Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7/6c114e70-b48d-3b3f-80bd-46ceb07a2360.roa
File:                     6c114e70-b48d-3b3f-80bd-46ceb07a2360.roa (raw, json)
Hash identifier:          uHx3XR9bfwdeX7URrpVvvZ5rVZFx2dGt18BCh5ER5Pw=
Subject key identifier:   D8:48:D9:3B:F5:DF:B2:44:BB:C2:F5:0A:B8:8F:79:9B:4A:93:59:E0
Certificate issuer:       /CN=b996c1df-c158-409d-aa74-cf0b396f25e7
Certificate serial:       010D0C9F4328584F3596CBC13697E580AC347540
Authority key identifier: 15:15:BF:93:F4:0E:72:A3:11:C3:82:7A:FE:8F:CD:66:97:71:E5:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7/6c114e70-b48d-3b3f-80bd-46ceb07a2360.roa
Signing time:             Thu 17 Sep 2026 22:17:08 +0000
ROA not before:           Thu 17 Sep 2026 22:17:08 +0000
ROA not after:            Wed 16 Dec 2026 23:17:08 +0000
asID:                     393553
IP address blocks:        192.55.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7/b996c1df-c158-409d-aa74-cf0b396f25e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7/b996c1df-c158-409d-aa74-cf0b396f25e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:96:cb:c1:36:97:e5:80:ac:34:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b996c1df-c158-409d-aa74-cf0b396f25e7
        Validity
            Not Before: Sep 17 22:17:08 2026 GMT
            Not After : Dec 16 23:17:08 2026 GMT
        Subject: CN=b77ef929-fab8-405c-91d1-8950c1bbfab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:3a:e7:42:40:66:02:4d:6d:6b:0a:b2:dd:
                    54:77:9f:33:b7:18:63:e0:26:bc:fc:45:00:d6:9f:
                    be:c5:26:6f:bb:49:19:f1:94:e2:cb:7c:19:db:bd:
                    72:d3:7e:20:de:d0:6b:3b:27:47:a1:7b:a5:15:5c:
                    1f:45:d6:7c:a8:e0:6a:ca:9f:85:5b:7c:61:c4:58:
                    b6:a7:b8:40:1f:43:a4:5d:65:8f:26:1a:f8:34:5c:
                    81:fd:1e:ce:72:50:23:78:80:b3:aa:7d:b1:75:32:
                    c7:fa:3a:4a:39:0a:f4:00:35:2c:85:f2:38:c0:f6:
                    8e:24:ad:3c:2d:0b:9f:9c:07:2f:ea:78:f9:ff:1b:
                    38:81:32:d4:93:a9:13:db:7b:d8:4b:da:47:6c:f1:
                    7f:46:db:ab:19:30:9a:74:d6:22:e9:cf:0e:a4:95:
                    d1:68:19:97:68:46:f2:8e:4f:b5:09:44:23:c3:f6:
                    cc:9d:d6:e0:47:36:1d:e3:2f:a0:a3:b1:b1:c2:03:
                    76:1e:6c:c7:c4:58:04:c6:eb:4e:c9:fe:c9:27:69:
                    05:35:e8:f7:04:49:f3:2e:20:7a:88:02:a9:ee:11:
                    d3:d7:02:f0:e9:26:60:e6:df:9f:03:63:82:55:0d:
                    4b:00:a1:8e:55:1b:b9:38:51:5d:94:29:53:60:c3:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:48:D9:3B:F5:DF:B2:44:BB:C2:F5:0A:B8:8F:79:9B:4A:93:59:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7/6c114e70-b48d-3b3f-80bd-46ceb07a2360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7/b996c1df-c158-409d-aa74-cf0b396f25e7.crl

            X509v3 Authority Key Identifier:
                keyid:15:15:BF:93:F4:0E:72:A3:11:C3:82:7A:FE:8F:CD:66:97:71:E5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b996c1df-c158-409d-aa74-cf0b396f25e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:5c:9a:65:73:84:c3:fd:40:cc:42:30:91:af:fa:63:4c:20:
         dc:90:6d:db:3a:fc:91:bb:c8:cf:9f:2a:5b:bb:17:03:c0:64:
         f8:80:11:91:ad:1a:92:22:a2:d6:b3:6b:29:60:6d:38:78:29:
         7a:8e:a9:b7:24:39:2f:36:ea:46:93:97:22:c5:23:89:87:06:
         95:0e:dd:9f:f3:cc:18:3a:a8:a8:37:81:20:a8:3a:2e:b1:1d:
         0b:6e:ff:42:6f:68:4f:92:97:a7:81:03:da:d3:68:e0:dc:40:
         5c:91:e8:dd:0f:e7:e9:28:40:e9:4f:0e:b0:9a:87:37:a8:db:
         02:e7:66:38:d6:5e:f2:1d:54:63:0d:40:b3:2b:aa:74:5d:d7:
         a3:34:63:13:c3:6c:04:b3:4a:73:64:17:96:ca:9f:8d:a4:52:
         c4:a4:df:a8:2f:a5:28:89:2f:e3:f8:0f:0e:44:95:ff:88:b8:
         fa:50:30:66:ec:95:ec:2c:4a:ea:22:89:31:bb:c4:ab:52:44:
         f4:23:f6:12:aa:3e:fb:05:d5:ac:7c:a4:1b:89:32:03:bb:78:
         31:53:bb:5f:99:3c:6c:8d:fe:e8:e6:6f:8e:b9:29:a2:9d:56:
         bf:79:6d:29:ec:d2:0e:e1:6d:38:d5:b6:2c:27:ca:60:9b:82:
         e5:a6:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:06:15 2026 by rpki-client