Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/196412be-152e-34bd-853a-54d1db130fe7.roa
File:                     196412be-152e-34bd-853a-54d1db130fe7.roa (raw, json)
Hash identifier:          TNOM6lytsy/MzPe86JXVMEgRkIOVT8bicJ/sHnnIKhM=
Subject key identifier:   E2:66:91:21:ED:4C:36:4A:0F:C0:66:48:8A:F6:F5:33:1D:28:22:51
Certificate issuer:       /CN=0f35d963-b9d2-495c-92b1-408f555bc61c
Certificate serial:       010D0C9F4328584F7C9ADAE988E9891762C792E0
Authority key identifier: 5D:AE:6A:70:3E:F2:9E:DC:28:3D:46:58:48:69:4C:E1:70:A3:E2:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/196412be-152e-34bd-853a-54d1db130fe7.roa
Signing time:             Tue 13 Oct 2026 08:47:42 +0000
ROA not before:           Tue 13 Oct 2026 08:47:42 +0000
ROA not after:            Mon 11 Jan 2027 09:47:42 +0000
asID:                     400342
IP address blocks:        156.9.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7c:9a:da:e9:88:e9:89:17:62:c7:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f35d963-b9d2-495c-92b1-408f555bc61c
        Validity
            Not Before: Oct 13 08:47:42 2026 GMT
            Not After : Jan 11 09:47:42 2027 GMT
        Subject: CN=602af31c-2ac5-4516-96e6-2259486f2c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:d2:d3:88:60:c8:34:3d:b5:eb:4f:bd:52:
                    1d:5f:44:86:49:26:44:74:e8:a6:a6:cb:44:a7:16:
                    a1:0d:4c:a9:96:40:d0:03:36:6d:15:81:35:c4:15:
                    b7:76:8c:42:f2:4a:a0:f2:8a:7c:bb:fb:10:e9:f8:
                    77:84:74:2c:0d:ec:93:49:4d:74:b7:62:4c:cd:81:
                    db:9c:9e:ff:da:7f:74:90:39:8a:0b:19:17:17:35:
                    24:0d:6f:15:fa:f4:83:73:be:d7:45:bb:2c:97:6f:
                    d8:4a:95:2b:64:96:e6:fe:86:e9:aa:99:c3:3f:c3:
                    b4:c2:3b:2d:32:09:22:4c:08:88:1c:ef:ed:ad:14:
                    8c:40:e8:01:21:0c:b1:54:8e:52:e0:c1:ba:fb:b1:
                    0e:ce:f5:41:7d:89:62:24:68:e1:ad:58:4e:ab:c7:
                    62:f1:8c:6a:99:5d:9a:eb:bd:40:c8:c9:7d:f4:77:
                    d2:c3:46:b8:06:1b:10:53:3c:8a:4a:d8:04:56:7d:
                    4d:d6:42:e8:5a:ce:cf:99:64:76:64:58:85:29:c5:
                    2f:c4:b3:f5:67:9c:74:7c:2f:eb:59:92:a8:b1:74:
                    12:9c:e7:ec:1d:ac:1a:67:66:eb:90:06:24:91:f1:
                    2f:75:02:5a:57:44:6f:af:b8:c4:dd:af:e7:d2:98:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:66:91:21:ED:4C:36:4A:0F:C0:66:48:8A:F6:F5:33:1D:28:22:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/196412be-152e-34bd-853a-54d1db130fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.crl

            X509v3 Authority Key Identifier:
                keyid:5D:AE:6A:70:3E:F2:9E:DC:28:3D:46:58:48:69:4C:E1:70:A3:E2:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:cc:82:16:d0:c0:55:13:43:19:ba:06:e8:40:f7:92:36:
         f6:71:2a:1b:81:95:ac:d1:9e:73:a9:05:fd:cf:3e:1b:78:0d:
         f8:83:80:30:9b:82:0c:1e:48:25:7b:fd:ce:64:7d:35:3f:25:
         5d:38:e5:f2:dc:b7:fb:53:9f:e9:db:48:a2:c3:15:71:0c:c6:
         ce:ec:15:ba:0f:a9:d0:36:77:5c:46:06:69:97:87:db:6f:29:
         50:6e:f6:f2:6f:d9:ff:12:db:05:7e:f7:1e:7f:65:5a:3f:34:
         49:0b:7b:d8:bc:ee:4a:92:5a:a1:fb:d5:b5:b5:13:a1:58:88:
         07:17:ba:e9:3b:00:c1:8c:ef:fb:ea:24:45:a6:66:d9:34:aa:
         0f:9f:97:ca:10:84:73:fd:9e:56:95:32:97:0b:52:bc:9d:a7:
         c5:9e:35:31:e2:3e:10:2f:32:9d:00:4e:78:8a:6a:27:a8:a6:
         fd:d6:3e:f1:b6:39:53:f5:37:87:7b:74:32:24:07:29:8d:c0:
         58:7b:6b:49:9e:82:81:37:c2:a4:a4:4b:42:c7:0b:45:6e:36:
         e5:3a:ed:26:06:2e:22:97:c9:7d:40:60:10:0c:76:87:5d:da:
         1c:8a:63:51:65:e2:79:c2:b3:67:f6:62:61:79:ac:c2:a5:20:
         cb:c8:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:43:23 2026 by rpki-client