Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/543f8f67-7732-30a8-b326-acfcae27f624.roa
File:                     543f8f67-7732-30a8-b326-acfcae27f624.roa (raw, json)
Hash identifier:          d85/knEDmpC4YSudSb4ymA28gL7umCeAyhIfrMLNzag=
Subject key identifier:   97:E6:B7:83:FC:7C:1F:44:7C:E5:AA:EF:06:DD:FE:10:8D:CA:B8:F9
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F31DF19CDFB6B601DED149020
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/543f8f67-7732-30a8-b326-acfcae27f624.roa
Signing time:             Wed 16 Sep 2026 14:19:35 +0000
ROA not before:           Wed 16 Sep 2026 14:19:35 +0000
ROA not after:            Tue 15 Dec 2026 15:19:35 +0000
asID:                     402511
IP address blocks:        192.26.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:df:19:cd:fb:6b:60:1d:ed:14:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 16 14:19:35 2026 GMT
            Not After : Dec 15 15:19:35 2026 GMT
        Subject: CN=dcc442aa-b9b9-4067-86d8-570ea1e7756f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:5f:96:7c:95:8e:60:ae:ae:a1:9f:ab:70:
                    b0:44:27:df:b6:e2:de:6a:d2:e9:64:06:29:6a:97:
                    9f:11:9a:de:cc:0b:e5:30:ec:e6:ac:cd:3c:72:6d:
                    0a:46:b2:82:67:8d:8e:21:99:c9:44:d9:8a:1c:50:
                    91:f8:75:ee:9a:f9:48:9c:f4:1b:8d:15:b1:f0:09:
                    d7:1a:49:1f:79:7d:d9:0c:29:19:6b:46:3d:94:81:
                    49:c7:86:93:d4:75:98:e8:56:e4:a1:5c:3a:be:83:
                    60:44:3c:8a:2b:a8:72:1a:48:2f:39:75:50:93:22:
                    c2:f0:43:66:2d:2c:b3:8b:d3:a4:6e:7c:0a:2c:2e:
                    52:13:31:37:8d:0c:c7:5d:d3:92:30:f2:f7:7f:80:
                    00:1f:15:3d:01:8b:8f:57:dd:e0:5a:26:e5:2f:64:
                    e3:fe:46:58:b8:31:b3:9d:26:0e:4f:29:e8:ec:60:
                    87:18:9b:8e:0a:6c:18:ea:cd:d4:d2:1b:2e:be:e3:
                    1c:07:ef:90:ef:85:59:32:42:fa:72:11:5f:c0:bc:
                    95:4c:03:63:14:a6:65:44:04:30:87:dd:be:0c:eb:
                    90:7a:fe:81:3e:7a:ff:df:0e:b9:30:63:01:d5:ed:
                    2a:7f:0d:2a:0d:b4:b7:4d:87:25:11:7d:2d:c9:dc:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:B7:83:FC:7C:1F:44:7C:E5:AA:EF:06:DD:FE:10:8D:CA:B8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/543f8f67-7732-30a8-b326-acfcae27f624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:b6:c6:94:49:87:87:b3:7d:75:f4:26:26:a9:df:34:ea:
         48:65:d0:cb:33:24:78:44:c9:f3:25:f7:7a:da:02:1c:07:e7:
         1b:c3:1a:a3:de:31:72:b2:0b:09:ec:6f:28:b8:04:69:d0:95:
         db:40:59:53:ea:be:d0:80:4a:2e:bf:6d:44:23:25:9d:3c:82:
         ef:10:61:57:e0:6d:03:61:ff:be:78:ca:13:89:a5:db:9d:bc:
         bf:9b:17:39:99:02:48:5d:a4:ce:3b:e1:87:b0:bb:ae:ca:0e:
         9a:3d:00:7c:3d:11:69:a8:a8:a7:f5:ed:a7:1a:b8:e7:1c:4c:
         e4:3b:04:0b:f3:1c:e3:e2:32:8d:3f:36:80:c8:d2:9c:6d:75:
         88:08:aa:a4:78:84:63:32:34:6d:8b:87:16:d5:bc:3b:aa:e8:
         47:90:3a:93:e3:98:7c:28:44:ed:08:8d:28:2a:2e:44:1b:4a:
         c0:62:90:62:06:b1:bc:1a:57:62:b3:24:fa:f3:56:75:d1:a5:
         c4:3a:fe:b9:62:4c:a5:8a:66:27:91:d5:8e:1f:15:d3:46:f8:
         62:7a:f9:bf:04:08:02:8b:f4:e3:7d:4a:aa:72:ef:a0:91:3a:
         6d:44:53:50:04:72:cd:cd:37:a3:a7:d9:ce:67:20:33:d2:d9:
         54:c8:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:12 2026 by rpki-client