Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa
File:                     f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa (raw, json)
Hash identifier:          rCurSldEPAqrTvUwObVo45mhbKtCPJhtBsIOoxlqERA=
Subject key identifier:   71:6C:44:19:10:79:C9:77:64:4E:30:E8:6A:15:96:40:03:0C:32:6C
Certificate issuer:       /CN=ef95cef5-e935-4ba0-a453-bc65e785a251
Certificate serial:       010D0C9F4328584F498BCD923DCC0EA6117E6000
Authority key identifier: E3:A1:21:A4:C0:E6:FE:97:D1:ED:DB:0E:6A:D2:FC:88:D2:11:F6:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401262
IP address blocks:        141.193.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/ef95cef5-e935-4ba0-a453-bc65e785a251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/ef95cef5-e935-4ba0-a453-bc65e785a251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:cd:92:3d:cc:0e:a6:11:7e:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef95cef5-e935-4ba0-a453-bc65e785a251
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=74f3f112-e0ab-4e8a-9b43-8a4585db31f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:30:d6:81:ec:d2:aa:ab:e8:9f:9c:27:80:
                    43:12:2d:3c:95:5b:20:1a:13:69:a2:ed:cb:01:55:
                    7c:0d:4a:60:f0:2a:a9:d5:70:06:62:4d:f3:21:2a:
                    d3:9c:22:4e:ca:e0:cb:f0:9d:32:14:4c:f3:6f:30:
                    95:80:3d:3c:4d:f3:33:98:22:78:6d:b8:24:5a:f0:
                    85:4b:5e:cf:8c:33:6c:93:26:32:5e:99:71:da:42:
                    5f:fc:61:e9:23:1c:2d:c9:d9:55:6c:dc:df:1a:29:
                    76:48:74:63:83:80:48:0d:dc:7e:5e:7a:18:ec:7a:
                    dc:e1:18:14:53:75:c3:dd:05:84:9d:81:d2:6f:9f:
                    05:65:fa:87:d9:aa:7d:1e:75:52:ac:91:6d:8c:d7:
                    f9:e5:3c:cd:36:f6:d1:14:5e:4d:3b:40:bd:ac:a6:
                    45:8a:44:a2:0b:db:38:9e:79:58:4f:4b:8c:01:3f:
                    66:b0:d8:d6:61:cc:ed:df:f9:29:1b:c8:6a:2e:59:
                    1c:f6:ac:37:ad:4e:96:c0:b9:91:65:78:70:d2:e4:
                    d5:e2:e3:49:ae:bb:dc:0c:be:95:1b:48:38:03:c3:
                    09:2a:87:ae:5a:c1:9c:63:ab:3b:e2:ab:cd:7b:74:
                    5d:47:12:36:d8:e2:bb:5e:85:d4:9c:2e:6c:5f:37:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6C:44:19:10:79:C9:77:64:4E:30:E8:6A:15:96:40:03:0C:32:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/ef95cef5-e935-4ba0-a453-bc65e785a251.crl

            X509v3 Authority Key Identifier:
                keyid:E3:A1:21:A4:C0:E6:FE:97:D1:ED:DB:0E:6A:D2:FC:88:D2:11:F6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:15:27:f7:d4:af:a1:b2:08:f3:c2:75:7b:3e:2c:ef:41:
         31:19:e8:1e:7f:4f:78:f8:87:67:3f:e5:6c:d1:1d:a5:0b:2a:
         a4:b8:52:00:f5:bf:d3:a8:02:d2:17:29:d2:a0:c2:31:6c:d9:
         b9:51:c7:ff:6e:b9:06:54:84:57:38:9c:6a:01:2a:e8:2e:f6:
         86:28:0c:80:d9:7a:4b:c6:68:c1:b4:c5:f8:a2:ef:6c:d9:70:
         58:84:69:ec:41:6f:28:00:4b:6f:4c:9f:5a:50:d3:79:c2:2a:
         af:c2:b5:90:82:9c:09:92:fb:02:69:2d:a4:ca:2c:8f:f0:5c:
         74:60:84:b5:cb:16:36:10:66:c5:b9:78:37:8b:ed:36:ff:0a:
         b0:03:79:4d:91:43:34:39:9c:3b:e0:89:46:51:c4:bc:d0:56:
         e7:d5:88:31:5c:db:28:88:df:d0:6d:d3:4c:c2:2d:f3:b7:4f:
         88:fb:e9:f7:d0:34:d9:38:93:b1:ad:4e:3a:5f:bd:56:ea:73:
         fe:a3:8e:fe:38:3b:38:e1:b9:05:5e:62:2c:d1:f9:88:e1:64:
         94:c5:e8:78:98:de:a6:6c:6a:60:fe:2d:c4:ef:7d:be:f5:7a:
         b5:a1:99:7c:2b:94:54:ed:f0:6b:eb:f6:9f:a7:50:7b:e0:6f:
         ac:82:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:03:20 2026 by rpki-client