Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa
File:                     01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa (raw, json)
Hash identifier:          PighrDCLrSPaZGxT/P1X8YgUG47eGoEWOaTGXdSzfO0=
Subject key identifier:   F4:2D:D1:CC:5C:5B:C1:52:E9:48:ED:42:D9:63:67:6E:F5:75:5B:E9
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584F2527A6F29796B1957F257F00
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     293
IP address blocks:        192.188.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a6:f2:97:96:b1:95:7f:25:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=72cc13e1-0f2a-4301-9e4c-0605710d9329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:95:91:98:a3:49:13:0a:26:53:f7:7b:a0:
                    5e:19:71:53:fa:6b:3a:6d:e1:3b:8f:6a:23:5f:ba:
                    be:36:07:7f:a2:f8:57:d5:43:2f:2c:1f:fe:14:16:
                    3e:d4:c5:a6:fe:ce:63:04:cf:ec:b7:f1:f4:55:06:
                    82:21:c0:9e:7a:7a:9a:54:f3:1a:bc:96:c2:29:74:
                    63:d4:d1:e7:e9:9e:f1:45:98:d1:e4:e7:22:2c:f3:
                    ce:56:a4:26:ef:93:e7:c1:3b:2c:07:47:c1:a0:eb:
                    3f:e4:35:ad:68:38:60:96:1a:f0:5e:98:a7:90:8d:
                    97:38:98:43:16:bd:e2:2e:dd:0b:8c:70:b1:aa:cf:
                    f0:cd:c0:93:bb:a4:2e:3a:8d:e9:54:87:d5:75:82:
                    a6:1a:0f:a0:59:86:b2:f0:14:c5:c9:14:21:e7:3d:
                    c8:b3:b7:05:05:b4:e1:ec:95:38:f3:b2:0e:f9:03:
                    6e:13:c7:a0:50:12:54:cd:8b:bf:de:48:08:a1:73:
                    db:7a:f8:49:c0:1c:54:18:d4:1e:32:63:57:ca:2a:
                    e6:b3:c4:77:44:65:49:c9:89:1b:85:d1:2b:6c:5f:
                    ad:cb:bd:e3:d6:80:48:aa:6b:9f:09:63:c8:34:d7:
                    7b:58:b2:a7:ab:dd:dd:d5:6c:6d:91:5d:9d:1a:ef:
                    2d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2D:D1:CC:5C:5B:C1:52:E9:48:ED:42:D9:63:67:6E:F5:75:5B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:6f:f0:35:51:a8:7f:5e:35:86:6a:f9:60:c5:3a:e3:6a:
         9e:10:01:e3:7b:63:a9:46:b1:0d:4a:b1:15:d1:48:21:d2:c3:
         99:61:6a:39:1f:b0:d5:71:80:83:93:cb:d8:48:e6:32:b5:d7:
         1c:13:dc:d4:ba:b9:b3:43:f3:d2:cb:ca:1e:4c:a4:04:98:2b:
         b9:da:bc:4a:d7:df:df:84:70:8b:15:e0:fb:70:3d:9d:9a:b2:
         e2:91:48:15:23:41:7c:92:eb:da:79:81:32:d7:93:8e:46:93:
         c2:ee:57:b1:d8:44:9f:92:7d:6e:bd:38:3b:39:09:70:a2:b7:
         2d:3c:28:f3:88:2c:a6:34:77:e8:68:5d:c7:1d:a3:b0:78:1b:
         33:7f:8f:70:21:51:92:0b:c0:c7:40:64:07:db:fb:a8:f5:ad:
         ff:a6:9a:9b:a4:d3:81:c9:1c:69:e8:c0:04:56:20:8d:10:5c:
         6a:ac:d7:dd:0e:90:80:48:f4:e3:eb:08:19:ec:69:c0:06:dc:
         c2:e2:8b:ac:92:25:0e:02:d8:14:e3:76:24:d5:23:2e:c0:a1:
         3a:07:11:41:2d:6c:02:79:31:32:0a:3a:4e:2e:69:62:e4:b9:
         9e:eb:a9:33:a0:fd:ed:67:34:72:fa:ce:4d:a8:c1:a9:ab:a8:
         9f:2e:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:57:20 2026 by rpki-client