Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f82c1bfa-b27b-328c-b4e7-a63fd5855734.roa
File:                     f82c1bfa-b27b-328c-b4e7-a63fd5855734.roa (raw, json)
Hash identifier:          8Kevpys19+YeLCSArNjdG584VIKLTYFfwp6osLNe53c=
Subject key identifier:   99:69:EF:27:AC:DB:54:C6:68:11:4E:3D:AA:6B:CE:10:8D:14:E2:97
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F3E47CA254826827A893C0B40
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f82c1bfa-b27b-328c-b4e7-a63fd5855734.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     46450
IP address blocks:        136.162.192.0/20 maxlen: 24
                          161.114.48.0/20 maxlen: 24
                          161.114.240.0/20 maxlen: 24
                          192.132.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ca:25:48:26:82:7a:89:3c:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=aa9c3c5a-f843-4bc6-8925-949936146a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:e1:bc:01:10:c2:83:a8:a8:a3:35:a2:4a:
                    97:4c:6a:7f:cd:04:be:35:9e:3e:96:17:52:1a:7b:
                    24:95:3d:03:62:31:72:02:42:61:3c:79:e1:eb:f3:
                    94:82:9f:c1:f5:f6:61:6c:77:f4:5d:cb:99:bd:56:
                    ac:c4:9e:93:6a:c0:31:47:88:f3:2f:01:82:e0:b7:
                    a8:af:e1:c9:9a:71:7a:ff:4a:a0:37:46:64:e9:34:
                    38:e0:61:22:32:34:1d:93:55:d0:c2:2c:de:c1:5e:
                    d6:9c:2a:b2:f4:8b:0b:aa:6c:09:ff:4f:5f:8a:37:
                    29:14:8b:3f:82:4b:54:fe:0c:b6:83:97:69:1d:33:
                    3e:8f:1c:e3:0d:bc:54:e9:e2:07:b0:ab:dd:3f:1b:
                    7a:b2:57:f2:c2:57:ed:4a:c6:36:6f:e0:0b:7d:f1:
                    8c:65:cb:06:fe:20:be:b2:c6:b7:3d:79:8e:e6:20:
                    0d:1d:48:d1:5e:be:82:a4:48:20:a3:85:b4:e8:ce:
                    52:4d:2e:55:65:a0:7d:27:bd:8b:15:5e:0e:34:c8:
                    29:92:e1:a7:d4:ef:c0:c3:5a:40:70:13:8e:8b:54:
                    77:df:02:8d:7e:64:76:2e:f7:66:15:35:86:05:0d:
                    ef:06:81:38:3a:d3:4c:24:3b:a5:63:d0:1f:5d:be:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:EF:27:AC:DB:54:C6:68:11:4E:3D:AA:6B:CE:10:8D:14:E2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f82c1bfa-b27b-328c-b4e7-a63fd5855734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.162.192.0/20
                  161.114.48.0/20
                  161.114.240.0/20
                  192.132.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4e:66:a9:b3:14:86:1e:44:f8:bd:b8:f2:f1:71:cc:e2:90:
         09:b3:4d:6d:07:ad:82:c9:6e:a8:3f:37:7c:b2:5e:68:f1:c7:
         09:fe:9a:7c:93:d5:78:c0:b3:39:af:9c:aa:1c:52:96:80:96:
         b7:f5:e7:db:1e:27:27:e1:9c:1d:f5:d7:20:ba:bd:d3:ab:eb:
         d3:8a:e3:0b:a0:cb:9a:51:5d:82:0a:dc:77:58:22:11:5e:c0:
         60:47:fa:bb:c3:ee:5c:09:d2:6c:35:48:25:ad:0c:97:e7:84:
         d2:45:f7:67:65:ee:d6:5d:be:a3:5d:af:3e:5c:93:df:db:1a:
         c1:af:c3:a2:fe:7d:29:f9:af:a0:41:c2:4d:71:97:7b:dc:91:
         ae:f8:27:69:6b:c8:6e:23:85:9f:fa:99:9c:00:17:10:08:53:
         5c:fa:66:c6:52:99:9d:7b:31:96:28:78:9a:a8:98:09:a7:d9:
         88:d8:a5:d5:a9:50:9d:4f:fc:86:84:e3:51:84:83:a6:3e:e9:
         58:59:a4:35:3a:92:36:35:d4:d4:82:4d:4c:85:3e:bb:d1:97:
         a7:09:8b:74:84:d8:f4:26:22:65:01:e8:76:89:3e:9a:e4:e4:
         8e:c0:bc:bd:3f:ed:5b:7a:ca:49:cb:b4:02:a6:70:1b:72:0c:
         a2:95:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:18 2026 by rpki-client