Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
File:                     0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa (raw, json)
Hash identifier:          TMbGgMDaQOvo4MBfNWfybEHTzRj2dTS6ZbJD2RSObkU=
Subject key identifier:   94:AB:60:B6:3E:74:B1:CE:5D:E5:D1:EC:F5:F7:98:7C:DD:EC:B1:98
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584F374D28B43D45B041BA4BF140
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     2153
IP address blocks:        137.164.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:28:b4:3d:45:b0:41:ba:4b:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=d033df9b-a392-4239-ad92-918fbf1e0c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:e1:7f:bc:56:e7:2d:dc:41:6b:e4:e6:59:
                    65:92:d3:a4:e0:fa:ca:7b:3d:1f:c8:b1:a2:4f:26:
                    5e:2c:2d:3e:d9:5e:01:32:74:ba:b2:86:de:78:12:
                    ce:d7:8f:3f:67:23:3e:7c:57:08:77:ae:e5:59:96:
                    f3:95:10:6c:05:90:43:f4:80:ef:33:05:eb:cc:61:
                    21:f2:e0:93:97:96:9c:f5:0f:75:a0:3d:f8:6b:24:
                    48:68:b3:7d:6a:c0:0f:02:2c:48:82:1e:5d:b1:1a:
                    98:6a:eb:6b:0c:9d:aa:17:55:7d:46:a5:0b:d4:9f:
                    5b:72:4d:cb:8b:fd:98:c9:cd:29:7c:b4:b1:31:ee:
                    58:c1:71:5a:35:7a:4f:c9:e1:8d:c2:e0:e8:ab:b5:
                    71:8d:6a:12:8b:bb:7f:cc:38:be:8b:a2:da:c7:7b:
                    bf:99:23:df:57:c4:8e:57:f8:a0:94:47:64:e3:9c:
                    43:ea:7d:67:99:38:6d:7a:04:28:9a:e0:6f:11:ed:
                    0f:60:06:65:c0:11:76:f1:c7:f9:6c:e9:cc:7d:0e:
                    bf:23:1c:cf:01:45:75:ff:85:d9:84:7e:7a:e2:de:
                    74:01:bd:94:3f:eb:37:d5:ca:72:61:7c:b0:22:a8:
                    49:70:b7:8d:b7:be:07:0c:e8:7c:13:ad:08:63:48:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AB:60:B6:3E:74:B1:CE:5D:E5:D1:EC:F5:F7:98:7C:DD:EC:B1:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:3f:97:54:26:b2:30:0e:aa:7b:75:4c:75:1e:6e:ed:01:
         55:2c:28:52:ea:00:ee:2d:04:dd:0e:5b:27:3d:c3:22:32:aa:
         23:e2:bb:e3:ab:5b:0b:d0:2e:78:de:a4:6b:cf:d0:a7:a9:82:
         48:be:3a:b5:82:e2:d0:15:7e:f0:90:a7:cd:bd:b0:76:25:44:
         b8:2e:74:a5:d8:4a:89:2d:ff:1b:d0:4a:97:58:f4:57:a5:58:
         4e:09:e2:7c:9b:2b:4d:88:39:4d:d8:01:78:aa:c2:15:21:11:
         b2:16:9b:15:c0:b2:8b:68:e5:3d:33:72:8c:42:70:94:f9:74:
         3a:07:5e:3f:14:72:75:40:5a:ee:0d:ae:a9:45:cf:df:46:6b:
         0e:05:bb:7b:c9:54:da:b4:cf:f0:61:e5:b3:6a:b5:6f:8e:bf:
         b1:b1:57:a2:2f:d0:24:e3:75:1d:a0:de:f9:a6:42:0b:2a:d6:
         bb:42:8b:1e:17:7b:d2:d0:18:52:6c:e0:dd:44:35:90:71:1e:
         48:b3:b6:fc:be:6f:ea:63:2c:be:94:86:cf:df:10:fe:4f:92:
         0a:06:b5:26:54:ac:f9:80:bc:0d:ad:93:7f:5a:fe:2e:8c:90:
         da:e3:12:f3:af:06:35:4f:14:86:6d:c7:60:fa:4d:55:e1:07:
         e6:1a:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:49:33 2026 by rpki-client