Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa
File:                     b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa (raw, json)
Hash identifier:          IT4j43T6WYUCcXnLf2Z4PTru+11gmZms+DrRxIhyA88=
Subject key identifier:   3A:E6:7C:42:2A:BE:03:6F:37:D9:00:B7:00:4F:2B:2A:78:0F:AD:A5
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F4328584EF7176C253D742D28A75A8360
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     4476
IP address blocks:        192.68.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6c:25:3d:74:2d:28:a7:5a:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=ebd5ac2e-ac53-4301-b3ea-156f8ecc1246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:65:64:5b:4e:aa:20:81:2d:34:21:1c:60:
                    1f:a6:1e:bc:23:1b:16:18:78:72:99:56:36:75:87:
                    e3:0b:63:94:b7:a3:1a:aa:25:e5:1c:fd:e3:f3:88:
                    f4:0a:79:01:9a:0b:1c:ea:ec:90:0b:a3:6a:33:3e:
                    06:a3:f5:9e:6b:d4:71:dd:cd:46:bd:81:28:c2:31:
                    95:b8:20:d4:72:d7:02:24:95:18:5a:9c:cb:08:de:
                    29:52:86:d9:1f:94:02:c6:8c:57:4c:06:73:73:90:
                    65:6e:ef:ef:2b:16:3f:02:0d:fd:95:bf:e7:3d:cb:
                    17:c3:0d:87:94:f6:5a:1d:70:f6:7d:95:d0:75:79:
                    d2:3b:f1:ca:c6:b5:8c:fe:f8:b2:3c:61:f3:c2:9f:
                    55:aa:ee:d1:95:3c:21:a5:08:ba:e7:cf:62:78:33:
                    d5:5f:c0:c5:51:0f:e2:87:92:76:0e:5d:58:af:f9:
                    f1:31:f5:64:34:6c:8c:a7:00:72:28:81:cd:32:7b:
                    b4:47:a1:9b:9d:fb:15:64:37:39:61:37:68:65:3a:
                    15:96:82:fd:5a:69:ea:f6:98:ec:c8:7a:cf:47:cd:
                    71:53:6d:f0:77:0c:8d:7e:94:3f:e2:b6:ac:10:55:
                    b1:89:68:97:56:2f:3b:2b:40:73:2d:45:40:2d:52:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E6:7C:42:2A:BE:03:6F:37:D9:00:B7:00:4F:2B:2A:78:0F:AD:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:2a:b2:15:de:77:8a:1a:eb:a3:d6:d5:e5:8b:99:9a:97:b3:
         b9:90:85:6d:ff:47:f7:9a:0f:ff:f4:e9:ee:00:9c:6e:9c:7e:
         6e:fb:18:d3:c1:03:07:6b:af:eb:84:09:cf:5c:ed:15:24:a5:
         be:1a:21:00:ed:0e:c4:da:fc:15:4a:09:54:21:b0:c6:94:ef:
         9b:d1:b8:52:ee:12:00:7e:5f:9b:78:bf:91:e7:d2:a2:f8:69:
         14:72:dc:18:65:0d:32:8b:94:27:f4:03:d2:b7:0c:74:e0:3c:
         24:57:a8:10:06:ac:64:0a:2f:1d:76:e3:c7:c8:b6:e3:bb:5d:
         63:67:8b:33:04:6d:74:47:9f:6b:0d:3d:7a:86:40:2a:3a:cf:
         b1:eb:c0:0c:91:54:ff:a0:5c:42:a6:8d:90:5d:7f:37:eb:ee:
         89:96:e6:21:91:cf:11:f5:f5:b7:f7:82:8b:a7:4e:2e:6f:52:
         20:eb:bd:07:fa:73:05:ca:b1:0f:0a:ff:74:f8:9a:8d:b8:3a:
         db:d2:ed:73:05:20:7e:cb:9c:0a:9d:e0:47:5e:35:b0:64:eb:
         97:bf:93:de:94:93:e8:59:49:ed:1f:0c:86:46:3f:67:28:16:
         30:37:c9:f1:9c:b5:f8:30:d5:79:58:69:a0:51:a0:1d:33:1a:
         97:4f:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:29:09 2026 by rpki-client