Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e41cff3a-b41b-3e1c-84c2-8207a74afdca.roa
File:                     e41cff3a-b41b-3e1c-84c2-8207a74afdca.roa (raw, json)
Hash identifier:          NI5umUuZFXOtG4mAb8hLGIIP3GN5J4idec+66pNS4iM=
Subject key identifier:   D4:77:8F:1D:7C:83:16:4A:1A:C5:7E:64:33:92:E9:98:88:4C:65:D2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F024240542B4B85C79F232E60
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e41cff3a-b41b-3e1c-84c2-8207a74afdca.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     15169
IP address blocks:        192.179.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:40:54:2b:4b:85:c7:9f:23:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=fc8251f8-fe00-4e80-acfa-cd1dd246d173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:aa:fe:dd:ee:ba:23:63:0a:54:11:84:4c:
                    ad:06:52:07:a4:14:20:68:4a:81:f6:ca:53:60:6e:
                    10:b3:00:05:df:65:e8:3a:00:38:83:cc:fd:d2:bb:
                    11:0e:e4:3f:5e:2c:85:f4:2c:eb:9b:ae:98:18:0a:
                    0b:60:8c:97:3e:87:01:16:f0:87:99:8c:2d:86:7c:
                    3d:e8:d9:43:51:78:e4:84:a0:80:39:79:2b:03:67:
                    f1:3c:b5:65:11:ac:ae:0c:a8:f6:4f:04:f5:1e:05:
                    79:9e:92:3e:78:6c:f1:88:42:e9:8e:c2:45:88:a5:
                    95:12:55:57:bc:7a:d3:df:4a:4d:7a:40:f0:ad:eb:
                    bf:ff:03:9f:15:0e:4b:34:08:b1:f7:d7:19:a2:d2:
                    0b:63:db:78:3a:ac:52:26:40:05:7c:f2:2a:1b:e8:
                    c3:97:4e:ab:4e:30:d5:be:4c:31:7d:fa:42:f6:0f:
                    3b:1c:7a:4d:c4:62:5b:b4:11:cc:59:d1:74:68:38:
                    b3:0d:72:09:6e:81:59:76:6f:bb:52:3a:a8:2d:9d:
                    73:3d:5b:35:f0:ee:bb:65:0d:bd:df:f5:50:a5:19:
                    22:46:a5:14:1e:c3:84:1a:6b:44:0a:ef:0f:35:3e:
                    32:9f:d1:35:b4:72:f5:bd:80:17:18:72:5e:d6:1a:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:8F:1D:7C:83:16:4A:1A:C5:7E:64:33:92:E9:98:88:4C:65:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e41cff3a-b41b-3e1c-84c2-8207a74afdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.179.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:84:64:39:e4:dd:bc:ab:3f:b4:f1:17:74:4a:2a:fc:07:
         15:46:82:4c:32:9f:1c:12:66:b0:8d:1b:db:d7:0a:c0:65:1d:
         48:59:34:08:e7:ea:37:d8:66:9e:51:70:89:a9:e7:62:7f:80:
         22:9e:74:6c:ba:bd:fd:27:62:7f:fb:10:54:33:e5:62:67:c2:
         93:1e:bc:d3:29:c2:b9:c3:de:4f:b2:03:e4:51:cf:f1:ef:2f:
         0c:dd:06:d3:01:db:e5:0d:7b:51:04:57:80:8f:47:07:11:5a:
         62:8f:62:10:b3:03:a5:f6:9a:66:d9:57:99:7b:c3:2e:1d:ab:
         60:fc:a5:04:f3:77:df:14:63:ae:fc:29:b7:5d:24:87:aa:7d:
         72:ce:38:65:bb:ad:06:ce:2b:51:7d:be:f7:fb:1c:82:56:e5:
         3b:2d:d3:2f:66:e1:86:64:88:26:d2:3c:fe:6d:1a:80:5e:a7:
         5d:3c:3e:6e:97:fc:78:d0:ca:5a:a6:71:62:10:4e:5b:d5:18:
         9c:f5:c3:38:dc:e6:3a:bf:39:77:1a:13:c5:b1:39:a8:f6:8b:
         a8:ef:60:f9:72:f6:4e:28:5b:60:8c:bb:58:02:8b:07:c3:75:
         30:85:a9:a4:01:23:06:91:86:38:1d:de:0e:2c:ba:bd:f6:0a:
         b6:66:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:56:15 2026 by rpki-client