Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa
File:                     9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa (raw, json)
Hash identifier:          9JomVU+HXR9gIDjYzqQXuuqxbRJAmjvyqi98AO9AsY0=
Subject key identifier:   28:AC:6F:49:93:A8:10:F7:C7:E5:B4:BB:B2:73:BB:9B:00:7E:57:DB
Certificate issuer:       /CN=45b8fbfe-2e8c-4cd8-ab63-10254221356e
Certificate serial:       010D0C9F4328584D4D5A918C9AE0A96CF76A6780
Authority key identifier: 41:EE:BD:C1:99:0F:E8:FA:C2:55:8B:D8:A8:36:EA:5A:60:04:26:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     396480
IP address blocks:        192.84.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/45b8fbfe-2e8c-4cd8-ab63-10254221356e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/45b8fbfe-2e8c-4cd8-ab63-10254221356e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:91:8c:9a:e0:a9:6c:f7:6a:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b8fbfe-2e8c-4cd8-ab63-10254221356e
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=2bdeabb2-d59b-4cbb-9354-f2cde8d418c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:d1:ac:17:bd:ca:6f:f4:08:8e:4e:c0:e3:
                    f6:83:d8:e7:85:32:58:b0:e2:b9:97:05:08:81:9b:
                    2b:06:3e:2d:0e:c2:00:1a:0c:cb:9a:dd:9f:a4:77:
                    07:ef:4b:bb:f6:bc:cd:66:25:6e:37:a4:f8:bd:e9:
                    d2:14:9e:80:07:6b:8d:6f:d2:fc:30:16:bd:9d:a9:
                    1f:d5:8c:c7:83:8f:ac:36:8f:ee:f5:d3:96:0f:dd:
                    cc:3a:31:75:9d:de:ea:5f:41:c9:8e:ce:2f:8b:61:
                    de:2a:90:26:f4:91:fa:c6:38:5a:29:1b:39:b4:98:
                    a7:47:06:e0:5a:f1:82:c6:9f:d6:43:8f:6c:38:83:
                    eb:24:b8:dc:ef:80:f7:c9:bd:35:0c:84:28:d7:1a:
                    f6:c6:33:e0:9a:90:37:f0:fe:79:31:7a:f0:64:ab:
                    fe:81:7f:fe:a9:d7:1c:4f:6d:d9:14:64:f4:17:cb:
                    a3:5f:70:50:4d:cf:6f:06:77:f2:c7:df:44:2a:4d:
                    6a:e8:16:1b:94:30:70:41:b8:ae:45:69:1f:62:a1:
                    61:20:08:8b:23:16:54:1a:89:65:16:4a:20:04:8c:
                    61:64:11:5d:00:82:ab:ff:f6:54:49:34:50:1b:0f:
                    20:9a:37:cd:68:0e:cf:61:06:30:05:4a:3f:8e:97:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:6F:49:93:A8:10:F7:C7:E5:B4:BB:B2:73:BB:9B:00:7E:57:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/9d26ea2e-931e-3a3f-8dbf-784d0e3a72c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/45b8fbfe-2e8c-4cd8-ab63-10254221356e.crl

            X509v3 Authority Key Identifier:
                keyid:41:EE:BD:C1:99:0F:E8:FA:C2:55:8B:D8:A8:36:EA:5A:60:04:26:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:4d:e1:46:dd:09:d9:18:ab:dd:73:21:6c:e9:b6:50:10:
         fc:b9:7e:ea:77:36:af:e8:cd:51:0d:85:3e:07:0b:8e:3b:04:
         5f:8e:37:e3:e8:52:01:90:c1:32:3c:93:8c:2e:1f:9a:e6:8a:
         8d:67:ed:b7:23:17:ce:47:f6:f4:2f:aa:5b:fa:05:3f:ac:bc:
         33:9e:2f:18:71:7c:c5:a0:37:ed:f6:77:4c:71:58:91:2f:2b:
         de:c1:2a:ea:65:ed:05:42:4d:f7:f0:67:06:58:5a:53:3d:2d:
         c3:6f:5c:12:37:e4:be:b2:3e:fe:ed:3f:ef:ea:46:b4:34:a3:
         2d:6f:ea:1a:39:e7:60:b4:1a:05:6f:43:88:b6:ed:81:19:00:
         51:88:9c:1d:bd:cf:8d:57:8e:f3:4d:5a:de:97:eb:5c:9e:de:
         f1:48:9c:a7:c6:20:32:d6:1c:99:55:c6:57:4e:cd:6c:16:e2:
         9e:a0:41:91:cd:60:5d:37:12:7d:40:06:73:66:af:17:f6:1e:
         91:1e:d1:da:99:97:0e:e0:72:47:f7:97:30:a7:42:c1:db:b4:
         62:c1:94:ab:9c:f9:53:78:d6:f0:ac:d0:79:c9:57:0c:a5:91:
         9a:bd:9a:c4:a7:ff:a1:9f:c7:ce:01:81:63:48:79:5b:d9:17:
         0e:fe:a5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:38:37 2026 by rpki-client