Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa
File:                     a082d65c-6976-35d6-be33-792a4918c345.roa (raw, json)
Hash identifier:          CZY9hfLDjk4PMLIi45ZZahAqntD93WTbMb1cKwZIreA=
Subject key identifier:   FD:EC:EF:41:6F:19:E2:65:6E:7A:61:79:46:DB:44:3C:63:EA:B2:F0
Certificate issuer:       /CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b
Certificate serial:       010D0C9F4328584DA3E5629CC3522143BA51AE00
Authority key identifier: 40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     394438
IP address blocks:        192.163.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:62:9c:c3:52:21:43:ba:51:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3987a02-9eb3-4f88-8e9a-2ba550c3443b
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=aa38dcd7-31f0-40dd-b2a3-b54502982c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:e9:9f:10:6b:99:de:39:0a:b7:49:12:d1:
                    19:28:73:bb:25:e9:d0:2b:8b:69:6d:76:80:5d:ce:
                    7f:5d:68:2c:3c:10:66:fd:d3:30:6b:91:54:a6:56:
                    3e:b8:d3:e7:a8:12:b2:95:51:65:0d:2f:8b:2b:31:
                    ed:1f:73:d8:ff:a1:a1:18:c6:da:96:c4:2d:e0:e8:
                    48:7d:90:cf:59:03:4b:b3:38:5c:0a:58:6e:2a:60:
                    57:eb:a0:b0:0f:27:36:d7:53:6e:83:fc:cc:e9:c9:
                    b6:d0:3b:6f:5c:5a:53:de:e5:8e:9c:e5:f9:dc:2f:
                    8f:28:74:4b:8f:6a:cb:4a:51:db:51:7a:86:1f:45:
                    1b:20:b3:b7:80:c2:0d:bc:88:2b:32:54:90:ba:d1:
                    f0:29:a4:73:0d:1b:58:a8:8a:f2:04:e7:ba:d7:2a:
                    0c:a7:64:3e:82:d8:a3:b8:b5:13:84:88:32:cc:ac:
                    77:55:bd:bf:0d:ca:d0:5f:f8:24:87:3a:e6:f2:e5:
                    73:10:c4:b8:6c:96:62:a9:1f:30:20:d8:3f:9e:3c:
                    13:7b:be:a1:f3:6d:24:eb:55:37:4c:2e:63:4a:9d:
                    30:73:a4:19:75:f6:26:e6:64:7b:83:ef:f6:36:40:
                    a8:06:f6:2c:5f:2a:50:dd:db:7c:c1:f3:17:92:f7:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:EF:41:6F:19:E2:65:6E:7A:61:79:46:DB:44:3C:63:EA:B2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/a082d65c-6976-35d6-be33-792a4918c345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.crl

            X509v3 Authority Key Identifier:
                keyid:40:5B:36:0F:E0:F0:2C:0B:07:E0:17:4B:4F:A4:66:7A:2F:2F:C4:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3987a02-9eb3-4f88-8e9a-2ba550c3443b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:9a:15:6d:23:6e:16:7f:2e:33:9c:c7:a2:34:57:0a:1a:
         29:03:0d:b6:48:a0:48:5e:5c:df:55:49:fd:56:8c:1f:f5:64:
         17:e5:37:5a:76:4f:07:f0:1d:0c:4d:3a:7a:5a:47:df:fc:a9:
         76:19:80:53:97:54:bb:c9:f7:7d:d7:65:82:31:1f:22:33:7a:
         b2:75:39:ca:89:29:50:7c:8c:29:1d:ef:8b:88:ed:5f:0b:be:
         53:79:52:c6:d1:7a:09:19:0d:fd:6e:71:7d:15:1c:80:50:8d:
         f8:1f:85:d0:23:a6:40:a9:07:01:77:13:9d:4b:49:d3:19:4a:
         60:ed:4a:e5:bc:7a:d2:99:a7:d6:e9:23:21:ee:3e:94:ff:b0:
         68:d2:0d:49:da:fc:56:47:20:a0:a6:12:44:2c:bc:e4:14:e3:
         cc:06:9e:a5:95:a3:38:d3:89:c1:b4:df:e8:62:40:37:5f:3d:
         92:81:5b:13:84:71:9e:a5:9b:42:1c:dd:4e:f7:19:05:86:a8:
         08:36:71:99:c3:f6:2e:9e:7a:bd:bb:d7:74:ed:cb:a5:26:64:
         39:99:74:32:2d:14:3f:98:58:5f:89:1b:fe:ad:54:51:d7:a9:
         9a:04:01:b4:15:05:4f:d3:f7:77:fc:2b:68:c2:3b:6c:48:19:
         b8:7d:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:23:18 2026 by rpki-client