Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
File:                     10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json)
Hash identifier:          Jo4pCDqV4x1x8uE822WyDqu2jJTBfNOsDG45sjqOMaE=
Subject key identifier:   B7:43:F6:CD:6B:5A:68:D1:5B:82:D4:89:93:2C:80:87:DB:1E:BB:F6
Certificate issuer:       /CN=8c902da3-488d-44d9-9833-f1295a9fd887
Certificate serial:       010D0C9F4328584EA7872F052A66AEE714F4B3C0
Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3925
IP address blocks:        209.165.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:2f:05:2a:66:ae:e7:14:f4:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c39ad221-360c-4a5f-a31e-962445a3cc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d7:8b:94:08:c2:4b:9b:bf:4c:c6:14:e8:b0:
                    00:7b:a5:e8:58:a6:8b:26:b4:03:40:36:ae:25:9e:
                    ed:20:0f:eb:03:90:91:d7:41:8a:84:4f:95:72:91:
                    5c:45:57:3c:9e:8c:73:f4:3f:a3:dd:ea:56:37:bb:
                    84:a2:7b:85:ca:3a:a8:19:02:d7:6b:4e:93:31:4b:
                    54:c9:09:0c:6b:c1:2b:37:88:90:28:89:78:50:73:
                    1d:b5:02:99:d7:e5:07:4d:7b:d7:90:59:26:b9:d0:
                    81:41:18:25:1f:24:b4:fe:fe:48:e1:73:48:af:34:
                    4e:55:a0:e2:fb:78:24:c4:02:c3:3a:07:6b:6f:29:
                    1a:cc:87:0a:8d:c5:20:6e:98:62:1b:1b:6e:09:8f:
                    ec:0f:94:f3:90:87:22:82:39:d8:5f:90:f6:2a:19:
                    ec:6d:ff:a6:aa:82:10:92:51:e8:c6:84:a6:5c:c5:
                    10:54:1c:1e:d0:2c:a0:25:c7:27:41:b1:8c:f5:99:
                    62:67:3b:ce:7f:57:38:2c:84:59:4a:65:d5:d1:bd:
                    44:8a:40:e5:1c:d8:fc:0d:96:61:f7:04:bf:a2:e2:
                    80:06:7c:a5:a5:29:ca:0a:40:d4:63:68:65:c4:89:
                    b2:6f:4c:c0:a3:f9:45:82:a8:ce:09:3b:87:e5:2a:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:F6:CD:6B:5A:68:D1:5B:82:D4:89:93:2C:80:87:DB:1E:BB:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.165.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:44:a5:e7:fd:39:40:fc:5d:e1:94:f0:e6:49:13:7e:ed:
         25:37:01:7c:01:8a:ea:05:63:e7:4f:2d:8a:04:c1:11:40:cc:
         91:85:45:10:a9:00:80:88:10:c2:f5:df:05:f8:22:b5:32:9a:
         32:e2:50:36:fc:57:e1:14:d8:3b:c4:29:7f:ea:00:0f:41:a0:
         f5:74:ee:3b:db:fe:73:35:3e:8d:dd:f7:0f:82:09:c3:5a:ca:
         75:f7:ef:1c:a7:08:cc:04:4c:20:2b:84:68:66:05:0a:78:47:
         69:a5:5c:de:ce:8b:7e:16:2c:4e:19:6a:7b:c3:49:bc:f0:95:
         b0:7b:2c:f7:17:2a:ab:5c:67:12:a6:8e:d9:ff:b5:ba:0d:ae:
         27:15:9f:d6:6c:0d:6c:67:60:48:89:0b:9e:b1:93:36:4a:ff:
         fb:c4:01:85:af:88:95:3e:fa:da:cc:1d:90:6e:ec:4e:fb:4b:
         f4:c5:0f:7e:78:66:a2:c0:8d:53:56:a5:10:aa:24:ee:79:c3:
         42:a1:f5:40:6c:f5:2c:a0:4c:a5:05:dc:20:29:ad:e1:41:57:
         be:16:f1:c6:f4:66:19:4f:0c:4e:19:77:2b:cb:7a:45:4d:53:
         c1:14:91:21:fb:da:f7:62:4b:08:89:73:36:ea:35:32:6d:7b:
         7b:c7:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:18:18 2026 by rpki-client