Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/32b6a0da-ef15-32d5-8104-b6833a937063.roa
File:                     32b6a0da-ef15-32d5-8104-b6833a937063.roa (raw, json)
Hash identifier:          oml0k7cJLgjwd1Lxp9aBJpRj4+fg97nzSV3eZZj0YBA=
Subject key identifier:   CE:D0:88:5C:7E:3D:E7:0B:42:C1:F1:E0:2A:13:11:0E:69:96:65:BF
Certificate issuer:       /CN=83978879-0e89-498f-901b-884a1988c27f
Certificate serial:       010D0C9F4328584F4974CD3F79D116D01F90A380
Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/32b6a0da-ef15-32d5-8104-b6833a937063.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401873
IP address blocks:        205.201.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:cd:3f:79:d1:16:d0:1f:90:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83978879-0e89-498f-901b-884a1988c27f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b6ce2f01-6a10-42a2-91f0-3560490882bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:10:68:e8:bb:f1:9e:c1:a6:49:2b:b3:39:b1:
                    d8:01:68:6f:36:c7:b3:e8:9f:b3:f5:ef:f5:a4:21:
                    ec:3f:01:0a:60:ed:00:98:00:9d:bc:22:c2:45:4b:
                    68:82:c6:7c:f8:8d:87:ed:e5:92:e6:86:b0:8e:df:
                    1f:64:7d:a4:56:22:a5:4d:46:1c:78:bb:10:11:ec:
                    e9:1c:60:31:ba:1e:0d:80:7d:c0:46:1e:0f:9b:dd:
                    98:72:06:31:d3:9e:1b:41:93:65:d7:a1:3c:82:9e:
                    3c:87:a8:60:19:19:06:2e:2a:83:c6:0d:2c:bf:59:
                    a0:22:d3:df:ef:d6:c6:2e:b4:3e:db:e9:5f:ea:c1:
                    8c:51:cb:ca:61:4f:6e:a8:7c:bd:73:8c:12:23:0d:
                    3d:6b:e9:3f:17:2b:29:fd:3d:d1:c8:2b:d5:d5:e2:
                    19:2c:44:5c:d2:0e:bf:7d:d0:20:ed:04:f6:4a:9c:
                    89:a9:d4:88:fb:44:f0:73:2a:a7:bc:da:72:11:58:
                    62:b5:ba:92:ae:ed:95:90:cb:c9:9b:d4:f8:03:c2:
                    6c:22:d0:e1:47:a2:29:22:03:a6:51:5f:38:79:92:
                    bb:50:90:43:ca:1a:63:96:0f:f2:df:87:18:b3:46:
                    0d:c7:28:43:65:c0:3e:2e:3e:c9:17:94:15:16:f4:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D0:88:5C:7E:3D:E7:0B:42:C1:F1:E0:2A:13:11:0E:69:96:65:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/32b6a0da-ef15-32d5-8104-b6833a937063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:8a:cc:76:c1:95:e6:b4:c5:34:c9:6e:2c:4f:96:f4:66:
         6c:b5:dc:31:41:0b:51:81:4e:35:a7:e7:f1:df:c1:01:9a:5e:
         fe:d1:db:b1:0c:e8:55:a3:ed:8d:81:3a:b1:a2:0f:59:f6:f7:
         71:28:11:64:51:39:9b:80:c1:b2:69:19:10:f0:ad:e8:9e:d2:
         fc:3b:34:3f:97:53:da:e0:c0:da:cb:a9:00:d3:bc:ca:0e:96:
         a7:a7:cf:af:c3:4b:dd:b0:5d:83:5d:8d:b5:aa:ea:b7:8d:bd:
         9d:ec:5a:66:12:e3:42:24:8e:64:89:1a:7c:59:ad:e8:99:5f:
         51:0e:50:d2:5f:c6:81:a3:b7:9c:19:74:e4:ee:ce:69:19:92:
         a1:df:ac:e9:2d:21:78:ed:77:26:7d:59:0d:86:67:11:c8:01:
         d8:ba:f7:e1:7f:67:8e:d4:72:fa:fb:d5:ee:8c:66:2e:d1:17:
         fc:1b:ea:28:2f:7b:0c:13:d4:43:ca:17:47:5a:f5:13:89:39:
         32:fe:fc:37:16:ea:09:71:a2:f2:9b:a9:74:fb:b4:6b:7f:af:
         0c:ad:87:d3:8f:47:c5:6e:0b:ff:fb:4d:8d:d4:a6:4c:75:d6:
         04:0e:b2:e8:f3:ed:75:0f:35:3a:08:af:74:15:6b:d6:09:2a:
         6f:d6:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:05:03 2026 by rpki-client