Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/5a2667f9-2e23-3a59-a76d-c730490b94da.roa
File:                     5a2667f9-2e23-3a59-a76d-c730490b94da.roa (raw, json)
Hash identifier:          l6veXz2P5woxYPmW27dcg/Gw/ydc3S7l/Jw3bVTAriI=
Subject key identifier:   9E:3B:01:B3:BC:05:43:BD:48:2A:69:5F:1F:39:93:FE:73:90:6C:C6
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584F4974523EFA9655F518C8A5B0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/5a2667f9-2e23-3a59-a76d-c730490b94da.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55195
IP address blocks:        149.112.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:52:3e:fa:96:55:f5:18:c8:a5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d1a30b7e-4a36-48f5-9fc5-40ca74bc5c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:6e:7b:a8:82:6d:d7:fa:37:de:d4:85:d0:
                    6a:c7:b5:be:97:22:8a:fb:2e:72:86:51:d0:d5:ee:
                    25:52:90:d2:02:7c:0a:b8:70:d9:a3:bb:6a:32:c9:
                    09:3d:96:bf:b7:5f:1e:90:cf:b3:ef:e0:5a:ab:bd:
                    5f:ac:b5:46:cb:5e:48:69:04:d2:d5:04:88:6d:d0:
                    d8:bb:1a:bc:9a:32:60:41:60:ea:e6:54:20:c2:4f:
                    08:20:0b:de:0f:bc:c1:91:63:33:4e:60:ba:73:9b:
                    3b:8f:5f:06:74:b1:3d:09:6b:d8:5a:ec:fc:f8:e3:
                    de:3c:a9:92:0c:af:4c:c7:63:e7:80:48:e8:77:59:
                    12:ce:5c:0c:46:e8:f7:94:d0:15:8e:a5:f0:96:d8:
                    86:9c:4d:d0:8f:ec:91:b4:a0:0c:16:4f:37:df:95:
                    6e:51:14:e5:9b:c6:41:fa:cd:af:65:68:3f:3b:76:
                    65:ac:10:d6:7f:79:de:f8:20:5e:8c:c3:40:82:59:
                    e2:22:e9:56:83:56:81:1c:21:c9:0b:51:8b:0c:1c:
                    fd:46:5a:0d:8e:b1:9b:12:d1:0e:0b:63:7a:19:b9:
                    b5:71:e6:55:f6:27:0c:2d:4b:66:3b:f1:79:da:72:
                    c4:2d:e9:0e:c4:8f:35:dd:4f:b6:e7:e3:1c:9f:01:
                    0e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3B:01:B3:BC:05:43:BD:48:2A:69:5F:1F:39:93:FE:73:90:6C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/5a2667f9-2e23-3a59-a76d-c730490b94da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:dc:9b:3d:bb:22:57:5b:49:b9:fc:68:90:5d:00:59:e7:
         ea:5b:fe:a3:e2:e4:0f:32:11:58:4d:2b:e8:5b:d4:15:9b:d3:
         14:34:2a:ba:b7:0a:9e:06:9a:85:25:5f:1b:c6:cd:69:6b:5e:
         68:b3:9a:cb:45:8c:ae:07:22:7f:e7:99:9f:2d:bb:ba:c0:b5:
         4e:01:f3:42:5a:c2:3f:2f:85:4e:39:b5:25:98:36:75:50:99:
         9e:ba:5f:c4:b9:44:1d:c3:21:83:3f:c1:c0:2a:74:53:0c:f1:
         01:b3:8d:45:8e:7c:31:5b:31:92:eb:75:67:62:47:c0:52:dc:
         96:8a:4f:7a:00:37:da:fa:f9:af:25:b4:c1:6e:79:af:60:8d:
         1d:24:2b:41:aa:0e:0a:70:19:67:fb:10:b3:13:83:45:39:bf:
         f2:ff:e6:9c:7c:35:b6:04:2f:0d:e1:62:51:cf:ff:49:8c:39:
         68:c4:5c:f6:8b:a3:52:e9:bd:20:b6:0e:23:8c:08:d7:dc:ec:
         80:a8:6c:5c:27:f4:09:c3:3f:cf:5c:28:37:b3:2f:94:1f:d8:
         8d:a6:d0:05:10:8e:ac:e0:a0:8f:77:47:14:18:18:d4:8f:69:
         a0:5b:e7:12:e3:99:97:b7:f5:dc:d5:8e:89:dc:7e:49:37:14:
         fc:bb:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:46:22 2026 by rpki-client