Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/62019f2b-af95-3e12-bc23-6c66accba91f.roa
File:                     62019f2b-af95-3e12-bc23-6c66accba91f.roa (raw, json)
Hash identifier:          4vg8xHlaAUonjnY4J+Tz10HvOQiUmBYyxsVWmv5okVA=
Subject key identifier:   86:F7:B7:35:BF:EC:5F:11:C8:41:BD:D2:40:11:70:B5:80:9F:0C:2E
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584CAE5EA6E56B5078ADB5D23E40
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/62019f2b-af95-3e12-bc23-6c66accba91f.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     1742
IP address blocks:        192.43.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a6:e5:6b:50:78:ad:b5:d2:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=8ebcca50-95de-4e5d-a312-144dc465bf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:67:e4:0d:54:e4:a7:fb:0e:6a:21:d8:f7:
                    73:3d:e2:de:17:5a:cf:86:fb:13:85:d5:75:39:09:
                    24:7c:49:ce:ae:84:86:cd:1e:7f:9d:c0:1c:27:45:
                    68:78:d0:6f:1e:00:37:aa:a5:b7:8d:ce:7c:68:bf:
                    f5:e1:ea:b2:2b:ef:47:26:fd:b8:85:d6:9b:86:9f:
                    f0:cc:40:d2:ec:cc:29:49:fb:b0:91:b3:51:c5:75:
                    c5:de:02:d7:87:c4:89:22:4c:67:e6:1b:80:4f:c1:
                    bb:17:d0:31:0e:6d:bb:03:7b:79:87:c9:75:f4:3a:
                    26:af:f4:3d:73:40:0e:ea:2e:80:fc:79:e1:43:90:
                    f2:70:bf:39:cb:42:b7:67:c7:b9:0b:2d:ea:5e:86:
                    b8:7d:29:b7:9d:8e:62:58:8a:1f:dc:2d:3d:46:35:
                    55:9e:78:db:93:ff:40:38:36:3f:79:3a:06:a6:51:
                    99:a4:fb:82:08:55:9a:5f:bb:86:62:ac:7b:f9:ab:
                    f3:54:cd:93:ea:be:dd:69:3a:2e:2d:75:2c:af:c8:
                    bb:ea:15:ca:77:43:7e:a3:cd:a3:c7:c4:6f:b7:cd:
                    74:3d:d8:81:03:5d:3b:ac:a8:ea:2a:c2:76:7b:b1:
                    ed:33:f1:c0:d1:b2:86:3c:34:2a:7e:96:5d:5c:8f:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F7:B7:35:BF:EC:5F:11:C8:41:BD:D2:40:11:70:B5:80:9F:0C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/62019f2b-af95-3e12-bc23-6c66accba91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:12:62:d6:f3:e7:d6:8f:1a:ed:9a:3c:6e:f7:f6:37:25:
         53:be:93:b4:1c:55:e5:b4:ca:e4:a1:25:c6:db:56:75:50:1b:
         b2:91:f1:5a:d5:ce:b0:46:a4:72:09:1e:6e:0e:a2:17:3d:1a:
         38:9b:bb:cd:93:63:bd:a0:36:86:47:98:ee:ed:70:29:e7:cc:
         a3:62:88:e0:d0:a6:81:4a:1d:09:bd:44:36:6e:5e:a0:25:85:
         08:df:58:57:94:21:8b:2a:0a:9a:15:28:a2:36:25:2e:f5:d8:
         1c:b7:30:cf:66:b8:73:39:95:13:70:f2:eb:ec:5b:1b:57:6a:
         26:b4:b0:98:f9:a6:79:27:9e:4a:4c:5a:5e:f2:52:c4:0b:b3:
         0e:2d:d6:f7:98:93:f7:21:a9:ee:5a:cc:f0:90:39:93:bf:c8:
         4c:d8:b7:ad:38:a0:2e:b5:64:77:66:69:09:54:9e:bb:51:e8:
         ba:a2:83:1c:12:65:7c:0f:9b:3e:0d:66:c0:e2:4f:60:d4:c9:
         20:8e:a6:13:46:f8:4b:08:d2:f4:ba:8e:49:bd:7c:14:0a:7e:
         a7:ef:62:ce:59:e0:f2:03:a2:c5:5e:46:c7:03:23:0d:91:a2:
         ae:d3:3f:0b:70:b7:d5:82:eb:80:4a:9d:90:34:e6:12:ce:84:
         1d:e9:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:40:26 2026 by rpki-client