Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa
File:                     acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa (raw, json)
Hash identifier:          I1qgtV+inSW8lmNpreQV4k93tNSZp87AxOT72IRnwGY=
Subject key identifier:   F9:7C:DA:64:C7:07:0D:7B:C0:5D:09:3E:58:A6:71:39:C7:4C:79:B7
Certificate issuer:       /CN=61880b54-4989-40ab-afdf-e5bdf8c244e1
Certificate serial:       010D0C9F4328584F4976B9D70A876402F9AD2800
Authority key identifier: A4:41:9E:25:7A:54:E4:EF:86:62:27:7B:D7:4D:BC:73:08:A6:57:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        141.193.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/61880b54-4989-40ab-afdf-e5bdf8c244e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/61880b54-4989-40ab-afdf-e5bdf8c244e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b9:d7:0a:87:64:02:f9:ad:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61880b54-4989-40ab-afdf-e5bdf8c244e1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f977d307-8711-4a1a-b6a4-d8fa1de84423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:34:62:f2:90:07:71:1c:7e:ea:ee:47:6f:
                    03:35:5c:ac:d1:01:94:f1:49:41:5a:9c:a4:22:93:
                    a7:f6:47:04:55:08:48:28:c9:19:c1:17:f2:94:cc:
                    b7:6b:2a:12:5e:1a:56:69:73:76:da:96:ed:05:2c:
                    bb:1e:21:62:11:54:ef:f5:f4:92:a0:e6:37:91:59:
                    9a:e3:c0:b9:8a:29:da:ce:de:ed:ff:0f:8d:30:1e:
                    8a:9b:af:77:18:b8:c4:fe:ad:c3:e1:32:f7:97:e5:
                    56:1e:6a:9d:d2:6d:34:20:d2:8c:82:01:ea:95:aa:
                    78:a6:bc:db:cb:85:7f:f0:9a:43:96:f6:9a:2e:f5:
                    a2:7f:64:8c:a1:4f:a3:43:d8:88:b6:38:2a:9f:dc:
                    ac:70:a4:73:ef:51:59:dd:e1:18:db:ed:3b:c6:d8:
                    05:b6:06:03:d2:f7:bc:3f:6b:ac:c0:a8:cd:0e:e6:
                    24:2e:78:74:f6:7c:4d:88:39:5a:ee:b4:9b:44:d6:
                    e0:f8:92:cb:09:1a:b6:d9:39:a1:f0:ea:5f:ba:2b:
                    71:7b:14:6d:be:62:d3:26:2d:36:f5:15:d5:89:18:
                    ff:11:f9:19:f3:eb:5d:6b:5f:e8:d9:2c:24:53:d0:
                    1b:9f:82:3e:2b:4b:c3:92:af:4c:b4:56:34:20:5a:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7C:DA:64:C7:07:0D:7B:C0:5D:09:3E:58:A6:71:39:C7:4C:79:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/acf9f3ce-1323-30bc-b50a-685dd5405f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1/61880b54-4989-40ab-afdf-e5bdf8c244e1.crl

            X509v3 Authority Key Identifier:
                keyid:A4:41:9E:25:7A:54:E4:EF:86:62:27:7B:D7:4D:BC:73:08:A6:57:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61880b54-4989-40ab-afdf-e5bdf8c244e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:4d:39:60:3e:f2:18:74:c1:ba:c2:69:a5:55:fb:8d:b5:
         84:00:bb:26:88:42:71:93:54:16:84:b6:54:a4:ad:3b:68:df:
         1d:9d:9b:42:97:77:97:6c:7c:f7:8e:07:a8:96:4d:f9:48:ea:
         3f:c4:13:bc:8c:a4:a6:0b:0b:78:98:22:8e:b1:5a:bb:5b:c9:
         e0:a2:7d:da:f1:7d:b3:a0:a5:14:d2:56:3c:5b:2f:b2:b3:b4:
         a4:3a:09:9d:07:96:aa:78:a3:6f:04:c7:fb:b4:4c:ea:22:31:
         db:01:ab:68:ed:85:03:c5:15:cc:e3:48:55:10:3c:5f:b4:8b:
         97:4d:7f:8c:09:35:4e:fa:42:9f:81:66:aa:5b:12:73:89:80:
         63:e4:f2:d8:6f:1d:23:45:3b:e9:23:4e:14:6b:20:08:21:5c:
         3f:81:28:c5:83:13:db:ef:c1:86:84:ef:85:e8:03:12:03:1a:
         28:e3:68:9b:91:e1:8e:49:1d:07:9b:15:da:7a:b7:a1:45:7a:
         5e:9d:a8:e3:b4:06:e8:c1:dc:a0:5e:57:ad:e7:f5:c7:fb:a4:
         65:c6:ab:86:b3:ee:c2:1c:9f:d9:63:8f:34:2f:01:48:7a:ad:
         0f:34:bf:ef:00:77:fc:01:26:d1:98:ed:5c:0a:0d:f4:10:65:
         e9:5d:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:54:59 2026 by rpki-client