Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c7793897-665b-3654-a5da-6359020ea601.roa
File:                     c7793897-665b-3654-a5da-6359020ea601.roa (raw, json)
Hash identifier:          5ZkZoVVJLDiu4cq3we28AWFRzG0CAf0z2Fv+dP2pTqQ=
Subject key identifier:   AA:D0:1E:54:BC:C3:56:B6:30:FA:AF:DD:29:CB:35:21:81:53:77:E9
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584F14679A665BCC57598DF0EC80
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c7793897-665b-3654-a5da-6359020ea601.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     15830
IP address blocks:        192.127.132.0/24 maxlen: 24
                          192.127.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:9a:66:5b:cc:57:59:8d:f0:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=1975b5ff-7090-45a9-8dd5-07192f8c57e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:cb:36:03:75:fd:1e:16:25:25:fd:3d:d9:
                    b1:47:8d:72:c4:87:7c:4e:74:c0:47:1c:e4:65:40:
                    65:56:4e:81:7f:d4:f2:b6:66:e5:51:ca:57:83:78:
                    aa:a7:95:17:9c:e2:b7:4e:c9:c0:7f:a1:58:4f:07:
                    46:8e:01:e9:f7:05:3e:e6:60:12:4e:bc:c6:ea:24:
                    77:03:27:38:0f:0d:23:ba:16:9c:da:17:2f:59:40:
                    84:88:52:25:3c:cb:4e:e5:fe:38:5f:8e:5c:9d:d6:
                    07:fd:e0:77:8d:6a:e6:24:d4:74:8f:04:d2:2b:0d:
                    9b:77:40:d2:04:02:c7:eb:95:33:b0:e1:d5:05:1d:
                    8c:98:bc:88:38:e7:4f:05:b2:90:f8:22:5a:12:c0:
                    44:aa:f0:17:46:7c:f3:5a:d6:c1:ba:c5:7d:2d:d8:
                    98:0a:05:d3:ae:9d:9a:77:ce:ad:16:9f:de:29:1c:
                    d2:d9:59:ad:4a:3d:2e:8b:6f:62:b2:9d:70:77:ca:
                    4b:a1:c4:a0:d4:52:0c:53:1d:9d:38:a9:7e:a8:e4:
                    fb:d7:10:e8:94:d6:4f:b4:03:34:20:36:db:2d:98:
                    ba:e5:42:86:0a:43:dd:7c:26:ba:ae:c9:4b:ce:24:
                    59:c2:95:8b:8e:30:d3:33:29:be:ca:67:5f:56:62:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:1E:54:BC:C3:56:B6:30:FA:AF:DD:29:CB:35:21:81:53:77:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c7793897-665b-3654-a5da-6359020ea601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.127.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f9:3d:01:c4:6d:c3:5a:85:5a:df:28:d3:2c:c0:35:c5:ab:
         fc:ec:13:b4:f8:25:5e:48:e7:d6:6c:ae:84:08:d2:15:d7:58:
         7d:5a:46:bb:72:96:6c:d2:12:b1:f5:5e:b1:f8:96:a5:a4:5c:
         02:04:21:00:6c:a7:6e:8b:04:4f:18:e5:e1:19:c8:57:2d:1e:
         69:5b:7b:5e:c9:d2:12:2c:5c:6a:c3:2f:e4:b3:27:97:1d:1d:
         8e:a6:48:bf:99:f0:8c:e3:88:cb:c5:9f:4a:8d:88:7f:0b:b0:
         1b:b5:b7:01:4a:98:01:a5:99:b7:9d:e7:95:fa:9c:4d:e6:82:
         57:01:ca:57:51:87:b5:85:c2:15:60:3d:c6:4a:29:42:64:16:
         4b:d2:53:ae:77:77:6d:39:bb:04:ec:3d:44:e1:ce:65:6b:86:
         fe:50:29:62:43:c4:86:d3:d3:21:64:82:c8:8c:db:14:93:22:
         bf:86:95:50:90:9e:6a:fa:82:36:41:42:f6:02:13:c9:c7:fd:
         87:5b:5d:ad:53:72:75:f6:47:9b:63:6a:02:13:86:41:84:37:
         33:66:f9:f4:00:68:40:44:60:b3:5f:3c:89:a7:58:af:ae:a3:
         0f:ed:1a:4e:30:4b:cf:31:0c:38:47:e6:ea:c7:93:cc:a2:37:
         82:ba:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:06:52 2026 by rpki-client