Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/437b2b04-408d-3b10-865d-ce1ed9374b0e.roa
File:                     437b2b04-408d-3b10-865d-ce1ed9374b0e.roa (raw, json)
Hash identifier:          GM2oMy7bNUSLJYRKB23h5WOoNvA3WTMHriNgMDjsgxE=
Subject key identifier:   ED:FE:D7:27:EC:28:FC:91:DE:53:B2:6C:6B:4F:14:DC:D0:44:44:5D
Certificate issuer:       /CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
Certificate serial:       010D0C9F4328584F37EF618AAA0B4CD41E204780
Authority key identifier: E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/437b2b04-408d-3b10-865d-ce1ed9374b0e.roa
Signing time:             Fri 18 Sep 2026 18:27:14 +0000
ROA not before:           Fri 18 Sep 2026 18:27:14 +0000
ROA not after:            Thu 17 Dec 2026 19:27:14 +0000
asID:                     399220
IP address blocks:        192.190.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:ef:61:8a:aa:0b:4c:d4:1e:20:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
        Validity
            Not Before: Sep 18 18:27:14 2026 GMT
            Not After : Dec 17 19:27:14 2026 GMT
        Subject: CN=4840eb55-eafc-4681-bce2-88b1f781a1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:2d:46:6e:2d:05:28:6e:35:3f:af:e3:1a:
                    53:dc:c1:f5:9d:87:84:61:c2:5b:15:45:d4:b6:b5:
                    65:c1:fd:c0:0e:db:77:f3:8d:b7:df:1b:9f:da:40:
                    44:c9:66:92:68:80:56:ae:dc:b5:cc:ec:31:f0:0d:
                    c4:2a:43:75:a7:1a:a0:be:0c:3e:95:e3:2c:f0:e0:
                    38:71:ca:4c:6b:29:81:28:db:83:ad:1f:71:48:8e:
                    e4:6d:0d:89:d0:22:a8:54:a0:cc:20:50:ff:d8:5e:
                    be:8d:c8:24:72:8b:da:d7:89:6d:93:cb:97:fb:41:
                    ea:c5:5f:0d:f1:d2:d5:c1:0c:d6:37:b9:a0:4e:d1:
                    40:dc:1d:c7:cf:38:e9:56:e0:47:81:93:c5:c8:50:
                    f7:29:d5:7b:9c:0c:a0:58:38:96:a3:82:4c:5a:45:
                    82:dd:4b:e7:0e:c8:91:92:2c:b6:70:03:8e:a6:ce:
                    6d:0b:d9:8d:34:ef:e4:fd:d8:9b:a1:d5:ed:ae:e7:
                    ad:e2:31:27:3f:df:37:6d:d3:f4:12:3f:2c:0b:3e:
                    a8:21:97:94:70:8b:2d:9f:25:e4:bd:d6:08:00:9b:
                    75:b3:c4:37:1d:40:11:a9:55:3c:07:f0:b6:42:06:
                    30:6c:d5:2d:9d:a5:c3:f4:aa:bb:4b:11:f6:b8:78:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:D7:27:EC:28:FC:91:DE:53:B2:6C:6B:4F:14:DC:D0:44:44:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/437b2b04-408d-3b10-865d-ce1ed9374b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:c4:c7:a1:72:e1:b3:af:33:06:d2:bb:22:48:0f:ff:4c:
         71:48:11:4c:fc:86:a4:b5:88:d3:de:5b:04:ee:23:16:34:25:
         7a:15:32:e3:45:92:e3:fa:8d:ce:33:17:d7:f4:ef:53:84:04:
         c3:03:4b:d0:4d:37:7f:9c:8f:3b:97:f7:e7:eb:b4:04:54:14:
         92:2f:f0:28:e2:9b:c8:4a:15:48:ea:fd:5c:af:b3:d1:23:92:
         cc:9b:cc:67:e6:6d:44:0f:84:e7:90:c6:e6:f3:39:db:c5:a6:
         4d:b7:bc:1e:45:87:72:6d:64:38:ce:86:5a:89:66:22:72:88:
         eb:a7:3f:d0:fc:0f:89:19:11:25:92:6c:b6:86:03:db:37:4b:
         c9:90:a6:bb:37:24:06:ea:34:9d:66:17:8e:31:d1:ef:19:47:
         bc:b1:e3:28:f4:04:58:ed:f7:4b:0a:6f:da:ae:9c:dd:fc:bb:
         c7:17:33:70:37:4d:aa:68:a5:e3:13:43:97:d0:a4:2d:73:dc:
         79:8e:1a:b4:89:50:bd:04:7e:52:33:28:bd:02:68:0c:17:19:
         dd:a5:97:ab:b2:fb:d0:ef:c6:2e:8e:52:63:2e:5a:20:51:12:
         66:34:8d:64:47:da:b3:ff:68:01:8d:e3:d5:fd:df:f3:b0:0f:
         5b:a0:c1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:58 2026 by rpki-client