Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa
File:                     452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa (raw, json)
Hash identifier:          Gy5/likmMoY4PWe6GLduK++tRFKiMibloGy1Ug8ssqk=
Subject key identifier:   8A:50:88:D0:B8:8F:A9:6A:AC:DB:B7:F2:59:59:7E:9C:3D:4E:EA:AE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D24E0E323E87F1910C95F4300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        172.217.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e3:23:e8:7f:19:10:c9:5f:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b3be8093-f804-472e-b4ca-2271ef77a992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:a4:8d:85:c9:ed:67:4a:d9:a3:16:66:86:
                    69:0e:b9:c9:0b:4d:f8:f5:cb:1e:62:b1:85:52:53:
                    67:a7:a7:48:10:2c:88:69:91:87:16:5f:6a:68:3e:
                    e5:b6:90:d2:e6:b4:37:b9:f3:20:e7:e3:70:55:89:
                    a8:85:13:ae:7c:20:1d:58:f3:29:ca:57:45:11:64:
                    ef:43:f1:08:3c:2a:e3:f9:e9:94:b9:a5:bd:f7:c9:
                    fe:c3:3d:97:f0:83:cb:12:9c:e4:8d:5a:a7:98:9c:
                    0d:af:f8:6e:4c:77:6d:1f:c0:63:6a:22:1d:df:78:
                    e9:f8:8d:3d:f0:e9:6d:0c:cc:42:7d:2c:84:30:e3:
                    5c:a2:1e:ff:6b:2b:65:24:8e:6c:c3:8e:92:64:a4:
                    db:39:e4:15:e6:66:fe:2d:ef:51:e9:6c:08:7a:84:
                    36:4a:60:07:53:51:60:36:a6:f0:ba:0a:57:20:b6:
                    97:8e:61:9a:61:85:28:66:10:bf:b9:e2:f7:4d:22:
                    10:5e:7e:63:d9:46:3e:27:be:d0:85:3d:05:65:a5:
                    3e:b3:e1:94:fc:e5:b5:69:40:b7:15:2c:9d:db:0a:
                    7a:a6:33:24:0c:1b:a7:1d:63:2f:5a:1e:99:2a:1b:
                    ee:4d:0b:5e:59:23:9e:30:5a:82:b4:d7:2b:dc:1f:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:50:88:D0:B8:8F:A9:6A:AC:DB:B7:F2:59:59:7E:9C:3D:4E:EA:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/452085b8-ddfe-3316-ac2e-f729d6e3f2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:07:1b:26:34:77:70:0e:07:7c:7c:a1:ef:01:1c:b9:3d:
         21:0a:bd:02:63:cc:70:92:79:b4:98:9c:db:e5:a0:84:be:20:
         87:f3:fe:d4:29:7c:8c:6a:67:78:6e:cb:79:48:98:07:ad:cc:
         83:a0:d4:33:66:7c:d9:57:0a:29:3c:0c:a7:c7:8e:9a:b7:ec:
         97:d7:9b:9b:f7:41:fc:0e:75:0c:1e:1a:0c:5a:38:ba:ab:88:
         8a:35:48:cf:79:a1:2e:2b:ec:77:04:93:a4:c6:37:00:49:02:
         fb:33:52:92:2a:6c:76:09:75:83:2a:df:92:0d:5b:69:9a:bf:
         5a:b6:23:08:98:37:a3:3f:97:32:28:14:f3:70:4b:ab:5a:b7:
         13:15:40:8b:e7:bf:a1:6f:1f:47:fd:02:f8:39:d4:5f:77:01:
         66:a8:6c:c4:cf:63:f6:b7:f2:7d:19:39:d0:4a:42:81:29:7b:
         18:a5:6e:0e:2a:67:12:0d:af:ab:19:69:1a:96:3a:a4:7f:81:
         ae:fa:14:e8:0a:bf:bc:8e:55:99:0c:b1:be:69:6d:91:69:34:
         46:a8:92:91:4d:49:f4:a6:04:77:60:fd:a1:0f:fa:a4:78:d5:
         e5:11:12:9d:ac:c5:4e:d9:db:09:a1:e5:70:1c:9d:6c:05:49:
         91:cc:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:57 2026 by rpki-client