Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa
File:                     1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa (raw, json)
Hash identifier:          ltGyZQEB8j18hMjKWKlUeT9FBA7gGYS7qM1+5hcpDtU=
Subject key identifier:   FC:DB:E4:FA:E3:A6:C5:19:F6:D0:2A:EC:CB:22:C5:15:9B:38:23:DE
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584F119CF7D9DE08E254CAF35580
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        192.80.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f7:d9:de:08:e2:54:ca:f3:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=357f2a5e-3f2f-400d-b635-fc10f3bfa6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:80:ea:ef:83:84:23:1d:7a:79:f8:61:0f:
                    3c:2a:6d:d4:a8:68:da:b6:bc:25:45:69:bb:4c:bb:
                    e3:f6:78:f4:99:de:96:0f:51:5f:04:0d:da:7a:3a:
                    9e:ba:d3:5e:4d:78:04:1f:6e:e7:5f:c7:35:6f:2c:
                    7e:68:1e:9b:79:d1:94:db:6f:96:3a:b6:01:a4:1e:
                    59:25:fa:c1:ec:ac:d7:1c:6f:0b:de:16:2b:97:5e:
                    b3:e2:76:c2:5d:db:2b:71:39:92:42:c3:17:ae:f4:
                    93:3f:bc:67:f0:fd:f7:2f:58:18:ee:d6:18:d6:50:
                    e2:ee:20:d6:5a:39:75:54:dd:2f:7b:41:c5:7e:08:
                    13:45:6b:c5:49:23:98:d9:f8:39:74:31:c2:09:80:
                    26:bd:f1:da:2f:17:62:c4:65:dc:15:d9:85:5c:c1:
                    b2:71:09:9c:c9:86:4a:3f:5b:7f:a4:31:ad:5b:6f:
                    fc:61:82:ce:7e:bb:9c:f5:92:ea:94:19:d5:38:48:
                    98:61:16:57:57:44:88:9e:dc:0a:03:11:e3:dc:7e:
                    81:30:1e:6a:c2:b5:a4:31:de:b1:22:6e:e3:30:0d:
                    99:5d:f4:1b:b3:f9:27:01:2a:11:4c:ac:5d:c4:cd:
                    32:d5:a6:e1:4d:c0:a6:57:4c:48:f2:b9:bf:3f:f6:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DB:E4:FA:E3:A6:C5:19:F6:D0:2A:EC:CB:22:C5:15:9B:38:23:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:b9:24:88:29:e2:1d:20:ec:90:99:ea:c3:35:81:d9:57:
         2c:73:c9:d2:57:9d:77:ec:de:6e:83:b7:9e:a2:38:77:a7:4f:
         7e:1d:7c:69:c7:3e:1d:0b:d0:95:c4:8b:9c:f9:04:6c:a4:f3:
         1d:a7:7c:5f:ad:3f:5e:1e:c2:82:04:68:7d:e0:4c:c4:02:95:
         49:b8:b4:85:db:5a:56:ef:42:b1:13:65:8b:6b:bb:62:94:f2:
         3c:b6:9c:27:c4:de:5b:42:85:89:86:42:ae:d2:31:51:3e:18:
         b8:7b:54:c5:9f:ce:8f:41:7c:2a:3b:ff:e5:8f:05:de:a3:f8:
         dd:62:fc:a4:0a:63:5a:ca:36:d4:62:ce:95:35:cb:a2:df:58:
         35:62:d4:17:e9:17:37:2d:33:2d:80:18:be:e4:3e:ea:d5:f5:
         0e:f2:ac:44:73:68:57:4a:7b:1b:f4:9b:4f:4f:f8:eb:46:32:
         19:b6:bf:36:50:0a:0c:8f:9d:43:36:3b:fe:aa:05:f1:8a:e6:
         59:f7:dd:f8:3b:e2:95:e7:21:8b:6b:7c:5f:e4:36:77:45:0c:
         ad:ad:6b:76:ca:8a:cf:b6:ae:b3:25:e5:0a:c2:ce:dd:aa:61:
         bb:5e:65:2c:5c:f4:90:32:74:28:43:25:f2:17:2f:8c:1a:ca:
         30:7d:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:29:42 2026 by rpki-client