Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/1b0ffaba-9563-309d-8325-7e01713b27c7.roa
File:                     1b0ffaba-9563-309d-8325-7e01713b27c7.roa (raw, json)
Hash identifier:          AQcQGqekMT/RsJgg/cl3czq0rgLaw5CXqmduKihj5jw=
Subject key identifier:   ED:86:74:B3:08:2F:94:55:84:1E:CC:B2:37:2F:22:08:F4:0A:12:4D
Certificate issuer:       /CN=493eba72-b4a5-4f31-af0f-801a0fb3b83c
Certificate serial:       010D0C9F4328584D524345F129EC806E0EF48C80
Authority key identifier: 18:4B:E7:CE:02:33:D5:13:05:32:19:43:E1:1F:0E:EF:28:FB:EB:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/1b0ffaba-9563-309d-8325-7e01713b27c7.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     63126
IP address blocks:        192.42.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:45:f1:29:ec:80:6e:0e:f4:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493eba72-b4a5-4f31-af0f-801a0fb3b83c
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=a5bf6150-b0ea-4fa8-8d1d-a114aa67e477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:8d:d7:68:e1:d8:c6:43:a3:1d:80:ae:eb:
                    a1:4a:e3:7f:b8:31:2c:98:be:d3:18:e1:8e:0e:38:
                    8e:92:32:92:31:7a:53:38:bb:6b:06:94:49:d1:25:
                    eb:f5:15:90:ed:a3:06:a8:7b:6e:ca:87:c0:c9:a7:
                    ba:43:8f:1f:2e:74:80:b7:5e:06:30:38:86:b1:2e:
                    9d:9f:61:ff:65:44:aa:c1:53:a6:a7:fd:87:fc:8d:
                    ed:e1:a3:a2:19:bd:31:73:fa:fb:1c:07:81:47:2a:
                    fc:0a:78:15:0d:86:3b:f4:4e:7d:8a:bf:99:2f:03:
                    1e:6e:bb:4e:26:59:0f:0b:25:6e:85:5f:c6:81:bc:
                    7b:8e:c1:a2:59:4e:55:2f:2e:86:e2:08:f1:e0:6b:
                    2e:d4:11:4e:cf:11:0e:3f:d4:fa:2c:33:3d:91:de:
                    d3:20:cc:c6:54:0e:16:8d:37:66:32:bf:25:7e:ca:
                    77:39:04:81:36:1e:24:16:f3:a7:06:d1:70:7b:d8:
                    1f:29:c4:dd:1b:e5:da:10:99:41:b3:b7:1d:e9:e7:
                    74:8a:01:5c:fc:30:db:3b:06:8c:4d:ad:d1:b6:5e:
                    62:1a:78:5c:0a:03:03:c2:aa:f2:4f:0b:26:4f:d5:
                    0f:8c:2e:e5:26:c6:df:1f:cb:a7:98:d8:ce:cf:0b:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:74:B3:08:2F:94:55:84:1E:CC:B2:37:2F:22:08:F4:0A:12:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/1b0ffaba-9563-309d-8325-7e01713b27c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.crl

            X509v3 Authority Key Identifier:
                keyid:18:4B:E7:CE:02:33:D5:13:05:32:19:43:E1:1F:0E:EF:28:FB:EB:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9c:44:3d:cf:af:91:5f:23:3d:0e:0b:89:33:c6:c4:67:49:
         73:4a:b9:46:fd:85:1a:bf:44:49:34:b4:f8:a2:6e:81:ad:e6:
         1a:f9:46:17:61:5b:c8:fc:c1:9e:4a:4d:b8:ed:0b:47:33:06:
         f5:28:5c:b1:54:dc:dd:82:e1:b1:2f:bb:8f:ff:00:47:f6:31:
         7f:5a:74:cc:14:74:0d:09:75:ce:5e:81:8c:bc:40:a8:a9:1c:
         02:61:1e:f6:d9:b1:dd:a2:9a:62:a0:a0:6f:c8:f5:ec:89:a1:
         1e:07:46:3f:ce:40:99:3b:00:37:a6:0c:62:22:d8:cd:18:db:
         f9:15:3b:b8:07:f8:e9:a2:3c:3b:cd:b2:72:e2:8a:1a:77:64:
         64:d2:69:31:0c:34:e0:05:d5:6a:27:52:34:74:09:c2:24:37:
         0a:53:d2:10:92:a6:72:b4:05:7f:f4:f8:91:21:ee:21:ee:24:
         82:37:56:b3:f1:2c:da:71:85:17:0b:cd:7b:e8:f3:51:86:09:
         0d:e2:ad:bd:2c:f2:34:d9:27:ed:f7:a2:fe:5d:a9:01:47:48:
         c4:9b:3a:0f:0f:24:d9:1f:5c:95:5b:60:e7:3c:1c:86:3f:ba:
         c3:fd:6a:73:38:c6:df:92:da:19:04:e1:f0:09:6b:36:a4:5c:
         f3:0b:4a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:50 2026 by rpki-client