Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa
File:                     92644b99-55ad-3d17-a93f-570da3f56b87.roa (raw, json)
Hash identifier:          eokZvsWsK0Fynnasm2b2naxyTNs2g7h6b1atm6d+qUM=
Subject key identifier:   A3:2D:C8:B6:B4:E2:18:B7:A6:B9:C0:DA:00:33:3D:D6:93:29:8D:1D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D237A2FE3381669245D983460
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     54113
IP address blocks:        199.36.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2f:e3:38:16:69:24:5d:98:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=3680e543-9104-4932-a39a-2b3124382b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:b2:68:66:bc:3c:35:3d:31:19:b6:08:48:
                    fa:78:ae:7e:74:61:11:4a:b0:47:4d:69:5e:fb:52:
                    21:d6:5a:ac:17:52:36:ac:d2:aa:fe:ff:20:59:02:
                    22:3b:7a:a1:69:cd:15:3c:cf:24:88:93:dd:63:df:
                    63:a1:4d:1c:0f:84:f5:8c:ad:0d:35:0c:65:fb:93:
                    6b:59:d5:24:51:47:ef:79:0b:b2:d3:9b:70:68:1f:
                    f7:78:a5:36:9e:ba:8e:55:1a:78:65:d0:a3:6c:35:
                    81:37:0e:d5:ce:95:fa:f3:2d:93:1f:e0:83:de:05:
                    f7:3e:76:12:3d:58:5f:f0:eb:ee:a1:27:08:e1:97:
                    9f:93:10:bd:a1:69:0c:68:8d:d3:a8:8d:b6:f4:2d:
                    c3:81:bc:d3:91:86:d1:dc:ff:bc:3e:da:c6:8f:81:
                    2c:e0:4e:f8:a0:7a:34:17:10:0d:da:2c:19:a0:d8:
                    73:f6:d0:de:32:06:ae:bb:5b:f1:4f:71:1d:25:b8:
                    60:17:a3:ad:5c:98:d9:39:30:16:99:bd:6e:b9:bc:
                    85:0c:a3:5d:50:59:78:74:d1:1a:2f:ae:ad:fd:c8:
                    1a:d5:08:13:e8:ce:e8:2e:ff:ea:e9:c6:7b:5c:e6:
                    d0:a9:3a:04:04:ac:07:46:90:8c:bb:84:29:2c:d9:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:C8:B6:B4:E2:18:B7:A6:B9:C0:DA:00:33:3D:D6:93:29:8D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92644b99-55ad-3d17-a93f-570da3f56b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3a:f4:33:9f:6e:8d:aa:43:97:93:b9:ad:d7:b8:5b:f5:4f:
         fa:ce:6c:22:43:d7:18:d7:c1:1b:c1:43:3d:37:8e:d2:db:0f:
         74:57:63:28:36:ec:e6:d3:f2:5e:2e:00:77:ed:50:1c:52:c5:
         00:72:06:f9:df:c4:db:28:bb:2f:17:7e:0d:c3:56:35:a1:ac:
         8b:64:db:33:b4:bf:aa:6f:38:10:e5:e4:e2:ac:60:51:04:f4:
         68:cd:b3:dc:d2:6d:b5:b8:6c:8b:c8:b3:38:34:1d:60:5a:62:
         a5:cb:6f:cc:41:8a:43:9a:f2:3a:2e:93:4f:0c:42:36:3e:94:
         a6:7b:7f:5a:b4:6e:e5:7f:29:d5:a3:66:b3:fd:3a:1e:79:ac:
         5e:9d:d8:b1:f3:ad:36:cb:ec:48:2b:47:f4:04:e9:89:ae:17:
         ba:86:6f:bd:43:cf:4b:ec:f5:c5:cd:2a:96:b9:f0:c6:19:b5:
         2b:83:5f:1a:7b:db:f7:1c:5d:9f:24:1a:5c:1f:2f:02:31:66:
         08:6d:b3:07:38:17:c3:25:7d:7c:b7:09:29:2e:a4:b7:e1:18:
         97:40:27:b8:42:b7:ad:5a:5a:fb:bc:12:fa:3e:60:9a:40:4b:
         d1:de:38:c7:f1:97:95:f0:b9:7d:17:e3:e6:48:ae:ad:6b:8a:
         51:f2:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 17:54:06 2026 by rpki-client