Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/3c3256f8-6151-3e44-ba56-5782caa483f4.roa
File:                     3c3256f8-6151-3e44-ba56-5782caa483f4.roa (raw, json)
Hash identifier:          3usjp+c0f5XG5qxW1myXNQkbonbXCv2UG9aBq0h8VsA=
Subject key identifier:   9D:EE:F3:77:58:A1:71:5D:A4:FC:EC:F6:EC:CA:23:4F:D0:1A:BE:88
Certificate issuer:       /CN=d04b3221-0f02-460e-b2ff-6c56b0392ea6
Certificate serial:       010D0C9F4328584D767095FEF925900127C0D740
Authority key identifier: 11:76:27:91:FC:EF:4D:4E:3F:73:83:14:90:3B:CC:2E:F5:5D:00:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/3c3256f8-6151-3e44-ba56-5782caa483f4.roa
Signing time:             Fri 10 Apr 2026 18:13:48 +0000
ROA not before:           Fri 10 Apr 2026 18:13:48 +0000
ROA not after:            Thu 09 Jul 2026 17:56:53 +0000
asID:                     8075
IP address blocks:        199.19.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:76:70:95:fe:f9:25:90:01:27:c0:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b3221-0f02-460e-b2ff-6c56b0392ea6
        Validity
            Not Before: Apr 10 18:13:48 2026 GMT
            Not After : Jul  9 17:56:53 2026 GMT
        Subject: CN=818706b5-8a38-4e47-b85d-3b9c915ba948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:44:3a:46:dd:de:db:40:95:7e:a3:c2:50:
                    cb:26:bc:1f:9e:12:2a:b1:99:25:58:79:89:76:74:
                    59:26:7a:d9:2e:2d:2d:07:88:20:51:4a:d7:7c:ff:
                    6b:89:45:58:4f:05:ca:76:b8:7f:08:f4:40:ae:93:
                    00:c0:b8:73:8a:40:69:84:64:44:e8:c0:9c:a5:ad:
                    bd:81:f6:83:98:c2:6e:72:50:22:bf:a6:fd:48:51:
                    be:8f:1d:34:c2:e3:85:20:a9:cb:de:1a:3c:8e:cd:
                    86:b7:04:11:33:3f:5c:8b:e9:90:4f:aa:4d:10:1c:
                    21:f6:b0:34:65:61:5a:97:bf:1f:ed:35:91:c9:7c:
                    09:a7:67:d6:9f:fa:b2:5a:dc:58:35:ce:aa:a7:80:
                    b3:18:fb:57:29:e2:8d:74:38:56:fc:b1:47:5b:a7:
                    84:a2:64:13:68:6f:b4:ef:2d:4a:ba:c9:56:9f:cc:
                    c5:47:5f:d9:ca:50:1a:a3:40:e4:19:87:3a:c6:a6:
                    ab:48:87:19:6d:7f:bd:14:08:a4:be:86:44:00:ca:
                    08:66:38:43:5b:c1:11:ee:06:66:e6:6e:a0:ab:0c:
                    4a:f1:e5:76:0b:53:52:3c:41:f1:c6:8a:6c:77:0b:
                    9c:57:f8:ea:40:f6:15:fe:9b:51:7e:75:e0:06:47:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EE:F3:77:58:A1:71:5D:A4:FC:EC:F6:EC:CA:23:4F:D0:1A:BE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/3c3256f8-6151-3e44-ba56-5782caa483f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.crl

            X509v3 Authority Key Identifier:
                keyid:11:76:27:91:FC:EF:4D:4E:3F:73:83:14:90:3B:CC:2E:F5:5D:00:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:12:d5:8e:c1:14:8d:53:43:9c:b0:08:79:98:3c:6c:b5:82:
         ba:60:de:3a:f8:80:07:54:aa:77:3c:56:15:1f:d9:30:11:06:
         2b:26:69:1d:dc:8a:54:9e:d2:32:b5:10:67:ae:3a:77:76:41:
         63:a9:ba:b9:2b:cb:b4:ef:8a:81:dd:00:7a:98:f6:f6:e7:4c:
         36:45:8a:0c:81:0e:cd:44:1d:7d:69:46:2c:32:ca:fa:58:74:
         2d:b9:30:95:cc:dd:40:09:31:68:d7:71:e0:f9:09:e1:77:86:
         c0:85:d6:fa:f9:71:3c:93:b1:91:56:c3:14:22:78:1e:d9:1a:
         84:e1:8c:30:3b:2d:aa:68:9b:c5:62:8c:b6:3d:57:0e:17:73:
         e6:1c:83:2d:be:45:c6:40:14:ce:2c:df:8a:15:dd:a8:83:d8:
         a8:d9:91:49:46:c7:d4:2c:fe:54:71:80:be:85:f0:1e:eb:fc:
         31:00:00:30:ea:9f:24:cf:9c:9f:a4:4d:a7:d9:29:a5:62:15:
         c2:de:8c:d2:b0:47:f7:33:a3:c1:60:35:3c:ad:36:59:c4:35:
         93:a2:fb:12:25:a2:bb:c3:86:07:b2:50:cf:31:54:ac:a4:76:
         f1:e1:5f:36:4b:1e:e2:96:4d:c9:2f:e8:2e:de:49:31:58:8a:
         f3:5c:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:08:37 2026 by rpki-client