Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa
File:                     967eaad3-c11f-369f-9120-3854ace1ae5d.roa (raw, json)
Hash identifier:          u5RgBCgMySjoB3AARMiQBMWS5FHP1RkQje3pJguA31E=
Subject key identifier:   25:1F:66:C7:8B:D8:0C:21:5A:BA:10:C9:E6:E3:9C:65:F3:FE:1E:8C
Certificate issuer:       /CN=145bac4b-d098-4846-b4b1-ac1761209cd4
Certificate serial:       010D0C9F4328584D4D5A57B5A461FA328B302B80
Authority key identifier: AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     21681
IP address blocks:        192.86.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:57:b5:a4:61:fa:32:8b:30:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145bac4b-d098-4846-b4b1-ac1761209cd4
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=d9949b41-b2fb-4205-973e-e20eaa2b232f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:ad:09:a8:d9:6e:a8:36:7a:2b:04:50:5b:
                    da:2b:2f:05:a4:ce:0d:16:22:20:f8:2a:91:2a:94:
                    bc:7c:d7:ae:60:c6:86:81:d8:8b:2d:ff:b2:59:72:
                    21:80:e9:38:52:64:42:e2:8c:6d:39:4f:ed:72:ba:
                    09:b7:b8:95:4c:99:59:83:7f:53:81:9a:0b:96:31:
                    f7:1d:17:e8:9d:e1:39:20:8f:19:c2:81:51:ed:8a:
                    69:cf:29:92:f5:29:79:69:c3:79:99:7a:f7:0c:86:
                    34:95:5c:02:e6:12:de:f4:ab:bf:42:96:a7:3e:41:
                    df:81:f4:6a:53:22:49:ec:9b:a1:1b:a7:73:37:44:
                    7b:12:c5:9a:5e:66:bc:f9:65:b6:35:fe:6d:a3:e6:
                    f4:ef:79:5f:2d:67:61:d0:b9:37:d3:57:13:29:b1:
                    f1:ee:ca:f3:68:15:62:28:e9:c2:c0:0d:e5:ce:ba:
                    c6:a2:1d:87:d4:3f:16:ac:54:3a:ea:34:9c:a0:8b:
                    1b:8d:5a:88:54:44:fa:1e:d1:c3:fa:5f:07:20:d9:
                    10:55:bb:4f:73:20:80:54:fc:7e:d0:59:d5:e6:b7:
                    98:63:55:b5:df:c7:bd:56:30:aa:3a:e0:fd:e3:4e:
                    66:ae:e4:da:3d:af:25:8d:b5:bf:f2:f2:d3:af:33:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1F:66:C7:8B:D8:0C:21:5A:BA:10:C9:E6:E3:9C:65:F3:FE:1E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/967eaad3-c11f-369f-9120-3854ace1ae5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl

            X509v3 Authority Key Identifier:
                keyid:AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:3a:ef:60:6d:b1:bc:d9:b5:68:6d:ce:a3:66:8d:32:fd:29:
         63:ff:e5:62:3c:c8:ba:1c:eb:3f:65:ca:6f:eb:85:b9:34:7c:
         90:0e:e8:10:29:75:00:ea:61:dc:41:28:69:6d:f4:2b:46:81:
         f9:b3:19:9c:94:d5:f1:03:09:f5:9f:cf:64:35:97:6a:9d:56:
         bd:76:f0:3b:a9:bb:4f:70:ea:53:85:7a:16:8c:ad:1b:b2:b5:
         c1:a4:b9:0d:1d:ad:21:a6:cd:67:73:ea:be:4b:76:aa:db:0f:
         89:da:23:01:4e:c3:b8:db:c6:a9:1e:a6:7a:9f:4f:82:e0:73:
         ee:8e:20:f6:fc:4e:0e:c1:97:93:32:6e:c9:3a:52:97:e1:49:
         58:cb:b3:37:29:1b:53:4b:ad:cf:6f:20:47:e3:33:f8:81:67:
         f9:06:f8:22:ee:20:57:20:8a:fa:0d:93:b1:2a:20:7b:6e:2f:
         a0:6c:a1:df:39:92:43:55:37:6e:43:5e:97:14:b4:84:d0:bf:
         6a:17:06:01:2e:cc:06:89:5a:5f:1c:45:98:d2:92:79:b5:34:
         d2:47:2a:24:53:dc:b5:b3:28:8a:07:f0:73:ef:f3:34:7c:57:
         7c:5b:78:9f:b3:6c:7e:59:0f:a3:57:73:d2:ab:ed:0c:2f:18:
         d0:5d:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 15:42:56 2026 by rpki-client