Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/c11e929a-d9a5-30b1-ad71-dabbf630fc40.roa
File:                     c11e929a-d9a5-30b1-ad71-dabbf630fc40.roa (raw, json)
Hash identifier:          DWSOnNZu+ZbvxKq8q95OonEhcLx7/Ji4OjR1oLY1EQU=
Subject key identifier:   E5:E0:F2:01:BE:31:A7:0B:80:B6:04:F8:BA:3D:D4:65:4B:36:FD:3E
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584F0D91AD64ACE88070235FDF80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/c11e929a-d9a5-30b1-ad71-dabbf630fc40.roa
Signing time:             Thu 03 Sep 2026 14:14:29 +0000
ROA not before:           Thu 03 Sep 2026 14:14:29 +0000
ROA not after:            Wed 02 Dec 2026 15:14:29 +0000
asID:                     36692
IP address blocks:        162.210.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:91:ad:64:ac:e8:80:70:23:5f:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Sep  3 14:14:29 2026 GMT
            Not After : Dec  2 15:14:29 2026 GMT
        Subject: CN=e1622fdf-8296-4e43-a3f0-33eab6dc5771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:60:37:bc:b7:82:2c:78:a9:57:b0:84:31:
                    44:c9:5c:b8:99:b7:f7:b8:a3:b6:c3:83:42:c6:7c:
                    92:ad:e9:ef:83:90:61:96:74:60:5b:20:e3:fb:24:
                    55:88:76:f1:39:cd:5f:44:97:ee:56:ea:30:cf:05:
                    eb:78:e0:59:cc:4e:ff:b3:66:af:88:ac:34:d2:c4:
                    3f:d9:18:87:6a:ec:cd:34:4c:14:1c:99:77:a3:2e:
                    ec:79:bf:1f:f8:24:86:93:f0:90:76:b9:91:96:3d:
                    3d:64:03:67:d5:b7:50:29:82:66:33:7c:1d:1e:e4:
                    e2:71:b9:ed:89:02:b9:96:ad:17:3b:6f:30:a3:41:
                    ab:ac:15:08:f9:f0:56:d6:6b:e1:fd:80:fb:ad:6f:
                    1c:79:15:cb:56:63:ba:0a:a5:d7:3b:de:3a:d2:59:
                    86:15:19:1c:cc:10:f8:16:53:78:d2:68:67:c3:6f:
                    b4:db:f8:ec:6f:cf:d2:4b:95:f1:06:75:60:a6:74:
                    32:e4:c1:02:e6:7b:89:c1:cf:9c:48:b3:a4:97:81:
                    1f:99:47:4a:ac:6a:0c:2f:03:b8:72:1d:90:90:14:
                    d3:28:29:9f:58:0b:55:2f:0c:09:c6:35:c2:d8:e3:
                    06:34:04:b9:21:90:30:96:54:cd:d2:c5:79:2a:f8:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E0:F2:01:BE:31:A7:0B:80:B6:04:F8:BA:3D:D4:65:4B:36:FD:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/c11e929a-d9a5-30b1-ad71-dabbf630fc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:22:08:85:fe:dd:a6:7b:85:20:62:ff:0f:d3:36:b7:74:2f:
         ef:99:a0:1b:6f:c7:cd:38:68:bc:dd:3f:4f:d3:08:7d:cf:9d:
         68:db:bd:8b:d5:fd:ad:0f:aa:e3:95:ce:03:41:f6:fe:a1:54:
         61:7e:cb:ab:fe:c6:b6:dc:b9:d3:bb:5b:60:e8:c0:7f:76:ea:
         c9:3f:a2:3e:2d:df:c1:bc:fc:ca:72:67:70:a9:e8:df:5b:9d:
         09:4d:f7:a7:73:ac:5c:40:f2:45:de:79:92:5a:ce:72:71:84:
         4b:cb:4f:17:13:4a:05:6e:a0:9c:c2:e3:ec:4f:bf:8c:ea:0b:
         f3:67:68:61:4e:bb:0f:9d:39:72:8d:8c:cc:6b:96:bf:f9:07:
         28:62:c9:ed:0c:c7:31:11:2b:23:0f:ca:72:ea:44:92:50:d2:
         fe:ff:27:fc:6e:da:7f:29:9e:2f:8c:fb:7b:4b:17:52:41:a5:
         05:e0:f5:46:0e:df:51:1f:dd:be:7d:df:a2:c3:b5:70:36:8e:
         e2:b8:bf:48:a2:7a:d2:62:74:00:29:6b:6c:d2:12:dd:88:fc:
         99:2d:1b:38:58:0b:cd:b2:69:31:08:9b:f8:e2:63:d5:3a:54:
         dd:2d:9d:1b:03:6b:f2:99:ba:db:ad:92:0d:8a:aa:24:d2:28:
         1f:47:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:38 2026 by rpki-client