Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
File:                     8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa (raw, json)
Hash identifier:          FEzbOxvrJjnOOn93BHxsJmPQxBlc/SjrWsImBE3RG6E=
Subject key identifier:   BB:FF:4A:7F:4A:DC:14:1A:49:51:63:3B:80:44:C6:66:4A:A4:F3:3A
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584D2A74BE45620E47157193FC80
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     683
IP address blocks:        192.5.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:be:45:62:0e:47:15:71:93:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=b5474626-d9e7-475e-8139-f42575db4c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:ac:85:69:e7:c5:18:ba:e6:9c:36:f7:f8:
                    cc:22:fd:ab:f3:99:80:c2:c8:36:ad:90:b1:d6:bd:
                    60:94:65:f0:20:cb:4c:dd:17:e9:fb:db:2a:60:9d:
                    aa:61:45:03:4e:7d:9d:de:39:1d:6e:b9:d4:d4:b9:
                    02:c5:45:26:fc:21:83:6d:f0:f6:94:28:03:01:e5:
                    59:84:a4:94:d6:b0:68:42:b1:88:b4:39:64:bf:b3:
                    bf:fe:b3:65:30:44:5d:0f:c9:c6:80:24:2b:ae:d9:
                    60:5a:a2:9a:e9:6a:1b:7e:a4:79:c6:5d:3b:b6:4f:
                    62:f0:5c:5b:f3:a4:8b:65:f7:dc:5d:5a:94:a3:2e:
                    a2:7b:a3:1d:31:cc:e0:79:ec:f5:68:7d:29:fc:98:
                    ab:b6:67:70:04:56:a7:b8:0c:de:14:69:73:72:c7:
                    c7:c0:3f:b3:d3:62:c0:69:51:35:c5:cd:b7:1f:92:
                    7c:04:ed:0b:cb:84:10:d4:23:5c:c5:b4:3b:84:15:
                    b5:c6:ba:32:b9:51:45:ea:3e:cb:b3:2c:e6:9a:9b:
                    d7:4e:e1:5c:c5:d5:2c:57:60:74:7a:73:aa:a3:50:
                    e7:71:86:df:b9:a6:18:2c:57:de:1e:ad:ec:1f:e5:
                    45:76:d7:1e:87:fa:74:4d:c6:a5:5e:89:f4:0b:82:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FF:4A:7F:4A:DC:14:1A:49:51:63:3B:80:44:C6:66:4A:A4:F3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:11:a9:3c:07:26:68:25:ac:61:95:a7:bd:95:28:4e:89:b7:
         d1:3d:06:4d:6d:22:c5:a4:18:70:d2:e1:a7:12:f0:6c:96:3f:
         2c:3c:bd:ec:68:c7:6e:ce:78:d0:7b:6b:d1:93:b3:77:c7:08:
         e6:dc:60:54:61:74:c7:b2:80:90:85:23:22:bd:15:fe:b5:4c:
         1b:e7:e4:82:93:0b:5d:7f:6c:83:a5:7e:e1:f9:ab:05:46:93:
         b2:84:6a:17:58:c5:e6:be:fb:a1:37:36:fd:67:49:c5:68:bd:
         ea:39:dd:0b:80:7d:84:8e:c9:6d:c9:9b:d2:80:96:d9:22:40:
         01:d7:24:be:8b:dd:40:41:7a:1e:38:1f:9e:93:89:b4:4c:e7:
         2b:89:51:cf:17:37:69:0f:65:0e:77:f7:92:43:bf:94:1c:10:
         31:7f:7a:d4:54:6f:c0:41:0d:4f:19:35:f0:b4:5e:a2:d1:f1:
         1b:93:31:91:20:d5:da:67:92:33:94:8a:ca:84:a4:cc:10:bc:
         93:36:8b:e9:53:1a:a7:9c:08:86:f2:2a:51:99:48:37:6d:d4:
         61:d7:05:81:25:d2:35:76:ed:ae:0d:8c:08:4e:14:c6:e5:11:
         3b:94:7e:1c:08:c8:c5:8d:a7:f7:9b:41:9f:4d:64:12:63:da:
         c2:2e:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 03:37:01 2026 by rpki-client