Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c317f910-40d4-354e-b4e8-dc0eae01d078.roa
File:                     c317f910-40d4-354e-b4e8-dc0eae01d078.roa (raw, json)
Hash identifier:          Sd7OR/jWfF2JA6QR1uzpkUCP7Uwy/MAcPBZs70L/2+Y=
Subject key identifier:   9E:85:34:B6:3C:EE:9F:18:5D:DC:BC:B1:66:86:F1:8F:DC:AC:FE:AA
Certificate issuer:       /CN=c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e
Certificate serial:       010D0C9F4328584D613CCB57850AF1A7F7F8F0C0
Authority key identifier: 30:5F:1F:E0:A0:C8:CA:60:81:4B:E6:A7:E0:64:B0:99:9C:74:E4:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c317f910-40d4-354e-b4e8-dc0eae01d078.roa
Signing time:             Fri 03 Apr 2026 03:57:29 +0000
ROA not before:           Fri 03 Apr 2026 03:57:29 +0000
ROA not after:            Thu 02 Jul 2026 03:57:29 +0000
asID:                     401378
IP address blocks:        192.132.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:61:3c:cb:57:85:0a:f1:a7:f7:f8:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e
        Validity
            Not Before: Apr  3 03:57:29 2026 GMT
            Not After : Jul  2 03:57:29 2026 GMT
        Subject: CN=830e8c93-2c39-41be-a2c4-61a2b3192347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:bb:77:29:25:9b:9d:23:08:3a:5f:29:35:
                    5a:aa:83:72:ad:b7:ef:52:98:50:05:8a:90:65:11:
                    ac:30:db:ea:b1:de:76:71:76:62:f2:38:2f:a6:e2:
                    6e:c8:bd:5d:86:fe:ec:7e:f9:40:02:b7:e8:67:1b:
                    3b:46:af:fa:94:89:74:a1:3e:b6:b8:c3:19:85:a8:
                    5e:65:27:79:49:c5:62:3b:34:00:8f:05:81:97:b7:
                    78:55:38:e8:1e:d8:17:f0:4b:b6:5d:ca:a5:86:a4:
                    48:19:62:de:a8:82:15:8c:f8:e8:ce:32:0a:22:ef:
                    1c:e3:b7:79:ad:99:c3:16:aa:4b:e7:5f:2d:36:ab:
                    76:46:d1:dd:06:46:91:57:87:76:af:a8:c0:bd:0b:
                    78:9b:bc:bf:24:62:30:d9:37:5c:ac:36:e1:e6:75:
                    62:95:48:b2:6b:73:0c:b1:ca:90:21:35:04:c2:b9:
                    6e:60:52:dd:cd:a2:13:d5:e2:c7:36:43:37:60:6a:
                    9a:45:9e:ad:2a:7a:16:06:d1:d0:59:f0:31:a2:e9:
                    5a:ce:2e:91:4c:6b:68:be:9f:b8:55:52:a7:d6:71:
                    a2:06:f3:68:4d:17:59:34:09:ad:a3:48:7d:ff:34:
                    96:13:08:5b:34:00:6c:d9:b9:a7:38:b0:3a:ae:6d:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:34:B6:3C:EE:9F:18:5D:DC:BC:B1:66:86:F1:8F:DC:AC:FE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c317f910-40d4-354e-b4e8-dc0eae01d078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.crl

            X509v3 Authority Key Identifier:
                keyid:30:5F:1F:E0:A0:C8:CA:60:81:4B:E6:A7:E0:64:B0:99:9C:74:E4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:05:ae:f5:e7:08:41:44:4e:e3:92:7b:dd:a1:89:0b:ca:
         55:ba:52:9d:18:f5:63:73:0e:7b:d2:73:e0:f5:55:06:d9:c5:
         50:00:c2:da:ef:92:69:01:48:cb:28:0a:fe:f4:5a:89:00:44:
         91:cd:aa:7f:0d:33:68:f2:22:e0:e2:07:ab:74:61:a8:7e:85:
         d3:ba:b6:e2:6f:0d:f8:0e:27:8c:13:98:11:15:9f:3c:13:97:
         c5:d0:fd:0c:27:fc:3d:c2:ea:38:7c:9f:91:6a:3a:1f:62:0e:
         61:f7:f6:bd:d6:fa:36:9e:22:1b:38:09:f3:2b:70:d6:03:a2:
         cb:29:24:eb:1b:d8:2c:47:f2:12:75:d6:0f:48:b3:0f:25:cc:
         ae:46:41:02:15:55:ad:e0:da:d0:bd:e0:ca:3b:49:6c:0c:ca:
         db:09:00:76:2a:71:27:c7:42:32:15:36:3a:63:02:44:51:4e:
         d5:26:e4:9d:6d:f1:7a:43:42:a6:fa:7e:2d:03:d8:36:f9:8d:
         b6:ca:bd:e2:24:f6:6c:ea:0d:04:12:c3:99:b1:a4:95:72:0e:
         94:30:2f:2b:9c:61:61:0e:18:81:09:b7:4d:80:2a:6a:4a:62:
         7c:a8:7d:0a:ef:c0:18:f9:33:3a:31:b2:f1:31:44:3c:10:57:
         ae:b2:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:01:19 2026 by rpki-client