Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
File:                     82081b1c-a2de-357f-81fd-69a40673670c.roa (raw, json)
Hash identifier:          3+4PZJ9i7zkMgXm6yHHuGCLgWNW93SXl7iHfVpiUuHE=
Subject key identifier:   72:FF:20:12:8E:BD:2A:ED:7F:A2:1C:D3:05:56:77:44:66:1F:96:F9
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F4328584EEEB75A5949E7AA799070E040
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     160
IP address blocks:        192.5.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5a:59:49:e7:aa:79:90:70:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=3936bca8-4f43-4828-9086-870f19e8d097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:e3:e1:08:9b:88:3e:7b:1d:2e:49:6a:60:
                    f5:af:55:6c:a6:f4:37:91:0d:42:d3:a7:f5:97:3c:
                    30:83:3b:ff:d8:7b:3f:bc:f9:8e:9f:0d:b6:92:b4:
                    51:21:c1:06:b3:e5:b7:97:71:cd:32:1d:d9:2e:e8:
                    24:cd:91:00:6b:39:dd:6d:f2:0b:72:b3:b1:ab:0a:
                    67:f6:54:4c:7b:10:8c:a2:2b:b1:e2:11:25:8c:d6:
                    a0:43:a4:33:7b:03:8a:d6:db:78:3c:d0:3a:18:dc:
                    fc:c7:ec:28:71:d3:ba:bf:ad:5f:55:f8:6c:1e:b2:
                    bc:96:03:6c:be:ab:f6:1a:28:01:eb:05:58:f8:bc:
                    4c:37:88:84:58:a3:b0:dd:46:f9:7d:d1:ad:61:a8:
                    81:46:fc:39:5d:35:db:19:c6:17:00:8d:a7:1f:e1:
                    1d:88:62:9f:63:0e:cf:a6:05:65:15:25:cc:89:3c:
                    f4:d2:fd:8b:62:66:6f:a8:5b:a2:25:d7:95:77:8a:
                    ce:42:c3:d7:1f:f7:53:fe:2c:2c:8a:db:07:d9:43:
                    1d:8b:89:51:7b:5f:16:78:8d:af:aa:6d:55:8e:7c:
                    bd:bc:9a:5b:d2:9d:af:dd:5b:1c:c3:a5:da:f0:05:
                    73:04:b5:79:f3:86:8f:db:0f:97:0e:22:ca:16:29:
                    9b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FF:20:12:8E:BD:2A:ED:7F:A2:1C:D3:05:56:77:44:66:1F:96:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:57:13:e9:7d:0e:2f:e6:cf:86:fb:ac:7a:f8:fb:74:6e:74:
         4f:ca:36:ca:ac:41:de:f2:ae:b8:2d:b1:9d:7b:ca:a6:31:c8:
         8d:71:1f:05:05:3e:dd:aa:be:f1:91:fb:14:32:39:c5:e8:c3:
         17:56:fd:77:54:7a:61:36:9a:96:5a:2c:dd:eb:e2:2f:93:93:
         22:37:f8:7a:c1:42:f3:74:ca:f6:6f:41:da:37:b6:24:96:99:
         26:68:29:30:bc:f5:5e:bf:01:22:44:9b:97:e8:06:1c:d5:4e:
         65:68:ca:53:41:ea:6c:d4:76:b7:90:95:de:df:a7:d8:fd:a7:
         fb:ed:52:57:a5:e7:e1:d1:6c:18:2b:85:9f:75:ec:97:06:29:
         37:75:9f:b6:61:e5:f8:f7:b5:fd:88:98:0a:cf:35:42:bc:0e:
         27:be:b5:0f:84:62:3e:d9:ae:a5:37:21:b9:c0:2b:bf:e2:90:
         6f:6b:14:f2:cb:fa:5b:ec:29:ac:da:1c:4a:a2:05:6c:56:8f:
         6b:54:f0:97:71:ec:20:33:5d:33:37:0a:02:b6:c1:ac:b7:4e:
         48:a8:3c:1f:30:fa:86:11:ba:f6:5a:56:7f:fe:bb:98:4c:f9:
         40:d1:df:90:e0:05:57:be:5f:34:3f:ff:da:72:32:fc:3e:bd:
         b4:3d:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:33:05 2026 by rpki-client