68:e6:69:4b:db:a8:b8:a3:a3:b6:b5:dc:17:8a:a5:d2:
         da:61:02:c4:51:e8:d3:f3:8f:cb:b1:47:b1:d2:c4:87:aa:fc:
         20:89:70:f3:f1:df:21:45:d5:85:a7:5f:bd:07:88:0e:67:0f:
         d2:7d:c2:58:da:bc:95:ff:f7:00:42:05:f6:d6:5f:c6:a6:41:
         7c:7d:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:57 2026 by rpki-client