Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/18a6b495-3251-305d-a8ed-e4354ae343fd.roa
File:                     18a6b495-3251-305d-a8ed-e4354ae343fd.roa (raw, json)
Hash identifier:          PGhDSnfazHasBFdFc88GHIP8SwgBhmBHEoKBj7sGaMM=
Subject key identifier:   50:67:7A:D2:5D:8B:58:93:DA:BE:AD:34:01:92:33:F5:E5:F0:0B:5C
Certificate issuer:       /CN=29c8f112-0387-49a9-9bd7-2a6af0b4c9ff
Certificate serial:       010D0C9F4328584D667A58AA96BAC668325BAB80
Authority key identifier: B9:7A:49:52:D7:91:68:B3:A3:9E:A2:67:35:D5:08:E1:47:11:64:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/18a6b495-3251-305d-a8ed-e4354ae343fd.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     13769
IP address blocks:        192.154.8.0/24 maxlen: 24
                          192.154.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:58:aa:96:ba:c6:68:32:5b:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c8f112-0387-49a9-9bd7-2a6af0b4c9ff
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=85dd93c3-1464-4dc2-a2a3-f4f6dfc78541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:b4:00:8a:78:75:d4:ea:c4:6f:79:41:f7:
                    28:44:f0:da:5e:88:3f:cf:ec:03:9c:26:08:f8:b4:
                    e9:7c:e6:2a:05:c7:60:c2:ea:2a:7b:ab:d9:73:d3:
                    92:44:79:79:da:f0:d6:52:46:40:71:d9:3d:15:f4:
                    1a:45:64:fd:cf:a1:65:4a:57:b1:f1:f1:88:e8:3a:
                    d1:27:22:f4:d0:41:0c:88:2b:12:8a:56:6d:e5:e4:
                    45:1a:43:07:4f:b5:d0:04:75:58:28:28:b2:c5:4f:
                    70:42:24:4d:ef:79:6f:42:cb:85:31:53:22:4c:b3:
                    bf:21:ca:f5:7b:43:3f:ab:17:cc:d4:9e:17:44:eb:
                    10:e8:bc:e6:b0:d0:f0:bd:31:2f:97:83:ea:42:78:
                    a7:7c:97:ca:db:3d:73:91:92:e8:77:e7:ab:2d:35:
                    86:6b:f7:a6:5d:1a:94:e9:ce:61:a5:c4:e1:34:10:
                    85:ae:02:8e:40:8e:0d:90:04:f1:09:c5:23:b0:a0:
                    a3:26:73:4b:2e:dc:27:14:da:e2:29:2d:d7:79:97:
                    60:2f:31:02:55:90:75:d0:dc:3d:b7:9c:c8:3f:59:
                    d3:d1:52:e1:28:af:ec:8c:2b:75:84:37:a9:46:9b:
                    6f:ba:18:ae:47:51:71:3b:58:76:aa:8d:5c:3c:c8:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:67:7A:D2:5D:8B:58:93:DA:BE:AD:34:01:92:33:F5:E5:F0:0B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/18a6b495-3251-305d-a8ed-e4354ae343fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.crl

            X509v3 Authority Key Identifier:
                keyid:B9:7A:49:52:D7:91:68:B3:A3:9E:A2:67:35:D5:08:E1:47:11:64:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:39:41:18:c2:82:71:14:d4:35:da:4e:1a:1c:6c:d4:ab:6c:
         66:52:be:f2:08:ec:1a:f5:20:7b:87:63:48:d9:98:2e:12:77:
         d9:fd:1f:5d:44:ea:6d:b2:cd:41:53:7b:70:6b:ce:60:83:34:
         ff:7e:4b:98:7a:57:aa:0d:47:bf:e5:e2:9d:6f:ca:d6:64:24:
         da:4f:d9:50:9a:28:de:5a:33:ae:61:58:c1:cd:21:70:0e:0f:
         00:8d:fb:97:f9:6c:4b:eb:26:a1:51:23:76:ea:45:b8:c5:2c:
         f7:f7:79:03:d4:b2:7a:69:0a:ba:6e:77:97:a6:d4:17:ad:27:
         06:23:8c:c8:94:40:35:d4:39:fa:2e:90:88:43:ed:fb:49:8c:
         a8:68:60:40:9b:19:10:63:80:0c:ef:27:cd:b3:c1:a5:b5:ba:
         3c:61:5c:58:46:92:7b:3b:a3:e1:6c:0c:29:99:56:86:c2:6a:
         3f:be:cf:33:98:93:d5:34:8d:eb:c3:95:6b:e2:91:42:59:05:
         b7:55:53:87:76:05:76:8b:5a:47:a5:07:5f:e6:fe:b6:5b:b8:
         3e:7f:a5:3e:cd:1c:f2:cf:f0:16:5d:d9:c1:52:ea:71:1c:d1:
         c8:ac:cc:a7:76:eb:eb:f7:7e:e8:95:1a:b5:5b:a7:84:bd:65:
         be:58:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:34:59 2026 by rpki-client