Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/c614c89e-1462-391b-834b-c797fc2bad0c.roa
File:                     c614c89e-1462-391b-834b-c797fc2bad0c.roa (raw, json)
Hash identifier:          HDm32PsOPmn4yTspd4jqzF/edGKXTCQGGz4CZ28kNVg=
Subject key identifier:   3E:A0:C4:62:58:7C:95:03:1D:8B:B1:C0:3A:EE:51:76:95:FB:86:56
Certificate issuer:       /CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
Certificate serial:       010D0C9F4328584F71ED91FAC21CFEF0924C0040
Authority key identifier: 39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/c614c89e-1462-391b-834b-c797fc2bad0c.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     32521
IP address blocks:        192.131.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:91:fa:c2:1c:fe:f0:92:4c:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=e35c665b-0016-465e-99ef-7f1c7a3d07d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:5b:ec:53:8d:4c:fe:d1:83:ea:2e:3c:b6:
                    ae:ea:10:fc:2e:0e:9c:9c:04:67:3e:41:ff:7d:5c:
                    c2:8e:6d:63:4f:08:9c:c3:17:a5:6a:68:6c:4d:45:
                    66:bc:5b:1e:2c:bc:ac:60:9d:49:6c:e8:b5:cc:6f:
                    da:a8:51:cb:37:98:cd:7a:ad:b1:72:ad:7a:5f:0a:
                    b8:6f:f7:8d:cb:86:fe:92:0a:9b:50:c8:47:12:52:
                    e3:0c:e0:f9:ad:50:62:10:88:4a:a9:13:9c:c8:fa:
                    c4:ed:e9:d8:71:97:8b:14:7b:69:1a:ef:eb:02:07:
                    05:a0:ef:8d:07:76:2d:0f:25:d1:a8:ba:f2:72:94:
                    54:11:37:9e:14:5b:e4:e8:f8:cc:fc:ed:03:6f:ab:
                    74:16:75:51:ba:d1:8d:59:df:3c:39:92:94:64:dd:
                    14:b4:4d:10:26:48:6e:20:10:87:40:af:f2:a9:e5:
                    e9:aa:63:07:76:ac:4f:48:34:bb:f9:7a:5f:5e:cf:
                    0f:ad:c7:86:af:b8:84:82:b7:d6:0f:f0:f9:ae:4e:
                    a5:1c:a9:46:ee:ef:ab:48:e4:b1:e9:22:a0:fc:fa:
                    1c:01:62:33:00:92:8d:53:75:aa:e0:85:67:c0:71:
                    61:a8:43:0d:9b:2a:83:29:af:41:5f:87:dc:5c:41:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A0:C4:62:58:7C:95:03:1D:8B:B1:C0:3A:EE:51:76:95:FB:86:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/c614c89e-1462-391b-834b-c797fc2bad0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl

            X509v3 Authority Key Identifier:
                keyid:39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ef:69:01:19:c0:76:84:34:9a:a4:ef:82:ab:a5:47:67:5d:
         e1:32:41:bb:2b:4d:5b:01:7c:d7:3e:fd:fc:6f:fd:f9:42:57:
         a1:36:71:49:71:66:ec:cd:f1:72:de:ec:dc:00:fc:1f:32:cf:
         a2:1e:93:01:29:07:40:37:66:41:85:30:dd:0d:ba:b8:23:bd:
         ef:f9:02:af:6e:26:7c:23:74:10:bc:1e:f4:fa:ab:26:b5:33:
         0d:fd:d0:f2:c4:23:f8:d3:b9:0d:fe:fb:d6:38:cd:4c:1e:6b:
         4a:82:8f:7a:14:de:bb:76:f9:9a:76:a2:78:01:47:84:83:f3:
         98:f3:9e:48:38:8d:d1:74:f2:af:36:47:5c:0b:ed:60:34:e3:
         40:09:2c:c3:09:a9:31:b1:d9:51:2f:f7:aa:79:0c:12:7d:3b:
         a0:37:67:38:4e:d8:37:02:66:5c:64:0c:2f:53:da:53:42:f4:
         14:4e:a1:8f:a1:2b:05:ad:2d:72:c5:85:ac:97:42:66:5d:c5:
         05:29:c4:fe:f2:70:a5:75:e6:de:f5:04:85:b9:b3:d5:44:87:
         1d:33:16:04:c1:bb:ea:25:33:4c:7c:b2:d5:98:e0:f6:3c:a3:
         ba:86:02:1b:ee:c0:3f:2d:6f:9b:00:20:2c:32:2e:f9:16:57:
         18:0c:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:02:57 2026 by rpki-client