Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa
File:                     bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa (raw, json)
Hash identifier:          rWSg6S5lt1HKUWDulcAKlUP+Pc3al9Eyl+YnJWA1vHs=
Subject key identifier:   06:28:79:DB:4B:3F:E8:63:B3:3F:42:D8:6B:1D:6B:82:EC:01:6F:C2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F23C2573CAE4DF44934DD6B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     15169
IP address blocks:        192.178.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:57:3c:ae:4d:f4:49:34:dd:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=8b732625-e412-415b-a16f-34e3d2f972dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cc:49:a8:ae:9a:28:0a:09:11:94:37:45:e5:
                    c4:a8:75:f0:f9:f9:e9:cb:b3:84:07:d7:7f:96:0f:
                    9a:ae:24:04:45:2f:2d:1d:9c:0b:f3:a4:30:c1:bc:
                    da:df:16:18:8d:b6:29:3b:23:c6:6e:fd:0a:88:c9:
                    e4:ad:9b:2b:47:83:87:86:7f:70:ac:5d:2c:0f:aa:
                    52:24:4d:16:60:9f:6e:a4:fb:eb:42:ec:ca:cb:d0:
                    f9:c4:f9:54:f6:ee:7f:f7:4e:77:1e:e9:0d:d4:c9:
                    2c:af:0e:c3:26:78:e7:a4:19:81:83:04:cc:74:0c:
                    cd:bc:22:98:fd:2e:4e:a7:cf:aa:ef:54:69:2d:d7:
                    ed:5c:c4:94:3e:dc:97:72:df:d4:fc:ad:69:4d:1e:
                    f6:82:98:65:c7:e4:41:14:2b:d2:db:e7:40:24:33:
                    1d:ef:9b:10:33:a6:be:1e:24:d3:90:fe:3e:fb:61:
                    bb:c6:9e:38:df:60:5b:e7:22:68:03:05:02:f3:86:
                    b9:cf:f0:2c:17:e8:1e:d1:00:1a:51:2a:17:ad:9a:
                    26:87:b6:89:47:9c:cc:93:42:45:e5:fa:6c:6a:bd:
                    58:8c:46:e7:0c:15:02:8c:94:31:f8:52:3d:09:0c:
                    f2:ba:c3:a6:1f:2d:2e:d9:e9:b9:a8:3a:1b:09:4f:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:28:79:DB:4B:3F:E8:63:B3:3F:42:D8:6B:1D:6B:82:EC:01:6F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:a1:e0:75:59:97:b9:96:81:ab:b1:7b:c4:99:c9:da:0c:
         61:af:f3:ab:21:4e:c5:54:23:ed:48:e7:4c:90:f6:83:5c:fb:
         cf:af:aa:b8:a8:ae:5f:b5:8d:2b:b7:17:22:20:eb:9e:a5:a6:
         1b:c6:8f:66:d2:dd:4f:ef:b8:11:fa:b3:fc:cf:fa:7f:05:69:
         46:6a:15:fc:4b:86:01:3f:4b:0b:59:5c:63:aa:80:32:59:bc:
         f3:a2:c7:b8:d3:5e:61:f2:74:ef:aa:b4:23:3d:e3:f4:1d:b6:
         51:44:28:d0:73:04:e5:d8:cb:23:b0:b1:68:3a:7a:9e:56:84:
         f5:a1:78:37:95:30:6d:4d:da:1b:3f:2b:48:14:ac:d5:41:2f:
         05:b0:62:2f:c4:29:cd:d8:78:c2:97:bb:c7:af:f4:44:02:3d:
         80:cc:05:76:ed:4a:e9:8e:08:3d:9b:4a:f2:e4:01:b3:55:8e:
         dc:b5:45:37:6e:58:d8:8a:07:af:47:f8:f2:27:0d:30:b5:bb:
         b2:e9:17:46:3d:8e:dc:47:53:d9:ad:af:43:d6:75:47:61:b2:
         fc:8c:77:8d:18:2a:be:db:4f:65:36:2e:b0:40:2e:7a:6f:bc:
         f8:90:fa:ef:73:52:0f:e8:db:83:16:ac:d8:5e:67:55:96:66:
         69:e2:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:05:47 2026 by rpki-client