Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa
File:                     96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa (raw, json)
Hash identifier:          j59gB4y9HQk4ktkEFd6HCCbuWpE/40oR32CC62j/R/Q=
Subject key identifier:   D9:FF:50:0B:B3:DA:52:25:28:1A:4D:F4:C5:F6:16:BD:D3:A5:96:00
Certificate issuer:       /CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Certificate serial:       010D0C9F4328584D8EF578B7DF5E314D251D0DCE
Authority key identifier: 1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     14661
IP address blocks:        192.26.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:78:b7:df:5e:31:4d:25:1d:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba63dff-a873-460d-a7e8-ce4e073bce67
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=84c23de1-0bb3-4c8a-a8a8-ed2ec7ae9d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:d2:cf:05:0b:d5:ff:ae:bd:85:5c:33:6a:
                    4e:6c:52:74:b3:fa:68:cb:d3:54:63:de:e8:75:c4:
                    fa:24:73:ef:66:3a:0f:c4:47:af:c3:60:a2:6b:fe:
                    eb:7a:a1:a9:f6:78:4a:b9:b0:0c:b9:23:8a:35:a5:
                    a7:d2:12:ce:be:b5:db:67:6d:42:0a:30:9f:66:af:
                    86:00:bb:f9:a9:93:7a:07:0c:84:ca:48:ca:ad:6d:
                    1d:90:f3:40:fa:d6:df:9e:b0:57:08:e5:d8:64:1b:
                    20:a6:62:57:88:dd:5e:d7:58:12:99:a9:bd:7e:0c:
                    87:f7:1d:ce:35:57:6e:22:fb:b9:65:52:d7:83:ba:
                    8e:8d:a3:34:45:06:e2:ea:c8:16:06:13:c2:95:6c:
                    a2:a3:10:e8:57:d6:9a:8e:55:52:7f:63:d2:46:17:
                    72:ec:12:cb:37:b6:e6:e6:48:26:1d:c3:b0:33:14:
                    ab:f3:15:47:4f:09:42:42:ef:66:e0:48:4e:b3:02:
                    33:bb:8a:a8:45:a5:f3:08:4d:f5:d7:05:f6:84:59:
                    06:df:4b:9e:ff:65:bf:1f:56:ff:76:33:c0:f1:dd:
                    b9:b7:8e:1d:2d:5c:51:3a:d6:70:57:31:f1:10:dd:
                    54:b8:1e:41:47:3a:b6:44:a3:d7:3f:5a:a0:fd:a1:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FF:50:0B:B3:DA:52:25:28:1A:4D:F4:C5:F6:16:BD:D3:A5:96:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl

            X509v3 Authority Key Identifier:
                keyid:1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:2e:a3:e8:06:75:e9:0a:a1:fa:54:e5:bc:89:a7:f9:77:
         4b:08:d4:31:a4:32:f6:51:ca:d8:44:29:5d:53:5e:26:bf:8a:
         6d:f5:42:c4:d0:72:e9:7c:9c:a4:03:50:d7:8e:7c:62:db:c6:
         84:15:39:9c:bf:57:9c:8a:64:d5:2f:74:d2:aa:dd:fe:65:f1:
         2a:eb:66:09:52:09:03:ff:db:16:f8:e9:e6:ac:b0:1a:3c:19:
         99:48:40:50:bd:59:f6:00:c3:e5:6f:91:8e:f8:ab:31:2e:56:
         f8:78:88:e6:a3:3d:a5:11:79:61:cb:d6:f9:b0:0f:e0:4e:5a:
         a1:9c:bb:8e:f9:16:99:5b:30:cc:84:96:0d:ef:22:dd:8a:d3:
         84:90:ef:ad:cc:cd:f3:31:0f:65:80:70:7b:18:c0:3c:18:cd:
         6b:93:16:6f:4b:ef:0c:50:e5:7a:92:3c:90:8b:f2:e0:16:e6:
         73:c4:05:80:5a:41:70:6b:57:bd:0a:2a:e6:02:6d:c4:56:09:
         e7:6d:c5:27:23:c6:7c:8b:ec:6d:dc:d1:8e:ea:d6:60:c8:ff:
         2a:de:a3:e0:92:24:99:f7:28:ba:ee:11:be:61:9f:de:1c:3c:
         28:a7:e0:8f:07:41:47:96:7b:69:e4:81:4f:f4:3e:1e:7f:4d:
         17:5e:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:32 2026 by rpki-client