Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa
File:                     8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa (raw, json)
Hash identifier:          T1im8KcvoHD4cyd680N17wlZPsuiW8R99Za2rvX5+mU=
Subject key identifier:   AB:6C:A8:2D:4A:FD:E3:40:C9:16:52:3F:D2:3F:7F:26:EB:F2:BF:27
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584EA79429E697EB205B9CCB5DE0
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10497
IP address blocks:        192.86.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:29:e6:97:eb:20:5b:9c:cb:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=31bcdbb2-9ac9-4e74-b7d2-b04b30e8681c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:b5:d3:05:94:85:99:55:10:5e:85:4e:ea:
                    61:a2:ce:fb:07:9f:ea:61:11:45:6d:24:59:76:e2:
                    7a:7a:4b:13:33:f1:b8:db:b2:9d:7b:99:0c:19:4d:
                    27:a7:b6:fc:6d:6a:0d:68:5e:8d:da:ad:06:3b:a7:
                    4a:8f:58:9f:72:4e:8b:b4:63:e2:04:99:ff:97:eb:
                    68:9c:11:9d:06:65:71:c3:9e:cd:7e:41:3d:70:72:
                    75:db:b6:be:e0:c9:68:3c:83:6c:34:96:b8:19:88:
                    f5:c8:a6:d2:6f:97:4c:e0:b4:49:9b:4a:89:f3:6c:
                    06:ea:51:bd:ee:50:46:9a:e8:50:5b:a3:fb:a3:1d:
                    a0:dc:16:1b:ca:e4:a8:01:36:6d:82:37:fa:7b:1e:
                    a1:f7:3e:e8:ef:52:63:6e:f2:5e:02:11:5e:72:e3:
                    57:f4:40:67:f2:14:9e:44:f2:10:79:cd:cb:a2:0d:
                    3b:5a:7e:59:33:b3:c1:98:19:ee:36:f9:04:c1:5b:
                    56:34:07:a8:63:ce:e1:74:a8:2e:ea:b2:bb:0a:1a:
                    d2:89:40:37:43:8e:ac:6a:f1:df:3e:7a:a8:8b:5b:
                    92:5f:6e:e3:ac:75:64:86:e2:24:8b:79:c5:c3:3b:
                    ec:a3:bc:02:8e:1f:1f:a3:fa:b4:b4:49:6a:5c:96:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6C:A8:2D:4A:FD:E3:40:C9:16:52:3F:D2:3F:7F:26:EB:F2:BF:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:44:cc:7b:b6:21:16:84:fb:b4:aa:96:17:3a:3e:0d:37:
         26:41:ba:7b:25:91:87:9c:25:99:f0:1d:94:25:c4:51:6f:e1:
         4a:b5:0e:13:95:bd:8a:1f:5d:c2:db:6d:c1:59:f4:a5:07:f4:
         af:06:b4:05:5a:8c:f4:f4:87:a9:f9:cf:ea:43:1f:15:46:8a:
         bf:b0:7f:ac:90:fe:14:99:74:17:0e:18:84:4c:13:6b:7c:2e:
         82:9c:dd:0c:ef:79:81:26:fd:ab:e6:10:4d:f0:66:ac:27:e1:
         5c:7d:3c:de:72:71:94:a3:45:30:65:79:f1:bb:b2:50:f8:23:
         c9:4c:5f:56:17:ac:f9:6c:f2:a8:08:fc:05:26:c1:d2:74:e6:
         46:56:ac:46:19:3f:ba:a3:7a:15:6d:2a:19:db:74:94:cb:dd:
         83:f5:29:88:b6:87:f1:3d:c2:de:97:a8:28:fd:c8:d7:cd:00:
         2d:71:18:04:5c:ad:4b:bb:12:8f:c7:9b:02:ba:cd:21:90:be:
         44:83:6b:75:ae:12:19:ce:d0:97:c0:ea:30:18:14:a6:64:55:
         36:fb:57:bf:15:72:be:41:6f:a9:a8:01:0b:8d:ea:1c:b2:31:
         d3:94:d0:e6:29:24:d0:36:17:57:15:76:63:f7:4d:1c:c0:7d:
         88:83:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:45 2026 by rpki-client