Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/189217b1-baa8-3c92-8939-052c4f07bd04.roa
File:                     189217b1-baa8-3c92-8939-052c4f07bd04.roa (raw, json)
Hash identifier:          AVXkQaUH3Xx/S3/h+rwEbLBVkVQR/bfxxkVJW9DbinM=
Subject key identifier:   97:C9:80:5C:B0:6A:57:09:87:1E:F3:DF:A4:F7:E4:CD:0A:10:63:C3
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F4328584DD78B2112E1998B0FBC3E1500
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/189217b1-baa8-3c92-8939-052c4f07bd04.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        192.243.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:21:12:e1:99:8b:0f:bc:3e:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=a901f61d-05f2-4e20-9413-90158fc6403b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:9b:86:8b:eb:9e:48:88:d5:f3:be:2e:70:
                    ba:f4:25:f9:50:32:35:eb:91:c1:96:93:1c:a5:09:
                    4e:dd:cd:e4:4c:90:01:52:c4:e1:56:14:3c:07:5b:
                    ed:ee:d1:58:c8:ff:5d:ba:43:7b:2e:c1:b3:bc:86:
                    18:57:3a:56:3a:98:14:55:12:60:2e:ca:81:73:93:
                    8d:ca:ae:07:c7:c6:36:a6:f1:c5:9a:7f:85:fe:be:
                    40:c2:ea:53:44:5e:ce:f5:93:50:65:dd:a5:44:bc:
                    70:db:11:72:7a:81:ad:16:a2:91:b6:4d:24:5d:88:
                    c0:7b:db:07:89:83:cc:72:39:58:89:e1:47:2a:9a:
                    1c:c0:82:8d:3c:09:cc:c9:e4:0b:4e:74:73:f3:10:
                    64:93:51:e3:df:21:47:ea:0a:66:78:51:67:3e:0c:
                    ea:45:80:49:05:ed:8a:62:f9:23:48:2d:22:14:27:
                    44:33:8e:0d:8f:b6:99:1d:95:d5:d7:df:75:ac:e7:
                    6b:9a:be:47:ae:4a:83:59:a4:80:47:65:4d:5e:61:
                    2e:8a:8a:df:d0:81:8b:69:f7:9e:4b:30:3d:23:9f:
                    33:9e:06:a0:db:58:e0:cd:d5:4c:dc:db:5e:20:53:
                    cc:d6:17:ff:d0:30:b5:14:5f:bb:f7:27:21:c1:9f:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:80:5C:B0:6A:57:09:87:1E:F3:DF:A4:F7:E4:CD:0A:10:63:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/189217b1-baa8-3c92-8939-052c4f07bd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:42:1f:42:3c:6c:c3:e7:80:ca:46:68:6a:a7:6e:74:78:74:
         74:dc:43:ab:73:5a:f5:d4:a6:98:ec:fc:e7:b9:b7:14:52:a9:
         b7:8f:72:81:58:59:41:44:c1:47:8a:68:bf:b2:65:82:d5:c0:
         58:81:dc:eb:09:c0:5a:c5:a0:73:0a:8f:98:a2:03:c0:f4:58:
         87:dd:57:37:3a:f9:33:82:e2:5b:71:31:f8:14:c2:32:45:5d:
         aa:01:f1:3c:e4:d0:45:15:c9:c9:91:d0:13:55:5e:a9:88:10:
         c8:79:ab:b7:de:94:c6:72:c9:25:b6:8a:6a:ec:5f:fc:8f:1b:
         ca:eb:50:00:a7:89:0f:58:65:ed:56:99:dd:14:b8:2a:23:2c:
         f2:5c:9d:b9:3c:eb:0e:87:00:bb:29:36:bc:ee:75:dd:7c:9f:
         a9:dc:3a:6c:28:e4:dc:db:ce:e6:22:e8:c5:67:98:8c:d9:1d:
         65:fe:75:90:2c:81:81:da:de:22:80:0d:fd:a0:3e:08:0e:61:
         40:05:65:a1:ba:2e:28:fd:7f:9f:55:09:3e:c5:53:82:f0:1b:
         2b:6e:e9:00:8c:a3:a1:e5:17:d8:d5:ce:81:7a:e6:ce:3f:2c:
         d8:ac:08:74:99:1a:e7:9e:d1:f9:e4:0c:b7:58:97:f3:8c:46:
         48:02:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:26:14 2026 by rpki-client