Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa
File:                     4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa (raw, json)
Hash identifier:          kCC6jrsd7yrRQfhBtQQ0UsqO5vFKDlmGXIJvHH5iStA=
Subject key identifier:   93:CA:1C:15:FD:98:8F:C9:5D:8A:13:75:98:6B:6A:C4:4D:06:FC:4A
Certificate issuer:       /CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1
Certificate serial:       010D0C9F4328584F2527A9F8279968B6B651C0E0
Authority key identifier: 41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     33360
IP address blocks:        192.112.255.0/24 maxlen: 24
                          204.89.22.0/24 maxlen: 24
                          204.145.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a9:f8:27:99:68:b6:b6:51:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=b45579a2-1440-4110-a610-ebe609e1104b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:b6:5b:7d:5c:5a:97:9b:5e:7f:80:2e:d2:
                    64:b3:be:ec:0b:b6:d1:c8:d3:7e:74:83:1b:97:2f:
                    0d:9c:64:a7:db:5d:bf:9f:e7:2f:81:00:92:82:f1:
                    ac:7b:4b:f4:84:0d:cc:e7:12:b7:d6:5b:22:37:04:
                    ab:c7:fa:2d:ff:b2:2e:59:a6:80:b7:c7:e3:b0:86:
                    9e:84:47:3b:db:8d:e2:b0:71:b3:24:ac:b1:ce:c4:
                    ff:74:ce:a9:68:32:1a:b7:e6:ab:82:19:5d:8e:35:
                    d4:69:f4:c0:09:de:f0:4a:2d:3c:07:7d:82:0a:53:
                    e1:8c:d6:04:b3:b2:1a:0b:4d:7e:32:42:d4:52:36:
                    1c:af:06:0f:e2:71:92:15:e2:4a:6f:cc:74:ad:31:
                    48:21:cb:b0:69:1f:25:02:f7:95:ab:87:32:c1:34:
                    3d:d0:a0:99:96:06:99:e1:2e:e4:9f:83:cc:3d:36:
                    35:c6:45:7b:b5:52:f7:2f:ad:95:8f:4f:47:f6:f8:
                    ec:6f:ae:9d:a7:6e:d3:37:a8:b9:ac:86:7f:a5:9c:
                    e3:37:c4:1d:85:35:fc:fd:f2:2f:97:1b:d4:06:6d:
                    1d:7c:0e:44:14:04:4d:f8:f5:d5:fc:bf:19:5e:36:
                    7c:7d:d0:89:b8:29:08:fd:e3:ca:3b:94:81:0b:f1:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CA:1C:15:FD:98:8F:C9:5D:8A:13:75:98:6B:6A:C4:4D:06:FC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/4ea377c1-0df5-3ea4-8508-bc273ba7e803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl

            X509v3 Authority Key Identifier:
                keyid:41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.255.0/24
                  204.89.22.0/24
                  204.145.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:d0:71:cb:3d:83:67:56:2b:15:6f:8d:26:a4:61:f8:aa:
         7b:19:d3:8a:3b:83:23:43:52:3d:0e:2f:43:4d:b5:65:82:2e:
         b5:e1:dc:ec:c0:80:d3:66:b0:2f:ca:d2:5c:32:6a:7c:85:4d:
         5c:a5:57:55:19:ec:ef:d0:35:21:14:aa:40:c4:34:63:82:43:
         63:74:6b:93:d2:a5:00:75:55:2d:ae:ed:a8:7e:a7:7b:51:57:
         73:e2:5f:3a:05:d5:60:cc:27:a6:a7:27:d8:51:69:ab:03:a6:
         59:e0:68:cf:86:1c:44:9b:ff:93:3b:eb:37:1c:e2:9c:5c:2b:
         85:01:c0:fb:0d:a0:7f:c3:56:50:91:b3:48:4b:66:4f:7c:ab:
         8d:f4:18:cb:ba:19:90:f7:83:c6:71:a5:1e:a3:78:72:12:00:
         71:f9:23:a2:eb:aa:8f:50:d5:8e:51:5b:5d:ef:2a:a0:f1:00:
         66:11:f1:cf:e4:e4:0b:7f:14:64:e8:13:b4:f9:e9:06:c0:40:
         71:b9:c6:20:be:ba:cd:46:25:ac:b8:00:3f:26:0c:14:bf:a1:
         48:41:2e:68:f4:30:91:85:b8:76:75:d4:d6:f5:f8:09:87:b7:
         51:14:9f:e6:d5:5a:e5:71:7f:15:02:10:3f:03:f6:9d:3c:ac:
         45:21:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:05:46 2026 by rpki-client