Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/111cf5c3-9ef7-3475-8759-6da1b38bb513.roa
File:                     111cf5c3-9ef7-3475-8759-6da1b38bb513.roa (raw, json)
Hash identifier:          3rXqRKUKSi1kLbmfJdx69iy8yl6jvzwGowylcyNxWEA=
Subject key identifier:   F9:73:40:D2:59:33:BD:F8:2E:4F:60:E9:B2:73:4E:DF:77:34:0E:0C
Certificate issuer:       /CN=88119593-ed92-40c6-8543-9a9b06b6a64f
Certificate serial:       010D0C9F4328584EF2E768B6F44BFAA31C6002F0
Authority key identifier: 86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/111cf5c3-9ef7-3475-8759-6da1b38bb513.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        192.81.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:68:b6:f4:4b:fa:a3:1c:60:02:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88119593-ed92-40c6-8543-9a9b06b6a64f
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=801432d5-0e5a-42a7-9d6d-c9d52249f140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d3:b7:52:17:0c:d5:a5:37:7b:93:db:3f:de:
                    98:83:fc:15:69:48:43:0d:77:76:ba:6a:c0:1f:e6:
                    98:a9:65:43:9d:21:96:2c:9c:39:07:bc:f1:1a:99:
                    0b:6d:16:8b:1b:7e:fa:2b:cf:51:ab:a5:cb:9f:a8:
                    d5:89:6d:7f:47:6d:25:e9:37:6a:5b:31:de:e2:cd:
                    fd:6a:8b:d3:76:72:60:cb:31:fd:50:7e:97:e4:1b:
                    05:36:55:06:2a:4e:08:ab:5e:89:c3:5e:e6:1f:13:
                    58:c9:01:ec:57:ee:64:93:4b:cc:a4:2c:72:6c:62:
                    04:94:37:2f:af:48:d4:17:f2:ce:ce:02:ec:e5:e5:
                    c4:d8:b5:d5:0b:79:ac:a6:c6:d7:f6:b2:00:4e:bd:
                    a9:7e:53:07:52:96:29:41:f9:70:0b:aa:5f:3a:35:
                    d4:81:89:99:3a:7b:f5:e1:2c:7e:cf:24:91:ff:82:
                    c2:a4:ce:58:50:d6:b5:44:de:1e:f4:e2:c4:4f:11:
                    29:fa:1f:8d:ce:d2:a6:20:f2:55:6d:c3:a8:72:0b:
                    1e:98:85:60:1f:c4:99:d6:13:1a:2b:64:50:9a:9d:
                    e3:99:9e:82:64:5f:a5:dd:df:44:c3:f6:29:94:52:
                    cc:f4:a2:2e:de:87:67:6d:8b:0f:1b:2b:d9:a4:bf:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:73:40:D2:59:33:BD:F8:2E:4F:60:E9:B2:73:4E:DF:77:34:0E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/111cf5c3-9ef7-3475-8759-6da1b38bb513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.crl

            X509v3 Authority Key Identifier:
                keyid:86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:11:19:ef:8f:46:76:fd:54:79:d8:6f:38:fc:3a:e4:0b:
         b0:ad:ac:d2:a8:08:a5:b8:f7:58:f8:05:87:f8:eb:11:72:fc:
         d1:fa:3a:f4:c5:e6:42:b8:fa:e9:74:7f:c9:a5:1e:ea:4b:d3:
         ff:a1:42:77:38:69:50:58:6f:51:76:a1:19:bb:5f:d0:f1:70:
         53:f4:d4:1c:dd:5a:5f:bf:df:89:06:6d:7c:ea:f9:17:2c:ed:
         be:3a:96:ea:e7:0d:3b:f0:08:de:04:bb:6e:5f:df:a8:0d:10:
         2d:98:c8:54:92:c7:84:63:91:b6:57:4e:e9:5d:7a:b7:5b:78:
         42:cf:fc:ee:64:37:3c:a1:f2:fb:1c:49:61:72:91:c5:2d:c1:
         e2:5a:09:43:5e:6d:3f:e3:b5:6a:0b:16:22:a6:05:0c:39:84:
         f9:29:51:f2:1e:b4:1f:5f:b5:6e:4c:cb:20:46:07:fc:a1:95:
         cd:5a:24:7d:3f:6b:c6:9f:55:75:b9:5f:b5:bd:84:26:1c:ee:
         3c:42:26:bf:b8:2e:8f:e6:8e:2e:b9:da:ac:4e:41:df:4a:f3:
         4e:a9:0e:b1:f7:09:41:69:df:ee:f0:07:3d:7d:37:4e:90:63:
         a8:3b:29:ae:2b:1c:12:37:54:c9:e5:75:24:15:ec:9e:6d:4e:
         cc:b0:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:00:05 2026 by rpki-client