Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/a8e245fc-951e-3fcd-9679-08cebaa12375.roa
File:                     a8e245fc-951e-3fcd-9679-08cebaa12375.roa (raw, json)
Hash identifier:          JGljYfd98bXHnhgUUd1RfibW8Ypi4sdwv68Rfmf9eTw=
Subject key identifier:   76:20:BF:2A:AB:35:70:5F:1C:58:1E:CC:14:30:B5:5C:59:54:0C:B9
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F4328584F20F7BD0E13740AB6D98FEE00
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/a8e245fc-951e-3fcd-9679-08cebaa12375.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     2698
IP address blocks:        192.188.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bd:0e:13:74:0a:b6:d9:8f:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=08494a49-27f4-45f5-9743-d8a960d8c794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:10:50:93:da:84:57:7b:6e:ff:5b:04:ba:
                    62:4a:f1:73:47:e5:4c:c1:4a:66:11:cc:99:96:ce:
                    a8:2c:c9:a4:b3:b3:c9:37:6b:ba:6a:9b:94:70:bf:
                    e3:b5:03:fc:1f:ce:b6:dd:1d:b8:0b:61:8a:f4:be:
                    f8:5f:f7:c5:6e:67:ec:02:24:a0:fb:0c:97:0c:9f:
                    1d:20:2c:2a:4f:f9:11:ff:c7:be:2c:cf:b3:17:37:
                    71:b8:82:d8:24:c4:9a:f9:af:f2:e1:f3:fb:d0:72:
                    00:cb:d9:73:68:93:33:ff:ab:53:90:c6:8a:a9:d0:
                    27:cb:3d:a1:5a:e8:2c:dc:cd:93:83:fe:87:fa:f5:
                    22:7a:ee:ae:3a:a3:d9:36:44:32:02:88:ac:fe:8e:
                    de:8f:36:00:5e:37:85:b6:b0:8a:3e:16:dc:7f:b6:
                    9b:f5:57:6b:8f:cd:0e:ee:39:ca:72:06:13:7e:a0:
                    cd:f6:8e:4f:95:3d:78:e9:ac:79:dd:44:fc:d5:40:
                    5c:16:cd:ed:53:46:43:dc:4c:f6:e2:76:e2:5f:5c:
                    c2:e3:85:4b:fd:84:b8:58:bb:1c:e6:ec:51:d6:90:
                    fc:63:2e:73:20:ea:fc:6a:19:df:3e:c1:0d:1a:88:
                    40:a3:8c:36:bf:bc:b6:da:3b:b7:dd:48:32:8e:ba:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:20:BF:2A:AB:35:70:5F:1C:58:1E:CC:14:30:B5:5C:59:54:0C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/a8e245fc-951e-3fcd-9679-08cebaa12375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:af:d9:b8:2c:73:53:76:ee:a6:44:02:10:03:2c:de:e5:
         62:f6:94:07:e5:6c:7f:3d:5e:49:37:5b:b0:54:1c:77:6a:e3:
         29:38:8c:cf:23:a4:61:ba:17:55:14:85:da:59:60:f2:47:f6:
         ac:73:52:7a:82:12:fb:e4:5f:79:ac:b9:41:41:3c:12:e6:9b:
         aa:60:1e:e3:27:2a:a6:2a:d4:37:29:90:d0:de:c6:0d:bc:de:
         61:24:11:a8:e2:2e:07:14:a2:3a:63:df:78:9a:72:37:8a:5a:
         fe:27:88:84:bd:65:e5:d6:91:f7:20:95:da:6b:b7:30:55:21:
         14:6f:d7:1a:59:f4:06:43:f1:bc:58:b0:f9:1d:d9:32:72:12:
         79:ef:c1:c6:06:c9:15:98:96:eb:a7:66:bf:d6:8d:b3:b9:84:
         c3:d2:b4:c6:fc:ca:bd:8c:a0:91:5e:62:3d:3a:64:ae:94:77:
         05:98:6f:54:15:cb:9e:fc:2d:fc:88:19:39:a7:39:54:69:2e:
         33:a9:a4:ba:7b:c3:e1:96:87:9f:e5:95:35:0e:39:b9:01:3f:
         fa:17:e4:38:80:8c:b0:94:97:6a:c0:94:67:13:28:f2:a0:d4:
         5d:76:14:fa:d2:fc:32:30:ea:13:76:5c:b7:cf:b0:cd:c9:5b:
         b7:23:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:58 2026 by rpki-client