Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9df7c81-b1bb-3605-a674-b12441e30456.roa
File:                     c9df7c81-b1bb-3605-a674-b12441e30456.roa (raw, json)
Hash identifier:          bK55XnfuRkaoCp9ZmqoFKQkMt3eyPwayTP3owWaderI=
Subject key identifier:   BA:17:8C:B1:BB:BC:4F:60:4F:8D:5E:C1:F9:34:68:41:89:E0:F6:AC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F024241E18B1D96CDE8D89540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9df7c81-b1bb-3605-a674-b12441e30456.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     15169
IP address blocks:        192.179.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:41:e1:8b:1d:96:cd:e8:d8:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=342040d6-cb7c-4f6e-87ad-597a7fc97f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:2f:23:3f:f2:17:fe:b9:ca:91:99:a9:bf:
                    d1:a1:17:2f:42:26:1b:83:7c:9d:f8:df:46:9b:c3:
                    fd:5c:96:41:a4:26:dd:f9:b7:82:f9:7e:96:04:1d:
                    49:e1:ae:d3:33:17:60:d0:1c:4e:d5:cf:96:4c:79:
                    0a:f1:07:11:97:3e:6e:2b:8c:62:6d:ee:ea:32:3e:
                    6f:b4:c0:53:55:72:ce:a0:9f:e5:61:97:5d:b4:86:
                    d7:b7:80:5a:a1:70:06:94:ae:68:4e:1a:ba:a5:4f:
                    f5:88:79:c6:de:2f:59:9f:eb:e0:e5:3d:63:b5:af:
                    b9:30:0c:ae:1e:7f:3e:31:e6:a1:7f:09:40:3b:51:
                    1a:5d:72:af:7c:82:d5:17:7c:87:87:d4:38:9b:25:
                    d3:00:31:c2:c0:b1:68:3b:0c:86:23:43:f9:93:4a:
                    7c:ce:18:f0:60:be:e4:cf:d5:5b:85:be:70:88:8f:
                    6c:b5:74:75:b8:5f:71:5c:7c:8c:d3:d0:7a:9a:eb:
                    d9:b0:c5:93:7a:d2:be:44:0d:38:c6:95:89:6d:84:
                    9f:11:3a:01:fc:2f:ef:e6:c7:ee:ee:ec:85:0e:46:
                    f3:34:16:fc:2d:9c:02:73:e5:67:fb:03:71:b6:e5:
                    dc:e6:2e:9f:08:79:b5:30:fa:13:58:dd:c5:f7:8d:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:17:8C:B1:BB:BC:4F:60:4F:8D:5E:C1:F9:34:68:41:89:E0:F6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9df7c81-b1bb-3605-a674-b12441e30456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.179.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:28:88:bd:96:2e:91:78:d0:51:3e:78:19:95:b3:67:b7:
         9e:cb:03:80:d7:ca:32:d1:ed:ef:51:ed:96:2c:93:b9:87:13:
         58:6a:0b:3a:e6:e2:9d:90:08:f3:fc:57:02:49:22:93:68:99:
         c2:be:29:36:f1:3c:98:e4:1c:bf:18:87:bb:da:a9:3e:2e:a5:
         2a:5e:39:f8:38:4d:ae:5a:a2:da:e5:84:46:cc:d6:3e:22:77:
         4f:d4:9c:71:94:ce:0a:74:74:c4:54:7e:9f:cd:00:12:a7:bf:
         b0:43:f8:bb:a6:b0:6b:71:b6:d6:07:bd:2a:b9:a1:45:c3:ac:
         85:51:67:0d:1d:a7:6d:ca:25:6c:21:b9:82:b0:a1:2e:a3:c4:
         e8:f8:ab:2b:2b:dc:ad:8d:5f:79:a6:53:6a:f8:c5:92:f7:07:
         1f:1b:ce:ab:73:be:f5:a5:7c:09:36:f5:a9:cb:44:c3:c5:2d:
         8e:3a:50:50:0e:29:81:7d:91:1e:52:99:ab:52:ee:74:1d:4f:
         d2:d1:82:1c:38:af:74:f3:4f:2a:93:f9:16:9d:49:1f:91:4a:
         d8:cb:27:c9:bf:da:6b:7d:70:a4:d2:41:2e:82:17:42:37:19:
         96:fa:ec:64:3c:5a:0f:26:48:f6:6f:36:4d:2c:e2:5e:46:72:
         b1:5b:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:59:49 2026 by rpki-client