Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/e304ebd2-2a9d-3dcb-b2d3-e2ae2c9fb6cd.roa
File:                     e304ebd2-2a9d-3dcb-b2d3-e2ae2c9fb6cd.roa (raw, json)
Hash identifier:          /m1Vgo1L3lmVQq9kCbP3kq9Jnlx5kpmYN0uJJmnvloc=
Subject key identifier:   07:C9:EC:DD:0C:F1:24:ED:F0:B5:21:6A:00:DE:00:48:25:B3:E0:DA
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584F5E62EF09B69C13FE3C5011C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/e304ebd2-2a9d-3dcb-b2d3-e2ae2c9fb6cd.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     198949
IP address blocks:        192.232.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:ef:09:b6:9c:13:fe:3c:50:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=87fa3332-fd4f-44e6-b700-85ae546fd03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:6d:7c:2b:88:41:d3:9d:0d:eb:0f:3d:b9:
                    21:a2:34:1f:5d:ba:bc:1a:8a:e9:7a:e5:c4:93:40:
                    7a:1e:d3:a4:60:90:d5:9b:b8:fe:dc:2e:11:4b:67:
                    fd:1b:25:ce:8f:28:cd:04:69:74:29:e7:9d:2b:39:
                    32:66:85:5d:fd:db:be:f1:db:bb:13:e5:db:81:19:
                    d1:da:0f:b6:cb:3b:ab:d8:05:9e:98:d1:11:da:db:
                    d7:38:1d:6a:cc:d8:57:90:2c:8e:e4:a0:75:e3:09:
                    16:3d:3e:71:f9:e3:3b:d5:90:38:1e:01:f4:ed:d0:
                    98:e2:71:4b:53:ed:14:28:34:48:91:19:70:59:46:
                    b3:78:d8:08:bf:4a:6f:61:f3:21:10:21:12:4f:55:
                    34:b7:3d:bf:61:be:e7:bf:af:a5:65:86:09:c0:7c:
                    03:f2:ef:af:b7:3f:89:a8:76:52:a9:85:bb:b1:ff:
                    d2:da:26:8a:3a:26:18:2e:4d:f9:8d:a0:ba:8c:64:
                    d5:be:8c:31:b5:29:bf:5f:8b:06:92:4e:09:12:0e:
                    e2:8e:b3:4d:06:25:53:e3:13:6e:40:5b:50:6e:24:
                    30:79:64:50:e3:1b:af:16:ca:0a:5e:d6:a7:65:f3:
                    4e:9b:a4:21:f2:fb:32:fa:cb:6c:48:ff:92:3f:d0:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C9:EC:DD:0C:F1:24:ED:F0:B5:21:6A:00:DE:00:48:25:B3:E0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/e304ebd2-2a9d-3dcb-b2d3-e2ae2c9fb6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f3:c4:b2:c8:36:79:d2:b3:7b:07:54:31:2b:dd:2c:52:58:
         53:af:94:66:24:ec:31:7b:07:80:4d:3b:59:13:8f:f4:2f:6d:
         9a:91:94:e2:d6:53:88:2a:d3:83:cc:af:d8:ec:ab:4f:d0:16:
         cf:4b:af:cc:26:7d:1e:81:a4:9b:43:d6:a2:e9:0d:ae:9b:03:
         fc:8b:41:75:11:df:51:57:4b:a6:fa:89:ea:87:a3:62:a0:75:
         6d:7a:1b:c0:b1:25:d2:3d:6c:bc:82:c9:85:c3:ea:10:6a:87:
         c3:74:bf:d6:47:38:0a:ef:d5:56:1d:13:ce:86:e4:9d:d3:0a:
         55:87:84:0a:69:2a:fc:a6:38:30:fe:fa:ab:42:fb:99:d0:81:
         1d:7a:9f:08:7a:a8:05:8a:e5:b5:5c:59:29:24:6c:3c:d2:a0:
         2c:1d:89:4a:8f:b5:a1:8f:34:7b:6c:ee:9b:2b:b2:9f:a2:11:
         26:75:6e:fc:c5:87:ee:b6:6b:96:e7:87:e1:9a:54:8f:58:06:
         7f:45:39:f4:fe:c5:71:80:ce:01:8b:79:74:8b:ec:94:57:ab:
         fb:21:8c:be:ec:51:fc:1d:05:a2:ef:71:5c:b7:05:e4:dd:47:
         e8:d1:97:a6:b2:66:83:20:30:79:91:1a:65:bd:b8:9b:d7:f6:
         3a:f3:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:31 2026 by rpki-client