Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
File:                     63c48833-2603-30da-8097-8c1712221517.roa (raw, json)
Hash identifier:          FUjSy4EUSaoh3XfYBCm8NpYdgQy/HZKpSQ2BcObmkec=
Subject key identifier:   DE:58:DD:06:D2:02:A9:3B:4F:03:CC:F8:85:B3:25:76:85:0F:72:22
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584F7A4D8B0A70C38B96407451C0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     30128
IP address blocks:        192.228.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8b:0a:70:c3:8b:96:40:74:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=7506e769-e2b5-4bd5-b5f6-6bde71d877e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:88:f2:30:d0:ac:3d:7a:02:ec:27:f2:86:
                    87:1a:21:ea:0c:fa:ba:57:30:91:c4:ca:2b:0b:f1:
                    20:d7:dc:4e:4f:6c:7c:69:32:02:de:1e:4c:ae:54:
                    eb:61:e9:42:29:54:5d:a9:f7:fd:6d:cf:da:6d:58:
                    7a:38:37:1b:6b:f6:8d:5a:9b:24:b5:ad:06:cb:b7:
                    49:55:60:58:2d:3f:61:81:02:1f:bd:4f:e1:a5:19:
                    f4:32:bc:bc:3f:19:fa:ee:3c:3b:cb:22:f7:4a:f5:
                    12:f2:22:e8:b8:f2:3d:22:70:a6:6b:78:0f:ef:33:
                    dc:8d:bc:19:ed:b3:d1:c1:1f:8b:24:43:62:c3:0f:
                    be:6c:54:66:12:a7:39:27:3a:4d:19:3d:8a:e7:64:
                    05:54:6e:42:25:27:a4:ff:df:54:2b:16:3d:f8:32:
                    d8:34:83:2f:68:41:e2:b7:f3:18:1d:f5:81:62:8c:
                    d1:2a:be:de:b5:15:a9:b8:36:06:7b:6d:4d:a8:ca:
                    b7:0a:af:24:4f:36:2b:a3:97:bc:97:c4:dc:27:9f:
                    1c:99:8f:85:66:34:04:6b:f0:f8:59:65:60:77:ee:
                    03:a4:71:80:8d:1d:82:0d:27:7e:86:96:e5:ac:00:
                    fa:4e:f4:70:a2:ca:c6:4c:d0:48:03:c9:c8:3a:92:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:58:DD:06:D2:02:A9:3B:4F:03:CC:F8:85:B3:25:76:85:0F:72:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:23:02:fd:b0:0f:ee:a0:45:70:b4:59:4c:19:59:8f:db:24:
         1b:01:78:3c:eb:d0:20:1d:d2:44:a4:4c:8b:30:48:b7:33:00:
         32:5b:e9:ed:d8:75:b1:86:95:fe:c8:06:f4:53:23:2c:86:54:
         d5:d9:a7:4b:16:54:32:20:e8:cb:05:c5:1b:17:0f:f4:48:2a:
         31:c7:db:76:cc:5d:bf:74:97:cf:59:40:2e:8b:54:4d:a7:3c:
         83:7e:a9:5c:30:e8:61:6a:30:4c:91:4e:50:95:bc:38:53:73:
         fa:f2:f6:d4:ee:2a:1e:c9:20:ef:98:08:c2:86:fd:8f:90:28:
         21:5f:df:4b:dd:4e:b2:e9:c8:48:0d:b0:ec:70:0d:66:7f:dd:
         d1:0b:77:13:d0:6c:e4:1e:ae:f0:4c:39:6c:81:4c:11:d8:5b:
         e4:72:0d:ab:2a:98:ae:f4:64:91:71:5d:55:d8:fa:af:45:73:
         ed:c6:7e:99:6f:8c:b7:88:dc:c4:19:9e:7c:3a:76:f4:79:26:
         ef:72:ce:d0:38:6b:40:b4:28:ca:c0:b2:74:9f:2c:e5:7a:b1:
         e6:96:7f:5a:c2:2f:55:b5:29:f4:14:aa:29:f3:2b:e4:e7:f8:
         90:8e:d6:93:2f:92:fd:17:82:53:9e:c3:f3:b6:05:10:17:8e:
         b4:b2:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:38:54 2026 by rpki-client