Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/ac9083e8-effa-3869-b09f-8574a01124dc.roa
File:                     ac9083e8-effa-3869-b09f-8574a01124dc.roa (raw, json)
Hash identifier:          oyu8CqQDGBz0LG/yfPdCh/Oh21Hdnynek9NnDIxNwNM=
Subject key identifier:   0A:CB:05:F0:BD:80:FA:56:58:4D:85:B3:7F:65:BA:8E:36:68:41:94
Certificate issuer:       /CN=9b489b35-c88a-4dd6-a892-ed910b09832e
Certificate serial:       010D0C9F4328584EA791BF41646BA9AEB82BFC40
Authority key identifier: 27:BD:C6:6E:EE:6C:7A:A0:19:88:CD:7B:34:94:8A:63:9A:E4:92:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/ac9083e8-effa-3869-b09f-8574a01124dc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        192.207.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/9b489b35-c88a-4dd6-a892-ed910b09832e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/9b489b35-c88a-4dd6-a892-ed910b09832e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:bf:41:64:6b:a9:ae:b8:2b:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b489b35-c88a-4dd6-a892-ed910b09832e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=87d306d5-5f24-4e71-8851-130d4d8cd8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:54:de:df:c3:9e:4f:67:5f:73:11:39:e8:
                    89:32:f8:a6:3d:83:f3:d7:1c:7c:3d:45:79:f8:6e:
                    04:47:35:ed:62:51:58:99:76:c8:84:e9:9e:08:f3:
                    b7:5a:29:47:08:9d:cf:df:76:74:87:c0:12:58:92:
                    7f:40:3b:6f:57:91:5b:a6:eb:eb:98:a3:8f:7b:2c:
                    09:d1:72:ac:b5:38:18:e1:ef:df:db:8b:af:7b:c4:
                    9a:27:99:d9:25:f9:a7:65:09:f1:89:06:1b:e4:49:
                    df:f3:46:57:35:bf:2c:d9:56:2a:07:36:24:c0:a9:
                    85:53:72:b2:5c:30:ec:d1:b8:b8:19:2e:fe:be:57:
                    96:cf:38:0f:25:e0:59:de:c9:84:fb:b7:7b:18:0c:
                    81:ea:fb:7b:0b:75:6f:85:a9:5d:06:22:2b:30:ac:
                    5c:c4:88:a3:d1:88:f9:c6:a3:a7:98:26:ff:ff:70:
                    51:fa:d0:75:33:1a:33:83:f4:2a:b6:5e:8a:13:27:
                    a9:0c:57:9e:e5:61:7b:07:36:45:a1:f0:05:0f:9b:
                    67:44:33:1e:f2:fc:1d:01:04:78:29:36:f8:91:ef:
                    b7:2d:4b:1e:5a:49:ba:03:81:a5:7f:f5:ce:b1:85:
                    3a:7c:8a:36:ba:90:ef:79:bf:b8:29:26:8a:77:69:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CB:05:F0:BD:80:FA:56:58:4D:85:B3:7F:65:BA:8E:36:68:41:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/ac9083e8-effa-3869-b09f-8574a01124dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e/9b489b35-c88a-4dd6-a892-ed910b09832e.crl

            X509v3 Authority Key Identifier:
                keyid:27:BD:C6:6E:EE:6C:7A:A0:19:88:CD:7B:34:94:8A:63:9A:E4:92:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b489b35-c88a-4dd6-a892-ed910b09832e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:1d:54:5a:73:16:91:f0:a1:cc:5a:38:67:1e:bc:02:25:
         6c:fc:c8:92:49:3c:75:88:7e:9e:c9:e8:1d:5e:f4:5f:36:69:
         3c:53:47:9e:42:16:36:be:6d:b0:83:86:01:c1:2e:98:8e:09:
         20:93:4a:09:d6:ff:7c:0a:86:c3:ee:90:24:21:73:15:38:09:
         12:58:3e:dd:23:35:e1:92:b0:0b:54:84:fd:ae:6f:c0:fe:cb:
         d2:6a:91:dc:89:a5:af:95:32:9a:b9:cd:72:e8:21:26:54:34:
         9f:50:92:7d:ca:37:6d:43:62:38:38:18:08:0f:99:8d:ed:00:
         f0:b8:78:ee:ef:72:bd:67:d5:65:a2:c0:10:f9:54:7b:78:fa:
         bc:31:16:a2:87:98:b6:ac:d7:41:de:34:da:09:b8:ee:7d:5e:
         11:e7:13:c0:a9:9c:31:7e:97:83:3f:68:6a:2b:4c:92:37:9e:
         c7:8d:84:02:33:5e:3c:1f:21:57:0f:a4:9c:e3:0c:a1:72:99:
         e3:3b:79:4f:d8:64:52:99:9d:7b:c9:b0:3d:34:cb:d5:36:57:
         3d:1e:83:4b:1c:32:8d:61:80:3c:66:63:8a:83:6b:84:c8:ed:
         5c:d2:90:8a:42:8b:c2:ed:80:61:e1:68:45:72:cd:ab:0b:1a:
         0b:15:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:33 2026 by rpki-client