Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/99aa30be-1015-39e9-a576-943498872db0.roa
File:                     99aa30be-1015-39e9-a576-943498872db0.roa (raw, json)
Hash identifier:          O+H9MRrSSqXsTMu7LyGrKUbxxhIYEezci6UVWAgcU1U=
Subject key identifier:   76:B8:45:C2:76:24:AD:5F:FA:60:CD:C2:D4:F1:E7:24:6B:25:EE:E0
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584FB7D66241419BC518B270A200
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/99aa30be-1015-39e9-a576-943498872db0.roa
Signing time:             Tue 03 Nov 2026 14:00:13 +0000
ROA not before:           Tue 03 Nov 2026 14:00:13 +0000
ROA not after:            Mon 01 Feb 2027 14:00:13 +0000
asID:                     14618
IP address blocks:        192.80.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b7:d6:62:41:41:9b:c5:18:b2:70:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Nov  3 14:00:13 2026 GMT
            Not After : Feb  1 14:00:13 2027 GMT
        Subject: CN=9a0a9660-eff4-47f0-b7a9-2620ccde76b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:3b:ff:d1:6e:4c:f9:dd:f3:31:f3:c0:e8:
                    cb:9b:51:16:c5:b6:46:11:b1:ae:f6:a5:06:9f:b0:
                    9c:f9:df:cc:c1:4c:6b:a0:62:90:41:c1:7e:42:dd:
                    34:17:15:95:01:28:62:cd:01:61:73:c4:df:d9:81:
                    8b:09:fa:e5:35:00:34:c4:2f:af:d4:db:65:06:51:
                    8e:57:9b:ee:a3:c6:e5:1f:c2:69:cd:62:9b:41:a8:
                    e4:67:6e:3e:b6:5f:d6:7d:ee:c7:b2:43:0d:14:56:
                    8a:68:1e:cd:40:66:48:12:5b:a3:7b:78:6a:d7:ef:
                    9e:2b:4b:5d:12:42:c2:fa:8f:b6:df:c1:04:4b:d7:
                    29:d8:df:09:d0:cb:9c:0d:d6:af:3b:94:23:ea:6e:
                    89:d9:68:85:63:06:bb:0c:92:e8:d3:00:44:52:47:
                    53:8d:00:20:90:1d:73:19:9b:5d:d3:fc:b0:f4:71:
                    ad:d8:74:0f:1c:1f:c4:72:10:f7:f7:73:37:58:7d:
                    5c:0c:b6:33:b7:53:6c:58:ec:79:39:16:53:1f:c5:
                    96:45:43:a5:32:59:99:b1:63:a9:b0:be:26:5b:0e:
                    7d:df:a6:ba:97:82:01:cf:98:fe:88:a1:95:df:d0:
                    66:f7:31:d0:ce:0f:37:f0:74:60:34:4f:d4:99:35:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:45:C2:76:24:AD:5F:FA:60:CD:C2:D4:F1:E7:24:6B:25:EE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/99aa30be-1015-39e9-a576-943498872db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:92:9e:11:71:7c:8f:37:9e:ec:db:4a:e8:73:c1:17:77:cc:
         aa:8a:54:4d:49:26:af:52:a2:be:f4:5b:5a:96:79:51:66:33:
         6a:43:c7:37:e9:22:23:3b:e8:66:86:2a:5e:96:d5:3a:82:2f:
         57:f4:cb:fc:c0:d6:99:e7:15:3c:63:7b:b3:58:9c:7f:a2:74:
         82:57:8a:f5:78:d7:fb:05:99:02:41:da:0c:bf:3c:b0:32:08:
         15:df:78:c0:0c:33:87:a6:e9:6d:87:51:8b:f2:0f:df:b3:83:
         66:20:fe:25:8b:e7:36:76:45:ea:35:7f:b2:7c:29:fc:f2:b2:
         17:78:81:f4:e5:0a:fb:2a:1e:24:78:50:fe:bb:c9:37:d0:9a:
         8e:cb:96:d2:25:9d:aa:00:b9:61:45:67:7c:53:3c:89:57:06:
         23:ab:65:1e:94:e4:09:ef:f7:46:0e:99:74:b7:b3:57:99:94:
         7e:4e:e3:65:39:97:25:40:f0:cc:47:10:d1:04:83:aa:2c:e4:
         5e:42:69:bb:6b:46:23:ea:43:68:f5:85:5c:ec:5d:70:5e:09:
         2b:8a:cc:9b:b7:fd:4f:37:ad:ce:24:fa:f4:6e:52:9a:45:1c:
         2e:1e:63:c1:77:fa:2e:cd:d9:84:8f:62:1f:be:2a:e9:31:fb:
         08:77:4b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:41:29 2026 by rpki-client