Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/a8454264-ecb7-3a71-bdec-cf0e079c0b91.roa
File:                     a8454264-ecb7-3a71-bdec-cf0e079c0b91.roa (raw, json)
Hash identifier:          8Jey2fnQhLopd34QzvWauOyDlPSUCRPRaoLl2vUZy4o=
Subject key identifier:   11:7A:EB:FF:7A:37:DE:B7:9E:8A:69:3A:33:7B:86:8C:77:27:65:04
Certificate issuer:       /CN=38d5b367-bb53-4c84-896e-491eb23acc04
Certificate serial:       010D0C9F4328584F374D23523D3491F316DC5D00
Authority key identifier: 8D:95:D1:A0:46:37:EE:75:31:AC:D6:94:A4:18:A5:8B:6C:F8:6F:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/a8454264-ecb7-3a71-bdec-cf0e079c0b91.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     394099
IP address blocks:        192.159.119.0/24 maxlen: 24
                          2620:ce:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/38d5b367-bb53-4c84-896e-491eb23acc04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/38d5b367-bb53-4c84-896e-491eb23acc04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:23:52:3d:34:91:f3:16:dc:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38d5b367-bb53-4c84-896e-491eb23acc04
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=ffa5cd38-9ee6-440e-8048-26a8e043c1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:b8:4a:45:65:0d:cd:56:36:02:53:05:8e:
                    f8:10:c7:3e:51:07:a2:29:e8:f4:51:25:1d:30:44:
                    94:ac:d5:82:c6:cb:dd:4d:58:6d:1d:a3:0f:a0:f4:
                    b3:ab:22:5b:79:1d:e7:bc:42:ad:f5:b7:b5:d5:d2:
                    fb:c6:fe:02:ae:ed:f5:9b:28:0c:f5:c0:00:1e:04:
                    da:6e:77:5b:b3:f9:bc:b9:f5:03:b7:d9:ed:d9:34:
                    48:49:0e:86:d2:14:c3:c3:d9:29:6d:de:7c:dc:6c:
                    1b:db:08:6f:35:e3:97:0d:bf:78:3c:8e:e4:63:4a:
                    0d:10:56:66:79:fa:d1:c2:17:f5:b1:6d:34:25:51:
                    20:23:42:cb:c4:0b:11:1f:87:63:14:01:f8:4e:13:
                    ca:8a:8d:84:43:04:bf:97:a6:cb:bc:7f:50:3f:f5:
                    f7:e8:33:53:b3:65:91:b8:58:bf:dc:45:61:77:75:
                    27:66:7d:d4:a9:74:30:5e:85:aa:1c:69:0f:0d:1e:
                    29:29:22:7d:d8:1e:10:ff:16:05:4e:9e:e6:b1:e6:
                    9a:b6:29:4e:2a:c3:28:31:af:73:59:77:c8:67:0d:
                    c4:13:10:a5:b8:fb:b3:6d:67:58:c2:75:8e:6f:8b:
                    35:c1:45:87:80:c3:0f:8d:4c:3c:8b:9d:b5:e6:1d:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7A:EB:FF:7A:37:DE:B7:9E:8A:69:3A:33:7B:86:8C:77:27:65:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/a8454264-ecb7-3a71-bdec-cf0e079c0b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04/38d5b367-bb53-4c84-896e-491eb23acc04.crl

            X509v3 Authority Key Identifier:
                keyid:8D:95:D1:A0:46:37:EE:75:31:AC:D6:94:A4:18:A5:8B:6C:F8:6F:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/38d5b367-bb53-4c84-896e-491eb23acc04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.119.0/24
                IPv6:
                  2620:ce:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:fa:9d:93:d6:2c:4e:e1:8a:c4:d6:39:e4:b5:95:8a:11:42:
         19:36:6e:7b:73:e8:eb:c2:8a:72:5b:37:1f:be:90:1a:35:61:
         40:04:58:4b:4b:20:ad:93:a9:ca:15:81:f9:ac:04:1e:51:fb:
         20:af:32:81:d5:00:47:54:20:01:3a:f9:56:dd:20:d3:ca:85:
         da:20:13:03:ab:d8:99:45:21:ea:eb:90:69:50:6b:62:55:28:
         6f:6f:d6:d8:2e:ec:b3:27:b6:97:6f:a2:17:5a:1f:65:67:a1:
         70:57:7c:7e:4f:92:d2:11:81:3e:f5:26:ef:3f:9d:b2:83:0a:
         8e:39:9e:4a:4a:e1:08:2a:0a:9c:19:a1:f9:53:74:ea:d1:94:
         d7:a1:da:57:69:0e:2c:52:1f:e7:39:13:48:d1:11:6d:c1:3e:
         38:b1:d7:27:39:bb:94:f9:ac:81:f5:ca:64:00:64:84:40:b4:
         48:0b:aa:a9:36:83:c2:33:95:af:34:45:15:ea:9d:db:4c:c6:
         3c:ac:f1:56:a6:1e:cc:a8:7e:40:91:d4:c7:49:d7:04:41:5d:
         31:ff:8e:66:09:e9:10:f9:2f:ac:25:4d:7f:e0:6a:ee:fb:7c:
         84:7c:e7:1d:60:ee:a9:65:19:b8:77:f1:dd:9e:2d:66:9f:95:
         e1:df:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:58:05 2026 by rpki-client