Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa
File:                     e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa (raw, json)
Hash identifier:          viiIY3Wuh24FEhySMceoBIW+jqfMfi1kmnYz7x56aHg=
Subject key identifier:   6B:02:3E:06:5E:6C:90:A9:1A:BD:15:E7:80:69:81:56:6E:41:29:75
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328584F49875E59A035CE7C7FF64F80
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32709
IP address blocks:        168.92.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:5e:59:a0:35:ce:7c:7f:f6:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=37a03d6c-a5ed-4818-93e5-de8d709c9d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:18:6e:ab:26:10:d1:36:de:53:ec:26:2c:
                    2b:f3:c5:b1:e9:cf:32:f0:b3:a1:b3:b1:94:10:bb:
                    76:2e:af:93:2f:1c:3c:99:c6:d6:9b:b2:ac:9d:7b:
                    a4:bf:69:2c:c4:89:0b:5a:84:82:7e:01:be:41:7c:
                    97:b7:ec:77:e6:fc:f7:0a:d1:e2:d3:b0:68:0c:f1:
                    93:4f:33:1b:88:3e:3f:03:6b:68:27:1f:e2:ec:8e:
                    12:da:29:34:2c:ab:92:6e:1f:0b:b0:52:f7:63:27:
                    51:3b:c4:df:9e:b7:f9:13:ac:13:a3:3a:dc:5e:c4:
                    10:70:7b:a1:1a:10:51:56:a7:0c:ca:7d:f3:70:e0:
                    69:10:3b:99:c2:7b:3b:6e:16:e7:a5:62:6e:68:42:
                    dc:8f:64:da:c1:78:3f:70:39:5a:ec:14:09:4b:81:
                    76:a5:67:3c:28:e4:4c:5d:ba:87:0f:0d:32:a6:e6:
                    ea:a5:40:88:2a:b6:ef:c7:b4:58:8e:7e:2e:0a:6f:
                    62:6a:17:c3:93:cc:86:cd:9c:a1:fd:d2:b7:dd:a7:
                    c9:f0:62:8a:db:d3:db:c7:2a:62:53:95:63:c4:b5:
                    4f:09:e0:4d:34:17:5d:09:7b:fa:be:84:b7:20:b0:
                    60:34:72:ac:79:6c:5c:4a:1c:48:6d:2e:e7:7f:a9:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:02:3E:06:5E:6C:90:A9:1A:BD:15:E7:80:69:81:56:6E:41:29:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.92.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:39:9c:6c:81:47:62:14:c7:da:4c:1f:88:13:47:95:b6:
         1f:48:08:bc:ca:d2:49:d8:57:35:3b:fb:dc:d0:75:1e:4f:e5:
         38:28:4f:59:44:8c:40:e5:b1:d6:35:03:3a:37:ac:3e:97:2e:
         a1:9a:9a:a8:30:8b:af:55:4f:54:0e:c4:ba:51:c3:9a:1d:d1:
         7b:cc:fb:1b:0f:3a:f0:e2:9e:96:c3:ca:27:a7:e2:4d:d1:a3:
         35:54:4c:eb:77:b5:de:da:e7:42:25:0d:a9:97:43:b9:ee:bb:
         18:b1:2f:ae:f7:d6:1a:1d:ba:77:b3:fc:61:6c:2c:4d:ef:42:
         7d:56:98:2a:b8:43:1b:65:f9:99:b8:ca:ef:5b:f0:35:70:16:
         23:5f:27:4a:bb:07:49:59:88:9b:d3:91:af:46:82:d2:dc:01:
         94:68:86:3f:06:d9:2b:2c:9e:d4:eb:00:68:ac:77:8b:22:41:
         e3:9f:2c:88:a3:61:dc:da:18:56:d3:8b:91:8c:28:98:1e:8a:
         f8:2c:ef:28:b8:a8:e7:a8:bc:be:5c:5e:e4:ba:d9:b4:51:30:
         01:ad:c0:a0:3d:01:cb:9d:cd:a2:96:a8:43:a6:2e:0a:a2:bf:
         8a:26:cc:5d:3b:fd:35:c6:c6:52:cf:95:74:2a:db:fc:ab:ec:
         63:cc:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:55:14 2026 by rpki-client