Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/2103a370-9d5f-301c-a437-332e3bd3d5c6.roa
File:                     2103a370-9d5f-301c-a437-332e3bd3d5c6.roa (raw, json)
Hash identifier:          GVzVRwohjT3UIdwT5VAf+T9oN3f//o4Fik8OAbTjm+I=
Subject key identifier:   31:68:35:1C:B5:56:83:AA:29:5C:CC:F3:42:23:A2:92:9A:2D:5A:F0
Certificate issuer:       /CN=db3948d9-e295-422b-8439-1e057eb4673b
Certificate serial:       010D0C9F4328584EA78874F8154673048EA22740
Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/2103a370-9d5f-301c-a437-332e3bd3d5c6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30048
IP address blocks:        192.81.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:74:f8:15:46:73:04:8e:a2:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d92565cc-110b-43f0-b2f0-6a43525bcfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:53:b1:10:4f:8f:4d:bb:a0:46:d8:11:ec:
                    18:00:90:0a:da:ab:fd:09:bb:c1:e7:75:ab:9d:bf:
                    2f:b3:f5:d6:fe:ef:a5:38:26:57:d6:e9:bb:89:33:
                    5c:78:1a:da:9d:e5:d8:21:7c:6d:4c:f8:b7:d0:8c:
                    66:2a:2a:2a:7b:ff:c8:3a:00:58:c2:38:9f:06:f4:
                    72:1d:3c:38:86:3f:6a:e8:47:2c:db:eb:a2:a8:df:
                    78:6d:21:39:8e:58:b5:c5:df:5e:35:9f:c4:b3:96:
                    8b:b2:24:b0:a6:0f:41:2e:60:7d:f4:0e:23:4a:e0:
                    cb:4c:ae:58:bd:9d:e3:ac:a4:ca:5f:07:3a:53:83:
                    77:4d:26:44:a6:e9:f3:b8:a7:9d:4b:2f:83:a3:d9:
                    f8:0c:0a:eb:6a:dc:da:94:54:a7:ce:38:9f:01:00:
                    29:47:f4:93:22:38:d2:42:0c:39:14:0e:88:a3:5f:
                    b9:41:fd:ca:b2:c9:b5:86:20:5b:99:48:0c:d4:a7:
                    ce:7d:a9:51:4e:f6:92:97:ad:4d:09:2d:3b:1a:33:
                    6c:83:1e:9f:73:3c:c8:f8:79:e0:0c:15:bb:d0:08:
                    c3:67:09:b5:ce:d7:76:22:4c:92:9e:9e:12:b0:3a:
                    56:82:6b:e7:25:84:c7:9f:94:5c:ef:86:cf:bd:f8:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:68:35:1C:B5:56:83:AA:29:5C:CC:F3:42:23:A2:92:9A:2D:5A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/2103a370-9d5f-301c-a437-332e3bd3d5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl

            X509v3 Authority Key Identifier:
                keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:f1:c6:74:ce:21:a0:be:ef:5c:4f:45:77:63:a3:ca:7b:
         93:14:cb:07:4b:53:e1:a4:c7:21:3c:42:01:72:41:ce:96:af:
         69:17:41:72:53:85:e0:bb:2a:46:d0:6e:0c:b7:1f:cb:60:01:
         d8:b1:f4:13:f5:8e:fe:b3:bb:04:9c:bc:2a:c7:92:c1:32:b4:
         bf:fc:79:39:d3:70:2b:dc:3c:30:45:8f:73:3a:47:18:96:a2:
         fb:f8:cc:80:e5:33:6e:7a:ad:b5:ac:f1:ca:5e:8a:43:19:09:
         6e:bb:5f:4d:08:e9:ce:e2:d2:cb:0b:93:cd:c2:dd:3f:65:e7:
         4b:7a:5f:00:61:fc:39:39:ae:8d:d4:d5:7c:56:9e:73:fe:51:
         24:70:45:a8:75:19:2c:2e:22:ec:1c:d3:af:79:a2:78:e2:b3:
         87:49:34:69:bb:3c:ce:e5:2f:6f:92:5e:f8:d4:ab:94:cf:b3:
         04:42:0b:89:53:64:28:a1:60:b5:0f:b0:69:5c:03:4b:dc:ea:
         79:92:97:93:60:3b:1b:40:97:fc:6e:57:0d:92:ac:f9:ab:4d:
         a4:27:9f:08:af:9b:3f:16:12:4a:38:b1:dc:29:52:19:91:c1:
         24:7a:95:8c:19:d8:e8:34:64:43:9a:57:1b:9f:8e:1f:1a:f7:
         4c:c0:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:40:57 2026 by rpki-client