Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a1c9b439-9250-3c4f-856b-0e37ad939229.roa
File:                     a1c9b439-9250-3c4f-856b-0e37ad939229.roa (raw, json)
Hash identifier:          G2ghydD//ZqY4fh8tRtCGxAP7wjT1ztzv4OFDMfc2Sw=
Subject key identifier:   0E:82:6A:FE:95:AB:CE:38:93:09:BD:56:AB:F4:7A:3F:0E:80:43:F8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EA7918AEE9F69D5CC101D4C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a1c9b439-9250-3c4f-856b-0e37ad939229.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398465
IP address blocks:        192.204.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:8a:ee:9f:69:d5:cc:10:1d:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1b96a91a-4403-499c-a452-ef999fbd783f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:28:bc:cf:04:1e:8f:74:54:98:9f:4b:19:
                    01:92:f1:5e:35:19:0e:0d:d7:22:7f:2b:50:aa:0e:
                    82:2c:5f:70:b7:28:2d:a9:7b:e9:8f:b9:23:7d:e4:
                    9d:4d:2b:9b:26:c0:69:f8:6f:e5:ab:08:f5:64:78:
                    b6:16:a9:3e:ba:bd:2e:b7:62:6d:92:e4:b7:75:39:
                    68:86:18:2f:8e:c8:42:f8:3d:c7:76:99:2e:84:de:
                    69:5b:23:1d:1f:21:0e:ff:d9:0d:f5:17:90:91:06:
                    ce:2f:f2:66:eb:b6:09:57:77:2a:2a:e8:95:c5:08:
                    d3:ff:fc:18:30:4e:42:20:c5:2f:8f:14:a7:67:fa:
                    26:a5:84:84:cf:dc:76:d7:6d:c0:56:32:12:30:6d:
                    90:a5:4c:79:e3:ae:d8:25:1f:9f:d1:f3:69:2a:ac:
                    3e:83:52:3b:e4:12:ba:68:8c:76:6d:50:48:f2:42:
                    ce:95:ab:8c:b3:04:2c:cf:01:7e:ea:b6:d6:5b:25:
                    d5:73:42:c2:0f:4a:4d:ec:f9:ea:d0:53:0b:25:24:
                    b1:e2:ec:c2:3f:b5:57:d6:8e:28:b9:c1:aa:6d:3c:
                    db:24:cb:1e:c8:3e:ed:19:57:48:f7:c8:dc:14:ab:
                    2b:6f:4e:b0:84:79:57:65:22:61:7a:51:69:08:d5:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:82:6A:FE:95:AB:CE:38:93:09:BD:56:AB:F4:7A:3F:0E:80:43:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a1c9b439-9250-3c4f-856b-0e37ad939229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.204.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b9:36:10:ef:fb:e0:2a:cb:23:b0:12:17:35:e6:c6:9b:69:
         cc:26:3e:19:e9:24:c7:61:67:9f:f3:58:d4:75:ab:76:cc:8e:
         3d:4d:3a:20:2b:4b:b0:18:72:b0:09:ec:6f:04:9d:e0:d6:d8:
         3e:62:f4:52:3b:ef:6c:41:35:40:10:26:d3:e2:13:c7:5f:3a:
         24:ed:ef:c4:75:19:c8:3f:d9:20:e5:b7:e8:f5:4e:4a:cb:f9:
         20:cc:0c:2f:27:d0:8e:ab:42:07:82:53:3d:ee:16:53:26:f2:
         18:60:3b:af:a5:61:c3:19:ec:e6:25:c4:12:88:77:8d:ed:8a:
         b1:bd:32:ae:9a:68:b5:c2:1a:8f:f2:a6:a6:e3:7f:dd:12:54:
         2c:7b:d7:6d:cf:d1:9a:2e:a6:9b:8d:3a:38:06:0f:03:d3:46:
         13:12:1f:ef:c1:85:62:b6:99:09:77:e2:4e:6c:0f:b8:5a:cf:
         b5:07:21:44:0d:f0:e2:35:44:61:bf:28:c4:d7:3b:15:ef:f2:
         d7:f4:d8:6e:98:25:12:b9:e2:fd:ab:86:1e:f5:89:63:a9:37:
         85:15:9c:46:7d:a3:3a:45:b9:19:b2:76:26:39:af:64:9f:ab:
         b6:90:91:62:cc:5c:99:d9:f0:9e:20:c2:95:82:34:71:c6:6e:
         f6:77:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:10:58 2026 by rpki-client