Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/70748068-af76-3155-bc9e-23d606ad14cc.roa
File:                     70748068-af76-3155-bc9e-23d606ad14cc.roa (raw, json)
Hash identifier:          Cm9TlbaKA61GdG2PvMELchaZBJtU2jnVJgY3Zp8wBBk=
Subject key identifier:   7C:DE:4D:80:26:C0:8B:D9:00:2D:F3:63:86:8A:D6:19:7D:78:18:D0
Certificate issuer:       /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
Certificate serial:       010D0C9F4328584D1F4A47A8C51E58A48C885060
Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/70748068-af76-3155-bc9e-23d606ad14cc.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     29848
IP address blocks:        192.190.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:47:a8:c5:1e:58:a4:8c:88:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=5ecedd07-7ff0-48ab-9e92-45209962f4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:64:14:b2:53:2d:30:a7:40:48:78:d9:06:
                    f4:85:43:c8:0f:0f:51:5d:74:68:99:56:a9:72:2d:
                    f6:6c:8b:fa:9c:f4:82:62:e2:cd:d8:4f:84:8b:1b:
                    53:d6:14:75:46:31:56:1b:d6:19:71:5f:b7:66:17:
                    46:2a:b2:dd:26:9f:aa:5e:64:af:7e:f9:39:e2:02:
                    8b:eb:dd:3f:09:8a:63:28:bc:16:f9:1a:42:15:c1:
                    2d:b9:fd:f2:24:a1:b2:ca:09:0c:34:3b:69:9e:19:
                    94:a6:ff:5f:99:a7:65:37:ed:34:13:24:b1:68:6a:
                    c9:bd:b7:bd:ab:eb:dc:fb:1e:c3:8b:5a:03:79:b0:
                    fa:bc:a9:6e:b9:19:cd:25:c3:79:30:33:09:c6:9e:
                    51:10:f3:9b:31:92:50:77:20:47:91:38:8c:04:27:
                    06:9c:f2:29:bd:38:90:d7:9a:c7:4d:a5:fe:e2:08:
                    7c:fe:73:1a:fc:92:61:15:2d:a8:45:37:df:78:1a:
                    a1:c0:7d:8b:93:d4:e5:6e:3f:34:4e:46:95:32:63:
                    53:dd:c9:b3:25:63:6d:98:36:6b:e5:e1:75:d7:6e:
                    1c:54:a4:41:3b:26:99:cc:77:62:55:9e:49:94:d6:
                    fa:fd:4d:9a:d5:12:2a:b3:e6:86:8f:83:74:8f:38:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:4D:80:26:C0:8B:D9:00:2D:F3:63:86:8A:D6:19:7D:78:18:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/70748068-af76-3155-bc9e-23d606ad14cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl

            X509v3 Authority Key Identifier:
                keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:cb:73:e1:c4:b7:e7:59:e9:68:1f:fc:cf:92:b9:37:61:
         87:26:cc:50:c7:68:bc:2d:47:13:f3:c5:16:0a:5e:57:6e:4f:
         65:2b:0a:76:01:78:5b:7d:31:21:c5:f3:05:ac:34:92:8f:49:
         f8:e6:55:ce:9a:65:f7:06:ce:da:9d:7e:cd:92:bd:e1:ae:e8:
         ee:35:b1:67:97:1b:fa:b2:8b:5d:27:ca:9b:b1:98:53:1f:2d:
         73:59:d4:a6:50:88:bf:e4:37:69:d0:a2:04:07:69:0b:d5:de:
         1f:bc:20:ca:d7:55:85:ce:30:b7:06:71:45:b6:99:ff:01:59:
         bc:11:9d:3a:80:fb:43:9e:60:bd:fe:ac:50:5b:b0:54:86:57:
         44:81:85:20:74:84:35:16:f5:e8:c4:13:20:ec:03:bb:b7:52:
         64:b2:84:c6:33:28:4d:77:1a:6a:a4:bd:3f:a9:45:a3:8a:9c:
         00:43:ff:7c:fa:51:38:49:fd:16:75:b3:ea:95:7b:31:75:e1:
         46:69:b3:7a:d3:b4:d7:4a:73:03:08:8a:97:74:b4:ec:ca:c1:
         6a:bf:4c:40:bf:93:f9:65:ae:be:75:9a:3b:06:1b:3c:29:b0:
         e0:b7:0c:1c:bc:bc:9a:48:6e:65:39:09:18:4d:83:c0:0b:46:
         0c:f4:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:13:42 2026 by rpki-client