Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
File:                     6f6c6da7-938f-331f-aa19-5573ef780ea3.roa (raw, json)
Hash identifier:          U/OVCAq1oQ64sOpUOz5PKKzXmXwNcCY0vHYSGdDDYk8=
Subject key identifier:   6D:4E:D7:6C:A9:B8:1C:08:F8:2B:A2:BA:13:52:C8:72:64:DA:83:89
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F4328584D3B34E507B9883079C4D401E0
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     397913
IP address blocks:        192.148.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e5:07:b9:88:30:79:c4:d4:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=2aa475df-1439-4225-bd61-a3a69c70cef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:d5:92:6f:07:54:64:05:64:5e:03:6c:19:
                    38:58:17:56:0c:38:c6:8b:b4:75:fd:e2:02:02:cf:
                    91:d4:13:ca:df:55:4b:1b:5e:f3:e2:83:03:ec:7f:
                    44:94:16:a8:a1:bb:0b:83:0e:11:c1:42:e1:97:4f:
                    76:88:83:8e:a6:d3:98:00:1f:83:c8:05:c3:83:91:
                    1d:74:15:84:da:c2:91:8e:da:ec:fa:01:56:92:68:
                    94:f9:d7:f2:69:64:0b:32:7b:d4:1e:5b:d5:d4:58:
                    3b:8c:19:e7:b0:9c:e9:e6:8d:73:8f:2f:5b:84:ff:
                    8e:ae:81:a4:5e:e1:d0:af:b1:e2:03:a4:c3:d2:5f:
                    a1:6f:bd:b9:a1:5e:32:fb:98:a6:25:37:f8:3b:6a:
                    36:59:5c:ec:5e:50:85:d9:86:e4:74:81:30:ce:79:
                    84:82:39:3b:b9:e3:a4:3e:6f:62:38:91:e3:bd:59:
                    26:45:3f:1f:2f:25:49:96:98:98:8b:45:2a:7e:d5:
                    a6:40:60:d9:e0:3d:a4:72:4e:28:54:81:7a:30:05:
                    d3:19:91:61:2c:10:61:14:f3:68:f6:65:b5:49:89:
                    a7:2c:7b:cd:77:ad:0e:22:40:4f:43:49:5d:ce:40:
                    53:c3:21:31:b8:93:db:22:5c:17:4f:0b:83:30:bd:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4E:D7:6C:A9:B8:1C:08:F8:2B:A2:BA:13:52:C8:72:64:DA:83:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a7:a0:a6:a6:b4:72:0e:07:52:b5:31:b9:13:66:0b:81:81:
         1c:9e:31:c6:ed:8c:89:1d:42:e5:b8:49:e8:2d:51:b6:a2:e3:
         70:6a:52:15:f1:bd:3f:cb:ee:14:8e:9e:c7:f8:03:6b:9b:a2:
         bd:30:83:e4:20:bd:51:85:86:ff:56:d0:b7:4f:8e:9c:12:df:
         2e:bb:12:b7:d1:bb:e4:d3:24:d1:2f:69:b6:75:78:50:16:e7:
         64:e1:e3:52:83:e0:b6:ef:68:e0:bf:90:41:7f:9c:ef:ab:53:
         42:09:58:a1:ba:91:b3:b1:7f:d0:2c:b8:2f:a5:fc:21:a9:b5:
         94:b2:cc:a8:ba:e7:7f:0e:6d:24:65:78:07:4a:c8:ae:20:2a:
         ba:5b:15:45:3e:59:15:d5:5d:ff:3b:7d:2d:c4:9b:e1:d0:4b:
         52:4a:58:76:f2:9d:89:bb:18:2d:df:ca:91:d3:0f:7b:b8:c2:
         e1:3f:37:d5:ba:fa:59:af:37:79:c3:ad:4c:c7:cc:37:eb:08:
         fa:08:fd:31:05:8f:b4:05:6a:48:48:c3:4c:d1:9c:87:98:c6:
         f2:d3:2a:cf:0d:66:de:c7:ee:b6:60:43:f1:4f:3c:a7:2e:54:
         c4:47:0f:a8:df:2f:11:98:eb:1d:b7:4e:ba:20:6c:6c:ca:26:
         b5:e8:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:19:46 2026 by rpki-client