Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
File:                     088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (raw, json)
Hash identifier:          Bi/ETf3r2g/UY/haXaNgPdoFZd4+c3w11auhv4uGAB8=
Subject key identifier:   65:C7:57:98:36:12:8F:82:61:A4:AF:C0:81:8D:96:D0:FF:1C:E7:DF
Certificate issuer:       /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Certificate serial:       010D0C9F4328584F480D444ED2F8CF1A4E2ABEA8
Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     393249
IP address blocks:        137.82.0.0/16 maxlen: 16
                          142.103.0.0/16 maxlen: 16
                          192.5.96.0/24 maxlen: 24
                          192.73.5.0/24 maxlen: 24
                          198.162.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:44:4e:d2:f8:cf:1a:4e:2a:be:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=9638928e-15df-4bbd-bc85-2ef610fa622f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:49:78:f1:19:f9:bf:6b:42:c2:f9:18:40:14:
                    d4:9b:b9:8a:f6:1a:15:d4:c2:ca:b1:42:3c:1f:0d:
                    bf:95:c0:63:96:8b:07:79:5f:c5:17:b9:87:84:4f:
                    00:4c:54:b4:2f:47:ea:46:6b:72:ab:1d:26:f3:a6:
                    bd:1e:72:dd:0f:02:fe:ec:2e:04:c4:44:49:4d:74:
                    de:8c:97:9d:e0:96:d4:f0:02:a9:4b:a3:a1:7a:4b:
                    69:83:ff:4a:c1:1a:e1:78:35:07:91:58:28:98:f3:
                    f5:24:a0:7d:55:4d:d6:5d:20:92:1d:aa:3e:e2:7b:
                    c7:14:12:68:63:7d:05:fb:ed:49:05:dc:9d:64:80:
                    f6:c2:77:60:41:3b:6e:ec:52:b6:7e:4e:5c:55:22:
                    9e:b6:88:03:52:c1:b4:04:d8:07:69:05:85:33:b9:
                    9f:46:60:95:c7:f3:f9:3d:43:f1:b6:ac:dd:59:d6:
                    5f:0f:a4:1d:1d:74:10:3a:78:91:cf:c7:f8:23:13:
                    2b:95:11:df:29:66:02:78:a5:9c:6c:27:c0:40:9b:
                    01:53:1d:ba:c1:d4:4b:2e:83:67:2f:0d:7c:9d:ac:
                    b9:d9:6f:c9:ca:b7:ed:6d:00:db:e7:54:74:8a:d4:
                    88:55:63:12:ba:f2:33:cb:8d:03:60:5b:cf:24:12:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C7:57:98:36:12:8F:82:61:A4:AF:C0:81:8D:96:D0:FF:1C:E7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl

            X509v3 Authority Key Identifier:
                keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.82.0.0/16
                  142.103.0.0/16
                  192.5.96.0/24
                  192.73.5.0/24
                  198.162.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:25:87:34:bd:2b:be:2a:ed:98:88:0e:1c:c5:08:b1:07:a7:
         26:a1:fe:25:d9:40:4b:81:97:34:71:e7:97:b8:c7:34:c9:c3:
         f8:77:70:61:98:79:2c:ec:7c:c7:77:77:2c:fc:ae:1f:14:bd:
         a5:0a:44:d7:74:13:16:d3:69:9f:88:e4:7d:74:98:52:d0:a6:
         f7:20:41:4b:02:fc:48:25:23:40:50:3e:74:c4:19:77:ad:40:
         7c:c3:34:62:65:0a:d0:84:7e:a9:9f:d4:b9:2f:b4:3c:f8:c1:
         07:77:92:87:a0:d2:e5:04:2b:08:0d:65:64:6f:8c:9d:fb:68:
         be:d8:9a:02:60:c4:c5:02:55:26:7f:40:dc:f6:91:83:ff:be:
         85:b2:11:03:d9:f8:07:e1:29:85:2c:fd:23:be:50:66:27:5f:
         3a:af:f2:8a:b0:04:c5:da:f3:90:a1:9b:1d:31:bc:c2:66:c2:
         de:94:ad:d0:c3:5f:f8:db:6e:be:5e:74:a2:58:b2:38:4d:c1:
         09:2f:e5:0b:c5:c7:2d:dd:a6:76:61:97:1c:61:5a:c3:d8:cb:
         77:57:43:07:52:99:40:b2:b2:9d:61:99:62:9c:da:85:4b:4e:
         b2:51:c0:cb:b1:03:e2:d9:9f:2b:16:72:83:5d:fa:d1:8e:a4:
         97:6e:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:29:38 2026 by rpki-client