Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/08c7105b-ff65-3a79-8eb1-ec7d67ef8431.roa
File:                     08c7105b-ff65-3a79-8eb1-ec7d67ef8431.roa (raw, json)
Hash identifier:          352r2d1YXbLh5GvTQtdeiqS8ZrefbyPuXx6MFoDl5Ic=
Subject key identifier:   34:DA:E2:E5:9F:F8:13:D3:7F:E5:EA:98:A0:D5:E8:7B:3B:74:40:82
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584F1B62478E4E040CB24E383A00
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/08c7105b-ff65-3a79-8eb1-ec7d67ef8431.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     33164
IP address blocks:        194.61.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:47:8e:4e:04:0c:b2:4e:38:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=9e1c8930-38f2-458c-bfb5-a5c326f633cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:04:bb:05:b5:92:56:be:7e:7d:06:2d:84:
                    bd:5e:77:36:62:84:94:b4:9b:c5:ec:bd:52:44:31:
                    a3:67:d0:85:44:04:e4:36:98:70:04:46:a5:72:7d:
                    63:2e:e3:79:be:43:8d:4e:0c:1f:35:65:05:cf:46:
                    19:5e:90:9e:15:cf:0a:db:db:65:37:3f:5c:fd:5a:
                    63:9b:74:f1:f1:1a:c1:12:7a:fa:69:13:d8:26:ed:
                    50:5d:70:39:69:81:33:e0:45:72:f4:c6:5e:04:76:
                    9d:c6:3c:8c:a9:33:ab:1f:8a:0b:76:86:b4:d3:58:
                    92:bc:c9:dc:7c:49:6e:13:4d:e4:78:04:2e:4c:60:
                    90:aa:7e:85:7a:03:b1:61:74:b8:14:5a:9b:24:d9:
                    65:d0:b7:20:07:bd:ef:a6:b1:5f:1f:4a:f4:c0:4d:
                    15:5e:1c:c2:c2:36:e5:dd:b7:1c:12:03:56:eb:05:
                    69:ab:0d:8d:00:f5:6e:4b:fa:af:1b:9a:ba:33:89:
                    85:6b:49:ec:f4:c9:77:72:0a:0b:b3:54:83:30:53:
                    d0:38:2c:c3:de:62:4b:af:61:7e:43:b2:60:aa:88:
                    36:50:19:63:1e:94:b7:4e:95:88:64:96:ab:cb:a3:
                    79:77:6e:10:1f:06:e7:70:9e:e2:d5:06:a6:ac:0a:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:E2:E5:9F:F8:13:D3:7F:E5:EA:98:A0:D5:E8:7B:3B:74:40:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/08c7105b-ff65-3a79-8eb1-ec7d67ef8431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:56:52:a1:7c:75:4e:d1:48:5a:93:2e:fd:6e:09:c0:10:68:
         88:6b:6a:24:6e:16:d6:41:80:a2:1c:e8:f0:1f:68:56:b7:25:
         97:6e:ab:61:99:dd:18:b0:c2:cd:b0:29:e4:85:e4:82:22:fe:
         ce:59:b3:c3:4b:e0:b5:03:81:1b:79:68:55:96:9b:a9:04:26:
         d1:0a:42:25:37:0d:c3:02:37:81:cd:ea:bb:df:71:52:95:b9:
         ab:be:4e:b4:09:55:71:0c:61:a8:6c:bb:ce:47:78:d4:3f:8b:
         8f:a3:28:b9:63:a0:ae:61:d3:da:e2:27:82:35:85:86:04:ae:
         81:75:39:8a:1a:6a:a6:ef:9a:f9:09:0b:06:fd:a1:a4:dc:ba:
         e9:82:90:47:7b:f0:a9:e3:1a:a5:ed:48:5d:7b:68:89:4d:07:
         1c:66:7c:b4:c8:b3:55:4c:ab:03:4b:1f:6a:f2:b1:4d:64:76:
         b6:86:06:8d:3d:69:52:ca:57:bb:24:bd:e2:ce:12:44:7a:7c:
         c7:8f:d0:23:50:dd:60:36:56:e2:f9:c9:6f:68:2c:18:96:8b:
         b9:7a:4c:67:90:e3:09:24:d2:8b:05:7e:8d:f5:50:78:e1:e8:
         a1:a2:04:50:b9:04:d3:b1:b9:da:e2:e4:49:a5:2f:a5:84:92:
         8b:d3:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:38 2026 by rpki-client