Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/3b85fe53-715a-3fc5-87e0-b01d99aaa081.roa
File:                     3b85fe53-715a-3fc5-87e0-b01d99aaa081.roa (raw, json)
Hash identifier:          atM4uNPOH60e1N/GHF0NCoEggn4Mb6cCvp0Lj3Rka8g=
Subject key identifier:   D1:75:5A:58:D3:A1:FC:37:1B:07:CD:79:44:46:A2:46:F1:F3:AB:CD
Certificate issuer:       /CN=28301e07-2824-4e0b-9659-f5da81f88222
Certificate serial:       010D0C9F4328584F00DCBFA37831AE5995F07E78
Authority key identifier: FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/3b85fe53-715a-3fc5-87e0-b01d99aaa081.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     18936
IP address blocks:        192.195.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:bf:a3:78:31:ae:59:95:f0:7e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28301e07-2824-4e0b-9659-f5da81f88222
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=5aa522ba-223b-4e0f-9e61-ed304c57ae29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e3:76:a5:83:38:e6:ac:96:26:c8:88:8b:d5:
                    3f:10:de:ab:6c:2a:94:44:d5:19:bb:c2:56:fa:26:
                    c5:95:ee:79:42:3c:be:b4:a9:6d:fa:82:57:8a:74:
                    86:76:f8:1a:37:a6:37:0e:bd:32:e6:6b:6e:6e:a4:
                    3c:6a:eb:ed:57:39:b7:fe:58:03:e1:35:67:43:f0:
                    b8:14:21:ce:84:86:f5:75:02:9d:99:55:42:17:1a:
                    13:b3:34:78:f2:eb:7b:b4:db:68:3b:57:48:82:7e:
                    0c:66:33:d0:e3:c8:5c:93:0c:46:74:fc:32:fe:bb:
                    1a:fc:2b:03:9b:d0:35:e7:49:93:11:2b:77:18:08:
                    e2:9f:ee:9f:90:11:18:0f:6d:40:5a:60:f6:d6:f7:
                    05:0a:bc:ec:49:af:70:21:04:e6:ce:8f:97:b3:63:
                    4b:5d:81:e3:b6:05:14:47:5f:fe:fd:49:3a:31:a1:
                    68:7f:1e:27:0c:ca:b3:f5:2d:7c:f6:af:81:71:e9:
                    62:56:3d:db:1f:36:04:72:a6:02:97:b0:46:a0:bc:
                    a1:84:8b:1b:10:f0:a2:9a:33:bb:dc:e9:6b:0e:3e:
                    29:e6:5d:96:73:fb:88:40:fa:c7:be:2d:44:e3:cc:
                    ae:30:0f:dc:d7:6b:25:4d:af:fc:c3:c9:bd:68:d1:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:75:5A:58:D3:A1:FC:37:1B:07:CD:79:44:46:A2:46:F1:F3:AB:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/3b85fe53-715a-3fc5-87e0-b01d99aaa081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.crl

            X509v3 Authority Key Identifier:
                keyid:FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:0e:58:01:ce:fc:44:b9:53:f3:28:62:17:d7:ed:98:ca:
         16:53:46:fa:57:e1:48:7c:4c:2e:43:52:ac:3b:2d:a1:6c:4f:
         3b:1d:46:6c:4c:4d:72:35:eb:2c:9c:ad:10:d5:8e:67:25:d2:
         85:dd:ba:b9:be:e7:f6:d5:ad:a5:23:46:45:a1:54:ae:14:79:
         b0:6f:ac:8b:4f:94:6c:73:ae:cc:32:97:f8:dc:e1:ee:c4:fb:
         93:f4:2f:ef:fb:7c:5b:e3:d6:98:94:ec:db:fb:c7:04:65:64:
         8c:ee:6b:ad:8a:84:64:11:37:ea:8b:23:76:5a:e8:b0:93:a7:
         cd:7f:ad:5a:33:34:cf:b4:7a:40:ab:1a:9b:a6:b7:c9:d1:00:
         bb:cc:b8:77:02:df:5e:74:8e:5b:9f:0b:6a:1d:63:b2:a2:a4:
         75:47:fa:a3:6f:b8:76:c9:ae:8f:5f:1b:f9:69:16:f1:e5:82:
         cb:34:a7:a8:73:c2:70:75:dc:e0:bd:5e:90:68:56:1a:0d:7b:
         f6:fb:f6:7f:26:a6:ab:96:11:d7:75:a3:7e:04:14:94:b1:16:
         db:5b:60:00:1d:ac:f5:e9:55:d8:5f:5e:fd:9c:e7:d7:50:68:
         0f:9f:11:7a:ba:0a:ff:be:9c:fe:b3:49:ab:c3:6c:89:1a:07:
         5c:25:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:25 2026 by rpki-client