Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa
File:                     2c309e9a-487a-3082-b76d-a570291dea7e.roa (raw, json)
Hash identifier:          6FElsOuRISgRvWSdqopASEdOFwNXZFTFqTNf7r6pjsc=
Subject key identifier:   B4:6E:D4:A4:A4:69:A2:F5:B6:9A:56:0E:79:4C:FB:4D:87:98:03:16
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D4D5A5EAD2E7560B399A97680
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        192.184.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5e:ad:2e:75:60:b3:99:a9:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=4b4fa454-28ce-4be9-b2b1-2be08178a774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:6f:02:b1:ef:ca:c8:59:42:0c:52:d8:bc:
                    87:19:11:db:84:a0:bc:51:ff:83:70:d4:81:a9:4c:
                    b2:d1:d0:1e:35:c8:a8:db:1e:bc:dd:43:15:75:fd:
                    82:d1:38:09:96:74:6f:33:e6:70:cd:09:6c:f8:5a:
                    53:e3:a3:1f:c9:f9:52:dd:32:97:51:95:6f:c8:1e:
                    56:79:ed:29:eb:e1:4f:d1:4c:22:27:b7:d0:0e:3e:
                    30:1d:91:31:f1:be:ab:94:13:60:9c:53:47:71:d8:
                    09:02:7f:e7:e0:bc:5d:33:52:82:dc:ab:aa:cf:70:
                    dd:09:05:a2:ff:b2:f5:08:07:53:eb:50:83:6b:7d:
                    31:c2:51:fb:56:d8:a9:1c:f4:5a:87:9f:c3:a1:25:
                    c6:a3:a7:31:27:2f:e2:ca:2e:ce:65:9e:e2:ed:c6:
                    bd:6a:ec:18:e6:fb:68:8b:25:a1:f9:65:f6:0e:fb:
                    a3:34:48:f4:70:01:0a:a3:c6:9a:c3:12:c5:b0:a8:
                    db:8e:cd:ad:63:f9:64:19:b8:34:ff:95:a3:a8:a4:
                    1b:e2:f8:61:ef:de:34:88:32:f8:5e:61:4b:02:b3:
                    74:91:a6:b8:4a:3c:d9:9a:9f:6b:3f:84:d4:e6:80:
                    38:85:3b:8b:29:a0:60:48:1f:e4:82:9d:1a:a0:36:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6E:D4:A4:A4:69:A2:F5:B6:9A:56:0E:79:4C:FB:4D:87:98:03:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:bd:9c:02:b2:67:17:36:d8:89:5d:d3:83:be:20:ae:c3:
         c5:6b:4c:6a:49:f1:f0:38:7a:9f:88:e0:09:6b:e0:76:1f:1f:
         bf:e6:fe:12:b6:97:08:60:a9:df:f3:02:23:28:bc:06:38:87:
         be:54:fa:03:bb:61:21:b2:a9:2b:3b:83:49:1d:91:01:eb:3d:
         68:04:7a:37:5d:72:9e:3a:58:f0:02:e3:60:b7:4b:eb:64:20:
         be:07:fd:67:92:dd:16:bc:54:c3:74:57:d9:64:4e:c9:1f:3a:
         fa:8a:d7:65:04:d5:03:14:a5:9f:5f:81:a2:33:2b:82:c2:cf:
         d5:14:f4:12:85:a4:8c:c3:d6:a5:d8:97:b8:c5:25:a6:d1:60:
         cd:36:ad:3e:5b:c4:32:bf:69:78:0d:42:5b:78:2b:c6:b4:62:
         1e:61:7b:33:e5:5a:a2:99:64:97:34:da:37:b3:c8:59:06:d6:
         a8:3f:35:d5:59:d5:9a:63:f0:ea:93:fd:93:49:e0:d1:11:68:
         69:ce:ec:2a:82:dd:ec:78:9e:25:5a:13:b1:40:36:7b:e7:58:
         e5:a1:1d:04:d4:c0:66:cf:fe:1d:ef:1f:49:99:4c:b9:09:97:
         01:9e:1a:97:b7:85:93:cf:06:98:7d:52:d2:02:6b:cf:31:6c:
         3d:20:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:31:33 2026 by rpki-client