Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6761ba18-0133-3f90-a8df-8cb8af2c3419.roa
File:                     6761ba18-0133-3f90-a8df-8cb8af2c3419.roa (raw, json)
Hash identifier:          2IrNy1LZEaQyL11sKT3UpD+dTFxDcqF7PhXjGzq5JMo=
Subject key identifier:   71:AE:88:0B:21:AF:AE:9D:D9:A6:23:65:EC:FA:7C:BE:9B:27:78:50
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F7E7D98AAF6097454B151E600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6761ba18-0133-3f90-a8df-8cb8af2c3419.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     15169
IP address blocks:        192.179.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:98:aa:f6:09:74:54:b1:51:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=2e000e4d-15ba-4748-a76d-941c1416c6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:ce:ae:2c:5b:9c:24:14:7c:a9:b1:72:65:
                    d9:4b:e2:e4:92:e7:e4:af:1c:4c:bf:85:49:c3:fd:
                    47:ec:c0:4e:ac:dc:4f:26:7d:40:e6:63:a7:23:a0:
                    06:a7:eb:54:0b:a8:1b:c0:51:ff:d8:9a:35:c5:eb:
                    af:0b:cd:ef:6c:34:83:23:e1:20:69:a6:c7:50:16:
                    ec:18:7b:0c:6b:cb:98:ac:2d:51:40:34:46:9f:68:
                    3a:b5:7d:b7:65:2b:bc:94:c9:22:f2:a7:35:f3:88:
                    00:e5:e6:e0:31:5a:de:1d:30:7c:2c:98:9a:62:a7:
                    07:5b:a2:4b:7a:de:fc:25:3f:db:a7:17:06:20:3c:
                    98:a3:87:55:ac:2f:f8:1d:f6:94:ee:8c:fd:1e:2e:
                    93:00:13:97:da:ac:5e:a0:91:5c:45:d0:aa:e5:9d:
                    17:11:8b:23:63:b3:63:59:4d:74:6b:4d:69:72:45:
                    5f:59:d6:ab:96:05:88:d6:8e:5c:df:51:b9:bd:a7:
                    57:e3:d6:98:c5:18:71:05:4b:c1:c3:85:a5:5d:25:
                    6d:42:35:83:79:5c:ae:15:54:00:7e:0b:ff:79:5a:
                    63:54:bc:21:f0:23:8e:48:20:3d:df:42:6a:1b:32:
                    1e:82:b0:b1:93:1c:ab:b4:25:53:af:a6:6b:d2:dd:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:88:0B:21:AF:AE:9D:D9:A6:23:65:EC:FA:7C:BE:9B:27:78:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6761ba18-0133-3f90-a8df-8cb8af2c3419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.179.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:62:88:59:b0:da:07:74:33:10:01:7a:e9:45:2f:4a:a7:
         2a:16:52:1c:88:82:15:2c:ff:8a:f8:45:a6:33:ff:50:a7:d5:
         63:fe:06:86:e2:07:2a:f7:18:13:fb:dd:c5:b4:10:17:ff:c6:
         05:6d:9d:75:d8:f8:be:f2:6e:7c:d3:2b:84:a4:0b:f2:1a:6e:
         18:41:37:86:9a:c2:97:9a:26:fc:3d:fa:9c:3f:24:e2:bf:c0:
         80:fd:65:b7:1b:74:8d:b4:4c:70:dc:1b:c5:d9:53:78:0a:8d:
         65:71:e2:8b:7a:09:80:61:6f:9d:79:ab:83:c6:83:15:4e:17:
         e0:df:36:50:16:d4:8b:56:0e:ff:92:63:40:ee:0e:bd:c8:47:
         c7:a1:fb:aa:c7:8e:0a:97:6a:71:02:5d:67:0c:aa:f5:c8:25:
         bc:eb:4b:73:6f:5d:31:70:bc:93:ff:d0:17:12:95:c7:c9:4a:
         20:8b:b5:a7:1a:25:c7:28:16:b8:a7:c1:96:bc:92:88:2f:b9:
         52:00:31:99:8a:19:28:b5:50:2b:ed:71:65:0c:be:35:b5:f5:
         78:92:2f:f1:db:5e:a9:e5:16:34:b3:8f:43:83:e1:93:ff:19:
         09:3a:54:cb:07:f6:d4:e9:1d:58:43:6c:6d:82:66:dd:94:42:
         c3:a8:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:36 2026 by rpki-client