Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/44ece29f-f346-3435-b423-55018e4de945.roa
File:                     44ece29f-f346-3435-b423-55018e4de945.roa (raw, json)
Hash identifier:          /CRydrn493HpONMYKksK19S9APNKKrZ7yCXmjy5kV18=
Subject key identifier:   D8:10:F1:22:6D:7C:CB:B0:2D:E0:DE:D0:21:B5:83:EE:2C:1C:91:99
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F4328584F31B7BBD50A1257C35CF87900
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/44ece29f-f346-3435-b423-55018e4de945.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     16796
IP address blocks:        192.139.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:bb:d5:0a:12:57:c3:5c:f8:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=a9c26e5a-1b49-42c4-a8b0-510edc0e1884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:83:bb:e3:c7:3b:b4:61:87:9b:8f:bf:99:72:
                    34:de:9e:ed:a4:ba:cf:8c:18:43:97:b4:fa:a6:f8:
                    9c:aa:22:f7:9b:df:15:00:a9:67:7f:19:ed:4e:c0:
                    0f:07:ac:66:89:6c:fc:90:7b:7f:df:5d:68:ee:04:
                    d1:50:13:f9:ed:a6:8b:6d:97:1e:63:81:47:ea:66:
                    91:51:9b:70:b2:fc:fa:c5:6a:80:d6:6e:12:b7:f1:
                    ff:fe:07:43:88:9a:25:fb:66:46:2e:41:cb:98:c0:
                    1f:8e:48:47:c1:42:b3:b7:05:46:85:a1:8e:19:4a:
                    3d:1f:68:19:82:9f:0f:8b:84:93:c1:c8:8a:f8:22:
                    1b:0f:bc:48:76:c4:88:85:fd:e1:d8:56:55:d4:bb:
                    47:0d:6f:52:b8:70:7b:d5:0d:ac:ba:fc:40:d4:7f:
                    7c:82:24:dd:e8:a5:fb:d5:0a:bf:fa:05:a1:31:3b:
                    d4:33:24:6e:df:4b:7e:df:d3:ed:a2:6e:80:49:32:
                    7c:56:dc:59:91:f4:15:44:19:c6:61:ca:f8:52:e7:
                    93:1b:d8:35:45:27:be:19:37:cb:a1:09:d4:47:54:
                    17:a2:50:5b:5c:d2:1c:0f:56:36:c1:70:4d:bc:3f:
                    85:3d:49:16:c1:cd:30:bf:1a:a9:89:89:30:45:ef:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:F1:22:6D:7C:CB:B0:2D:E0:DE:D0:21:B5:83:EE:2C:1C:91:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/44ece29f-f346-3435-b423-55018e4de945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f8:aa:21:c2:d4:5a:5f:dd:7f:6f:ea:03:11:ed:5d:d3:e8:
         3d:de:00:6e:6b:32:da:86:8f:b7:e2:4e:6b:3a:94:78:72:4e:
         0e:72:96:ac:7a:2a:da:47:f3:d2:26:ee:c8:56:8d:b8:37:d7:
         25:7b:bb:d6:bd:c8:e6:97:1e:a8:87:a8:bf:ac:e7:94:4b:4b:
         58:a8:64:fa:45:c7:75:a1:4f:78:8d:77:0d:26:3b:93:9a:b1:
         70:e5:ac:24:e9:7a:4f:ef:49:15:8c:58:51:68:e8:e1:89:51:
         28:e7:94:79:50:b4:04:67:71:7d:2a:68:c3:ed:49:af:3e:e2:
         56:22:df:b6:82:a8:2e:2f:45:2f:5e:38:b4:5b:e8:99:e1:60:
         c3:f5:70:24:2b:e0:e2:60:da:a2:f5:92:b1:4d:d7:de:56:1c:
         19:61:c5:c3:13:a7:55:78:e3:ab:96:3d:98:18:6d:53:72:ce:
         ba:ff:89:3b:f4:c2:ab:e6:41:94:3d:97:8a:48:97:a1:66:f1:
         5e:3d:22:fb:a9:7c:96:56:e7:a3:d4:9b:26:20:ed:99:04:56:
         fd:60:e6:80:ea:e0:ae:46:57:48:65:eb:ee:bd:59:79:e7:81:
         de:68:ab:76:ff:b8:28:33:ce:49:c7:1a:99:5c:bc:f5:bd:84:
         3d:d2:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:30:30 2026 by rpki-client