Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa
File:                     2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa (raw, json)
Hash identifier:          JT5A6sPB9XfHsr2EKSFGyg45u+yoxGAguwnOEtft2m8=
Subject key identifier:   3D:BB:C3:28:F5:1C:7E:DD:FF:9E:3D:36:06:63:83:5B:45:3A:85:77
Certificate issuer:       /CN=93cbb231-50f0-43e8-b3c8-5d5831adb28a
Certificate serial:       010D0C9F4328584EF87CBE3006B45C547CF60700
Authority key identifier: 26:3D:54:DD:96:3C:D3:D7:D4:00:2A:9E:2A:AF:2A:E6:D8:94:68:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        167.94.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:be:30:06:b4:5c:54:7c:f6:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93cbb231-50f0-43e8-b3c8-5d5831adb28a
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=1ab8d9d7-9447-472a-879b-11151a38c53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:3b:dd:84:99:2f:ec:06:00:85:53:3c:cd:
                    7a:b7:33:65:ff:af:b8:d9:ca:ef:43:7d:14:ec:30:
                    16:ae:1d:aa:8c:57:7b:b2:ec:86:07:02:d4:92:98:
                    8d:9b:29:c6:89:d8:f9:46:17:ef:81:67:39:15:6e:
                    59:61:4a:03:e4:ce:01:69:1d:9a:67:39:9f:f0:79:
                    db:47:55:f5:9f:18:0c:25:fd:81:5b:a3:4f:52:c3:
                    48:63:b8:d7:4e:c6:28:26:c8:9b:ca:cb:c3:19:18:
                    b2:1b:b5:10:2e:60:d8:5f:27:3e:96:0a:5e:c1:c7:
                    59:3d:68:da:05:46:62:5a:1e:06:93:90:a2:6d:6c:
                    45:b2:6e:41:69:e1:92:4d:af:4f:50:48:c7:93:73:
                    0a:ae:e6:92:bd:89:e8:22:44:61:e3:a7:3a:b1:5d:
                    98:b6:ca:71:31:52:c3:fe:64:48:e2:bd:51:72:73:
                    fc:68:44:a4:44:c9:c7:9c:b3:84:80:c1:d0:a5:7b:
                    04:b0:d4:fa:ff:ab:4a:6e:5b:02:7f:2b:8b:47:8b:
                    6c:c6:84:e8:63:c5:6f:2f:84:ed:c6:7a:03:75:f2:
                    da:4d:62:ce:94:84:79:10:bf:14:0e:24:13:3a:c9:
                    f1:f9:20:22:ff:89:7b:5f:67:46:4e:cb:c9:9c:8f:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:C3:28:F5:1C:7E:DD:FF:9E:3D:36:06:63:83:5B:45:3A:85:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.crl

            X509v3 Authority Key Identifier:
                keyid:26:3D:54:DD:96:3C:D3:D7:D4:00:2A:9E:2A:AF:2A:E6:D8:94:68:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8c:0f:47:4a:e7:61:11:53:06:a9:56:91:7a:73:16:36:f2:
         93:36:de:24:ec:ad:88:f4:75:b8:28:f0:ef:b0:62:b8:69:16:
         65:39:1a:fd:b6:5d:d4:f9:2e:d3:bc:17:c4:01:74:35:52:ed:
         29:36:07:d6:ae:76:6d:9e:5d:e5:93:eb:84:00:93:eb:b9:c1:
         6e:0b:ab:83:03:62:2a:f6:c0:31:9d:0e:c3:0a:e7:82:a7:6f:
         7c:8a:84:00:3c:8c:06:58:8b:b5:f2:a9:29:74:80:50:76:2a:
         61:aa:a9:fd:f0:2f:02:bc:7d:e3:5f:5e:33:36:07:a3:6b:bf:
         db:fd:bd:62:45:ae:bf:f5:d4:61:66:05:e7:7f:74:97:5e:d1:
         5f:59:1d:d2:23:94:33:76:06:c5:ba:fc:de:17:f8:57:86:9e:
         da:85:4b:6e:d8:cf:fb:96:3a:19:75:6e:de:1a:ee:f6:1c:0f:
         49:8f:5f:f5:79:db:93:be:6f:46:3b:87:4b:9e:f0:e6:4d:dd:
         ef:d7:1a:12:4a:a0:da:71:26:34:4f:91:d1:be:86:08:ce:c0:
         1d:f0:57:a4:b7:ad:bb:ae:f6:47:b6:b2:8c:0c:9f:84:64:49:
         df:a3:35:49:e9:7d:89:77:7a:16:a6:d5:c1:69:2b:06:3f:46:
         ed:fc:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:56:25 2026 by rpki-client