Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa
File:                     90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa (raw, json)
Hash identifier:          UJJmwcR9WtTER/QAn24bASe+WBP2G9aAxzJACdrfff0=
Subject key identifier:   FA:17:96:AA:96:FD:35:D3:09:0E:E2:81:20:5A:A5:F2:5C:56:ED:6D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DE2B5DD4007D95062FD899D80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     211440
IP address blocks:        203.17.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:dd:40:07:d9:50:62:fd:89:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=686f04eb-0dc7-4052-848d-5decbf0abfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:01:5e:e1:87:d0:32:08:9d:fe:57:57:eb:
                    f1:89:ed:f6:ff:0d:1c:1b:0d:5a:69:76:ad:85:c7:
                    1d:97:b9:9e:41:91:58:52:36:25:86:ec:d7:a1:3e:
                    56:a9:71:a2:a1:77:c5:22:05:9f:9a:b2:16:37:89:
                    85:05:60:75:1c:8c:08:d9:2b:72:dd:76:70:8a:1c:
                    4d:fb:a0:67:3e:b0:de:eb:7c:63:0f:ed:16:34:b7:
                    2c:27:ae:da:88:8a:40:f7:e0:0e:dc:86:9b:4d:3e:
                    26:70:22:da:cf:2a:bb:64:d6:f2:64:7f:51:4e:b8:
                    e5:6c:2c:9d:5d:0e:c0:eb:e6:59:69:9d:ce:4b:84:
                    30:fe:2a:57:24:68:21:5c:2c:6e:a3:d8:d9:e7:a7:
                    15:9f:b1:67:ec:9a:89:48:b9:82:f8:4e:7c:fb:ae:
                    5a:ed:bb:0c:14:32:3c:63:16:ed:f6:9d:8e:81:48:
                    be:92:61:07:d5:6c:4c:b1:e1:2f:9e:29:66:4b:c9:
                    28:49:f8:5a:d3:f6:b9:78:db:80:f4:e4:91:22:47:
                    24:0b:c1:07:62:71:02:a0:b3:fa:2a:65:03:68:be:
                    95:95:1c:54:f5:dd:3b:27:94:f6:c0:f6:06:45:63:
                    ab:0b:cf:7d:e8:be:3d:f0:38:b7:a4:3c:cb:ff:7b:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:17:96:AA:96:FD:35:D3:09:0E:E2:81:20:5A:A5:F2:5C:56:ED:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:b0:ca:8d:59:50:b2:e1:7e:e5:d6:52:ce:dd:83:94:ce:
         0a:3d:57:37:80:0f:27:2d:68:b3:ed:92:5a:fe:f8:b4:18:33:
         25:a9:7a:07:22:1e:56:3d:b3:75:be:e6:8b:8b:96:00:7d:53:
         fe:c8:7b:32:be:cd:15:28:28:99:ff:36:b7:a2:d8:3e:91:8b:
         dd:26:d0:b9:65:1b:09:8b:25:15:f6:6f:03:6c:16:35:ba:83:
         61:32:d1:69:3b:a2:f4:d1:98:a8:69:36:61:8f:6e:97:a4:71:
         e2:e5:75:f8:b6:e1:31:19:8b:e1:e8:ca:bd:e4:19:26:57:f4:
         d8:d3:3f:bf:72:cc:54:22:62:9c:49:9d:36:48:2a:9f:8b:8d:
         d4:a6:55:c2:15:78:1a:59:00:ba:48:1b:b1:91:e9:b1:4c:57:
         40:aa:68:7e:fb:2f:25:4a:44:87:f1:81:9a:55:61:4f:d0:c4:
         1e:44:b9:5a:61:fb:ef:06:57:04:2b:19:35:31:65:2d:19:f6:
         2b:b9:d5:fe:5f:6d:a1:c0:25:ef:80:b7:56:57:3a:da:56:07:
         5e:bc:7a:a1:a8:89:0b:98:97:1b:c0:f9:2d:4d:7f:cf:8a:53:
         a5:60:a2:15:13:d1:49:59:b8:e4:7f:38:f1:2a:86:e3:00:a3:
         e2:fc:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:02:36 2026 by rpki-client