Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c14b23-aac9-399f-8a12-33d4be6204b6.roa
File:                     e0c14b23-aac9-399f-8a12-33d4be6204b6.roa (raw, json)
Hash identifier:          00soiwWLTb+mMnBmeOGk31wvAq4PRMNszgmxbMadk/s=
Subject key identifier:   8D:F5:5C:E5:A9:46:3C:5D:F7:55:51:39:A6:9F:BA:CC:8E:FA:6B:08
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D1F4A1A821DE36D3AADC17E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c14b23-aac9-399f-8a12-33d4be6204b6.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     401152
IP address blocks:        199.115.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:1a:82:1d:e3:6d:3a:ad:c1:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=fb82418e-3511-421b-8a12-28378b69f3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:56:da:31:fb:e5:65:2b:e3:26:05:67:41:
                    0a:aa:a0:89:89:06:95:3b:6d:eb:da:c6:09:59:3d:
                    a7:06:03:2c:85:4f:e7:35:9b:5e:d1:b6:78:7b:8b:
                    a3:ac:8e:c8:af:cd:4d:e1:b9:09:a0:3d:21:14:eb:
                    78:d0:df:fe:a8:35:4f:13:28:4c:40:e7:01:4c:b5:
                    8e:85:e3:31:7f:a4:5c:b8:91:a1:f7:b6:9c:62:e2:
                    5a:13:eb:64:1e:81:b6:21:c1:27:db:72:a8:98:c3:
                    42:cf:f8:5b:df:f1:77:36:51:ea:0e:83:f9:1e:fc:
                    c9:23:ab:eb:73:4a:a5:27:89:be:1b:6d:c2:ee:53:
                    a3:6a:7b:8d:89:e2:16:73:db:7f:4d:74:fa:5c:64:
                    d6:4d:81:2c:bd:77:3c:28:0f:34:5f:b9:ff:c2:ce:
                    82:71:09:52:60:27:29:12:6f:31:eb:3f:cf:86:7c:
                    44:09:19:06:43:4c:b5:e3:49:16:69:a2:d6:fa:18:
                    f8:d3:01:f6:14:08:7d:86:25:57:66:6c:06:f9:3a:
                    d3:fc:b6:c3:ad:5f:26:e5:3d:93:fb:79:00:b2:f1:
                    18:e6:50:c5:fd:e9:71:db:b1:6c:b3:1f:45:fe:0a:
                    62:23:41:e1:2d:ac:7e:ca:0e:3d:3e:b8:97:3b:c3:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F5:5C:E5:A9:46:3C:5D:F7:55:51:39:A6:9F:BA:CC:8E:FA:6B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0c14b23-aac9-399f-8a12-33d4be6204b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:07:a5:32:59:24:19:8c:fa:42:f1:23:fb:69:4b:a0:12:28:
         da:45:2e:9b:df:a2:d2:bd:86:72:14:e2:63:9a:3b:c5:cd:ee:
         30:a3:aa:e9:d6:55:b6:ed:7d:a1:a0:c3:66:0b:f6:f7:33:b9:
         0e:1d:27:98:67:f1:db:51:94:74:8a:89:1e:4e:b9:c4:ee:04:
         d5:61:21:57:3d:72:a6:72:82:0f:60:fd:83:a6:5f:d7:27:a9:
         49:b1:55:6f:48:3b:09:1e:c3:79:aa:e7:bc:c1:f9:3f:45:9c:
         0f:19:af:4a:c9:ea:45:98:e0:af:23:a3:fc:74:7c:e8:3c:a4:
         f1:c0:62:c6:c7:9f:6a:5a:92:06:b5:8d:7c:8c:49:68:c4:7a:
         7c:99:4c:11:22:61:35:2e:4b:28:f0:63:af:be:39:f3:62:c4:
         60:32:b7:19:e9:eb:a6:8d:4c:20:14:fd:35:32:22:a5:f8:b4:
         bc:8e:3d:60:68:c0:60:72:2c:db:51:59:c3:65:51:0b:78:f2:
         4e:9e:33:79:69:a2:f3:17:68:bb:e7:2f:9a:d1:98:86:03:0d:
         11:45:4f:21:9a:c6:03:66:2e:d4:80:9a:1c:dd:ae:a1:2b:92:
         5b:b9:62:17:16:1e:53:50:42:98:28:ef:a9:de:3b:14:1b:42:
         ba:32:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:14:13 2026 by rpki-client