Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d15378-249b-3a5f-8053-8571e1f15b57.roa
File:                     32d15378-249b-3a5f-8053-8571e1f15b57.roa (raw, json)
Hash identifier:          RO1r5ySCIXkJuFKQ65nAXtjzaKr8emKRcs3FH/Bmg1U=
Subject key identifier:   44:ED:A4:2F:93:56:7A:10:4B:C1:82:68:30:0E:20:44:D1:BB:55:C0
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F46A7EEAB0C08179AC385E8C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d15378-249b-3a5f-8053-8571e1f15b57.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        192.178.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:ee:ab:0c:08:17:9a:c3:85:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=4be62770-a5a2-486e-b14e-bef33f824912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:10:35:26:31:b5:da:24:09:db:a4:6b:31:
                    0d:09:db:4f:b5:97:2d:67:62:ab:b9:eb:b2:b2:3f:
                    cf:87:e7:f4:43:5b:38:2f:70:5d:43:c3:81:92:1c:
                    b7:78:6c:24:68:cd:0e:75:43:c6:e1:bd:61:dd:d5:
                    d1:5b:23:ee:f7:4a:c3:19:22:a6:b7:2d:c6:f3:e4:
                    01:49:3e:85:ed:3e:20:60:52:3a:88:77:99:26:15:
                    ad:ac:09:b4:9d:cc:38:91:93:42:87:03:5a:2a:57:
                    8f:5d:15:86:00:9d:c3:de:8f:39:02:45:20:cf:eb:
                    0b:a9:0d:b5:6e:be:27:13:81:e7:fe:44:76:75:6c:
                    5f:db:00:5e:d8:fe:c0:a1:7b:71:d4:f1:9b:d2:22:
                    f3:f4:bc:db:98:d7:9a:e1:96:b7:89:4f:1c:fa:df:
                    95:f5:4b:0a:6b:6b:3c:c8:24:fb:67:2e:c9:75:0a:
                    a1:cf:8c:a9:4e:48:01:ee:a0:39:b3:1f:11:5b:5b:
                    3d:6d:24:ed:d8:83:e9:5c:fc:77:64:9e:e5:dd:51:
                    63:a8:12:7a:70:23:cb:2c:06:3d:d7:86:34:bb:d0:
                    8d:b7:e7:0c:f5:6a:f4:09:89:b9:ef:f6:42:1c:5a:
                    6e:89:24:f3:2a:cf:8e:b1:49:4a:75:52:61:b1:0d:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:ED:A4:2F:93:56:7A:10:4B:C1:82:68:30:0E:20:44:D1:BB:55:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d15378-249b-3a5f-8053-8571e1f15b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:70:45:01:07:17:9a:77:1f:2f:48:ca:1d:54:cf:fc:04:
         b5:a4:07:5b:e9:21:8d:63:d6:e2:09:5c:c4:c9:50:d8:37:e1:
         a3:89:e6:09:34:ab:67:88:1f:3e:1e:74:18:cd:53:a3:88:09:
         4d:b8:1c:af:1c:a2:73:d4:15:ce:0e:71:5e:f7:8d:09:a1:c0:
         97:5e:9a:9d:20:6a:c6:84:6a:54:01:ae:fe:13:5e:4b:6d:77:
         18:d7:26:a3:1c:8a:df:7e:24:03:c6:79:97:dc:0e:7f:ec:03:
         d9:a4:f5:ec:89:4a:26:c4:44:6d:8b:2b:3f:b6:fd:57:f6:7d:
         9c:ab:42:20:1d:7c:8a:f3:cd:42:ce:67:0b:7f:2d:93:f7:80:
         79:59:ff:c1:a8:c4:a7:26:5f:f3:4d:c5:2e:e8:35:cc:b3:b3:
         a1:25:89:a4:14:db:e2:10:85:fd:98:d1:60:2d:f7:5c:e2:b2:
         45:b9:da:0a:cd:6b:b4:78:9b:8c:3a:e7:b3:43:eb:95:fa:2b:
         6f:bc:6d:8e:5b:e8:03:7e:a0:fe:ae:c7:ff:0f:96:4d:7c:ff:
         aa:c5:b4:da:07:49:80:96:4f:cb:a4:a2:17:e0:1d:3c:f1:57:
         e3:81:32:a2:18:b9:5d:b8:0c:72:26:83:36:21:f8:66:8d:75:
         07:c9:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:49:27 2026 by rpki-client