Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa
File:                     cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa (raw, json)
Hash identifier:          T7IxZPfkPuU824R6V9F8yJKnU0wrkhMINnAcXGZAOjY=
Subject key identifier:   A6:0A:9A:0F:1D:E3:53:37:02:6C:D4:12:23:AB:17:6E:52:45:88:C4
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584F498BA63401FAC58A4CF21D40
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401015
IP address blocks:        192.5.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:a6:34:01:fa:c5:8a:4c:f2:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f57036f5-5b73-432c-ab08-f65b9d25e98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:e6:1c:21:25:67:13:c5:f0:82:b7:29:3c:
                    b8:de:51:95:9d:0c:17:65:60:28:80:81:10:ed:4b:
                    36:77:16:17:7c:be:bc:0b:55:d8:99:93:78:3f:aa:
                    02:85:2f:77:d8:af:58:38:67:15:ea:11:37:b9:bf:
                    d5:53:3a:b3:08:14:b9:e4:b8:b5:2a:5a:87:7c:58:
                    90:2b:4d:37:0b:0e:51:a5:21:80:16:ac:1d:13:47:
                    ba:ff:00:06:ec:df:f4:bf:a4:08:89:80:e3:10:5f:
                    87:c9:48:b5:d6:1e:af:c2:d1:21:43:5a:35:ab:d1:
                    d1:52:dc:ed:5f:f5:2b:bf:a4:e8:e3:4f:77:9f:da:
                    e8:b5:b4:77:c2:9b:2f:8f:3d:77:fa:44:f6:1d:09:
                    e1:ce:e6:c0:b4:b5:71:c7:0e:5c:bf:2f:00:9f:95:
                    c5:43:dc:15:ce:8e:00:e9:cb:a2:1e:11:a9:e9:65:
                    a3:5e:5a:bd:b8:72:8a:88:86:c9:33:20:01:48:7b:
                    ca:3d:6d:e5:38:a2:01:b7:37:11:d1:e6:9b:df:e8:
                    42:72:3a:8e:26:b3:ae:24:eb:73:ab:2c:b2:ad:da:
                    ca:a3:c2:59:86:34:24:4a:5b:09:41:0a:6a:fb:50:
                    12:8a:15:a1:28:ef:9e:cd:0e:bf:37:10:9a:9e:d3:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0A:9A:0F:1D:E3:53:37:02:6C:D4:12:23:AB:17:6E:52:45:88:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/cce91915-3f00-3e9c-b2ea-b5ff8e22a03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:c9:fa:04:0b:c7:9e:3b:65:09:13:14:97:d3:e6:f6:75:
         72:a9:f5:66:44:a8:de:c2:b8:33:89:b9:f0:57:3f:c0:be:1e:
         22:51:78:12:1c:b8:78:38:74:70:fd:be:41:7a:86:b8:1f:bb:
         20:ec:23:84:cc:3d:05:b2:0a:20:64:b0:39:2e:1a:12:37:83:
         2b:47:7d:66:fc:c6:e8:1e:2e:3b:2c:6c:7f:ba:1d:da:0d:24:
         6b:db:1e:cb:1b:39:4c:5a:26:c1:92:08:16:3e:0b:c4:47:2d:
         55:3d:de:a9:06:c2:c9:c6:cf:f1:ae:82:42:5d:98:7b:74:4a:
         a8:5a:26:d1:21:00:74:fb:75:45:fa:89:42:e2:47:3e:b6:1a:
         d5:30:a9:b6:03:18:2f:30:e7:3b:54:3a:5e:75:d8:ef:c1:16:
         a4:0c:79:df:44:75:a2:4a:91:75:0b:1a:50:66:22:ed:12:12:
         b3:11:66:fd:7e:65:f8:7e:0b:bb:0e:49:9a:4e:4b:7e:2b:08:
         68:94:d7:6b:39:7d:21:95:fb:b3:d2:64:ca:2c:75:7d:bf:75:
         c6:97:56:63:f6:01:81:40:77:36:43:1a:32:49:2f:8c:14:52:
         a9:33:eb:aa:5f:d4:b3:e5:2e:d5:6d:ff:51:06:93:a4:57:26:
         9a:a2:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:44:44 2026 by rpki-client