Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2ce395ab-3223-3b8b-8296-aea5ddb33894.roa
File:                     2ce395ab-3223-3b8b-8296-aea5ddb33894.roa (raw, json)
Hash identifier:          J8fXp6V3W+jXLqZiph0EzIpj1Xbzy1mqG0OC83IM3oE=
Subject key identifier:   94:0D:29:6D:31:C9:7E:06:20:4C:06:AF:F8:5B:7A:21:62:05:86:D3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F46A7EE1D8ECD67AE4678F650
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2ce395ab-3223-3b8b-8296-aea5ddb33894.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        192.178.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:ee:1d:8e:cd:67:ae:46:78:f6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=6d5c8df8-e7f6-4e8a-a894-65413c3493ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:08:13:1a:b6:0e:8a:d4:bd:fc:01:4b:5e:
                    ab:45:92:0f:30:9a:67:85:ed:ad:82:e6:24:33:87:
                    59:af:1c:c6:21:bc:ea:43:3f:88:2f:8c:7e:d1:dd:
                    95:11:ca:14:01:6b:03:d7:a5:f8:6c:a1:a5:e2:d1:
                    38:01:3e:53:78:4f:72:b2:ad:79:cf:25:8a:1d:5b:
                    a4:da:65:db:10:79:4e:d7:7b:89:86:70:0e:ec:a3:
                    de:a3:0c:a2:43:4d:76:fa:52:cb:bc:76:71:05:c5:
                    94:55:b1:cd:33:33:04:0b:07:14:e7:06:9f:7c:3d:
                    ce:7d:bd:03:4b:62:fc:d7:ca:c8:2c:d5:80:6d:88:
                    0c:40:38:17:07:41:ff:87:9f:8f:ec:40:fb:c9:9c:
                    c5:96:d2:74:91:90:3f:d9:3c:86:2d:71:a0:58:c4:
                    e6:29:db:66:0f:87:6b:88:25:ed:9d:e1:3b:d5:df:
                    37:05:86:47:78:53:18:e5:39:94:66:43:e6:15:42:
                    77:1f:08:e2:3d:87:6e:40:0b:3a:72:25:d7:6e:6c:
                    19:9d:9d:6a:a7:cc:3a:f3:ce:28:1c:9e:de:ff:cb:
                    ce:cf:42:7b:c1:51:8a:22:c1:34:90:b2:2c:7d:48:
                    e1:37:49:b9:8e:46:c8:86:5a:6f:54:78:a5:09:39:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0D:29:6D:31:C9:7E:06:20:4C:06:AF:F8:5B:7A:21:62:05:86:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2ce395ab-3223-3b8b-8296-aea5ddb33894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:43:3f:9b:96:7c:31:6a:6f:34:56:95:f1:f8:d5:a4:71:
         6a:40:88:7b:6e:32:be:a1:0d:a5:f2:1d:75:19:d1:ad:3e:a3:
         e0:d5:6f:5b:40:d9:86:fb:c0:8f:be:c8:0f:de:12:77:f8:0a:
         e4:cb:64:2d:1b:5d:9d:ce:46:f2:12:a7:93:66:e8:67:98:d0:
         ce:05:94:44:d5:2e:0d:4c:22:40:5e:ca:1a:50:09:d1:99:29:
         8c:98:ec:39:8e:d3:e5:54:1a:54:f8:18:d6:ec:7f:11:d1:9f:
         9d:32:4e:56:13:64:15:61:44:a0:71:73:c2:8d:43:c4:6f:ea:
         71:e2:06:5a:ea:21:26:82:c0:34:00:4b:68:b3:05:4c:56:6f:
         a1:45:7a:25:56:c5:24:e2:c6:d5:a1:b9:39:a0:cb:fc:d8:47:
         ff:db:89:54:e5:51:01:ae:3e:0a:09:50:8f:b5:7d:33:f3:0a:
         91:c1:18:89:5b:a6:8f:ff:59:6a:03:90:65:ae:db:6e:c8:6b:
         6f:ce:08:0a:0f:6d:51:5f:9c:5d:3b:50:30:e4:b6:85:3b:62:
         7d:50:f7:83:93:23:d0:ac:4d:66:48:dc:cc:c2:80:de:cb:19:
         46:e8:bb:a1:c5:5d:85:2b:cb:d7:93:fc:94:67:82:60:67:c6:
         0f:93:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:19 2026 by rpki-client