Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/94268987-5dbb-369d-9877-0d8f1dcd748e.roa
File:                     94268987-5dbb-369d-9877-0d8f1dcd748e.roa (raw, json)
Hash identifier:          XNGY5uTYsvRoscsWfFWg0Mor4HU+MG1boQYngCeOpmE=
Subject key identifier:   94:75:99:F8:77:31:00:95:6A:2E:95:81:F1:6E:B9:90:64:63:C1:C1
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EA79810F59733809CDB6DB200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/94268987-5dbb-369d-9877-0d8f1dcd748e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        192.46.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:10:f5:97:33:80:9c:db:6d:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f04769c2-fa68-4d3a-88f0-0eac474f1f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:57:1a:01:cf:7b:0d:29:cd:3c:99:ec:8c:
                    b8:66:aa:a4:5e:a8:55:69:d7:28:c8:6f:f4:99:5d:
                    0d:b3:19:e6:88:f9:69:4b:8d:21:e4:a0:4b:84:bf:
                    a2:0c:8e:db:20:e5:e8:b9:88:20:26:a4:8a:53:00:
                    ea:da:42:f5:87:27:62:38:ce:6f:b1:80:49:75:19:
                    8c:91:be:84:70:b4:03:04:85:04:25:3a:7f:17:7d:
                    db:89:e3:69:68:ea:59:ca:75:65:37:ec:b0:67:69:
                    c5:19:0c:7f:ba:44:1f:62:fa:ef:5c:4c:b8:f9:10:
                    4c:bc:cc:ca:6a:84:3a:e5:8a:f5:48:bc:fa:c1:8b:
                    b7:e4:a0:64:53:4e:aa:e9:af:de:0d:6a:70:a8:3f:
                    c2:dc:77:91:54:80:87:b0:00:fb:64:48:fd:2d:e8:
                    bd:12:66:18:dc:3d:f4:84:59:fe:3d:0a:7e:c2:ff:
                    8d:72:21:95:a9:a3:52:2d:8d:79:74:c4:66:7d:74:
                    b8:99:19:92:06:5f:b0:53:6c:02:dc:6e:05:a8:ee:
                    0b:87:79:b4:3d:45:07:49:71:ff:af:55:70:59:79:
                    fb:55:61:b1:60:b9:3f:f5:a2:60:bd:84:86:ba:5b:
                    ea:83:ae:3b:9f:b1:50:9a:58:0f:4e:08:84:75:7c:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:75:99:F8:77:31:00:95:6A:2E:95:81:F1:6E:B9:90:64:63:C1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/94268987-5dbb-369d-9877-0d8f1dcd748e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ea:26:7f:4e:2e:12:53:e5:1c:b3:df:4f:b4:eb:d0:d9:f3:
         08:86:a7:98:59:1f:23:db:64:6c:3b:4d:21:3b:24:d4:b2:87:
         a5:e2:b2:8f:b3:72:a1:08:98:39:33:e7:28:5c:11:60:e2:9c:
         4c:c1:8b:cd:36:c7:ef:3e:5b:4f:05:5e:15:cf:35:64:71:06:
         43:9d:90:94:bd:46:21:c1:b9:97:14:bc:86:de:27:85:3e:7a:
         f5:ae:20:cd:cc:83:02:23:12:bb:8f:a7:31:af:61:5b:cf:82:
         43:8a:33:e9:08:33:c0:89:06:e2:30:3d:ad:c4:a5:53:de:ea:
         db:30:da:32:5c:3f:15:cc:b4:1f:39:16:97:17:fc:2d:d8:8c:
         74:af:ca:8d:13:cf:d5:83:7d:0c:b4:9d:33:8c:31:fe:09:6e:
         4b:22:2c:18:97:b0:36:d3:cd:33:04:09:5a:ad:1a:92:d9:db:
         06:1b:85:41:05:54:67:15:d3:3c:f4:30:52:ef:74:73:3a:0d:
         00:25:65:51:88:dc:a8:5b:7c:03:79:89:48:a7:f4:e5:c1:6b:
         89:2a:81:82:f9:df:ef:2b:1d:64:8b:df:45:70:af:db:68:fe:
         f6:d2:66:7b:d7:54:c4:76:32:a0:bf:7f:2b:58:a0:77:3a:9d:
         b0:3d:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:13 2026 by rpki-client