Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/0f3992cf-5a89-327d-a390-90748ec5ecbd.roa
File:                     0f3992cf-5a89-327d-a390-90748ec5ecbd.roa (raw, json)
Hash identifier:          MsR/PX77Vx66wkFmY+7nH4KxLV+hLQ1HuAcUgrxnQ5I=
Subject key identifier:   F5:5F:8F:55:9C:3C:07:A4:F7:C7:33:49:E5:08:44:5D:D3:06:A3:19
Certificate issuer:       /CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1
Certificate serial:       010D0C9F4328584F4974DFDE2BFE3F2FA52249C0
Authority key identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/0f3992cf-5a89-327d-a390-90748ec5ecbd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        192.132.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:df:de:2b:fe:3f:2f:a5:22:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=89021b72-f97e-4ecf-aed8-fec08e3b84c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:19:8f:4d:1a:93:b1:36:1b:c2:0a:d9:7a:
                    a6:59:11:07:e0:83:6c:ae:bf:e8:68:0b:1a:a1:b9:
                    1d:80:66:ca:91:ee:2b:c4:9f:55:36:14:5b:d4:ac:
                    f0:11:31:bf:ba:f0:b4:93:2d:ad:db:e1:bf:82:84:
                    fd:b9:b0:22:5b:3c:3e:1c:b9:12:9d:26:bf:ba:51:
                    61:f6:b9:47:e3:6e:54:b5:47:f5:2c:b1:3e:0d:10:
                    50:b3:a1:ed:a4:13:d6:77:61:41:bf:fb:02:de:51:
                    3f:b8:8b:32:c1:e3:86:8c:f7:63:fe:31:11:6f:e7:
                    53:41:e5:9b:ca:18:68:1e:25:e1:49:96:28:b9:2f:
                    bc:71:9b:ce:1f:c8:87:d8:1e:52:fd:5d:05:5b:d3:
                    13:1f:22:ef:8b:7e:c3:72:d0:5f:b5:18:d2:35:84:
                    91:74:6a:29:c3:b7:1e:a3:14:6e:60:13:10:0b:57:
                    e4:ef:5e:47:85:4f:2f:e1:7c:fa:01:2e:7e:fb:a9:
                    81:bd:76:6a:63:dc:09:62:f9:84:91:e3:94:68:47:
                    44:93:9f:28:e0:69:df:f9:7e:4e:d0:eb:ad:25:00:
                    4f:08:d2:20:f7:c8:65:17:ad:7f:2b:27:59:40:48:
                    05:83:ef:b4:38:6c:29:1b:30:bd:19:65:84:26:14:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5F:8F:55:9C:3C:07:A4:F7:C7:33:49:E5:08:44:5D:D3:06:A3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/0f3992cf-5a89-327d-a390-90748ec5ecbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl

            X509v3 Authority Key Identifier:
                keyid:E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:cc:81:5c:c6:76:1d:d8:6e:17:13:5a:6b:92:fe:10:90:
         7c:61:ef:9c:78:ad:30:f2:52:1b:08:85:6a:f2:a7:4b:ef:c2:
         e3:02:1d:cf:7a:a1:f7:2e:ee:d7:3a:0c:ce:09:7f:6f:6a:ea:
         ec:3c:c0:28:6d:85:8d:2e:e3:c6:50:95:9d:c2:7a:2b:ec:c8:
         6e:cc:35:18:3f:6b:04:44:37:4c:e0:19:0c:47:bd:ad:27:e2:
         34:a3:af:8b:68:bc:a0:51:9d:68:ed:f7:74:c0:fb:32:21:e1:
         c3:a2:37:f2:80:8e:bb:ef:ba:69:af:ba:b4:0f:c1:b6:2d:d6:
         97:73:d5:18:e0:88:3a:eb:eb:15:07:0f:dd:a1:72:2d:07:d8:
         ac:04:bd:52:47:28:d6:5a:30:1c:7e:d7:12:36:5a:5e:de:d0:
         89:ac:bf:23:e3:a0:9e:50:93:ca:25:ad:35:5b:f9:f9:2f:c8:
         e1:fa:61:f8:b8:30:ab:16:16:66:af:79:53:df:73:07:80:4b:
         9d:57:b7:95:02:d0:16:4e:f0:d2:51:19:46:79:6c:d9:3e:0f:
         b0:a9:0e:8c:7c:83:9b:39:08:56:60:43:3f:2c:af:23:12:d5:
         84:a3:59:25:d5:8c:46:62:14:91:77:03:59:97:61:7e:10:0f:
         2d:5b:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:22 2026 by rpki-client