Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
File:                     afcd93bd-2515-3100-bccc-fb4b5902b55e.roa (raw, json)
Hash identifier:          FWRv0L/dAy/DK9DsuemAxBa/74DPWMbFIsRv1Yd4yZk=
Subject key identifier:   36:CA:22:FB:63:97:DA:93:78:34:62:19:54:32:D3:0C:84:B0:2B:39
Certificate issuer:       /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Certificate serial:       010D0C9F4328584DADAADE883D8932C2220AB500
Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     271
IP address blocks:        192.197.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:de:88:3d:89:32:c2:22:0a:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=1dc7db91-3ed3-4395-8005-b08e53b8dc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:d5:e0:83:15:9c:0a:9c:d0:b5:a4:e7:f6:
                    95:31:d7:72:85:5a:c1:33:9b:94:a4:40:23:fc:60:
                    e9:14:59:fe:72:22:c0:ff:c1:82:e4:94:c3:91:3a:
                    9b:4c:f6:c2:9e:10:49:e1:80:a9:a8:d5:c1:14:e7:
                    f3:bd:7b:b6:95:33:10:b3:02:64:1b:1e:ae:e0:18:
                    d9:a1:db:47:9c:3c:ed:31:93:2c:d1:6b:64:e5:d3:
                    39:1a:45:01:90:2e:4c:45:a4:f4:b0:cd:40:b3:1d:
                    d9:e3:33:51:4a:3c:3a:9c:28:03:77:1a:57:19:72:
                    ce:58:fa:fd:68:0b:fb:45:d7:3e:0b:9b:d7:fc:97:
                    dc:f1:41:88:2c:98:df:03:54:e5:2b:1c:ac:5a:6f:
                    e9:6e:d3:98:d4:86:06:8e:02:de:61:19:87:65:e6:
                    2c:29:d7:cd:f4:14:ec:87:13:f6:a4:7b:94:1e:b9:
                    45:6b:83:f9:38:fe:0a:46:72:a9:7b:71:c3:04:66:
                    a0:6e:b8:bb:e9:68:c1:a0:27:67:f2:e9:a6:03:08:
                    44:2a:09:17:a7:e9:0b:10:63:64:56:21:e4:43:53:
                    e7:cd:30:2e:98:f3:5d:de:ae:09:bb:dd:1a:b1:65:
                    48:a0:55:7e:c6:2e:e3:81:74:ee:fb:7e:17:3d:2a:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:22:FB:63:97:DA:93:78:34:62:19:54:32:D3:0C:84:B0:2B:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl

            X509v3 Authority Key Identifier:
                keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:44:5d:18:ba:a2:0e:44:58:45:3f:6d:14:d0:20:f6:e9:82:
         fb:22:06:a9:2c:01:22:8e:07:f3:1b:13:b6:6a:8a:fe:15:a6:
         ce:ce:84:46:b1:e0:3a:34:6d:d6:47:0a:cc:aa:12:b5:f8:7d:
         a5:25:03:52:b1:ca:45:70:76:65:39:a0:63:2b:43:c4:94:fd:
         31:dd:76:04:60:0d:ac:b7:e8:28:a2:48:36:74:57:60:af:01:
         e7:a6:b8:26:1b:de:80:a9:37:4d:e3:1e:12:23:ea:02:18:da:
         09:09:36:80:47:6c:ae:19:41:3b:d4:65:46:4e:e5:21:91:cc:
         42:9f:19:87:00:65:bf:8b:d0:b3:78:8e:1d:3d:a2:03:7b:54:
         df:46:34:74:af:ec:13:39:c4:81:a1:23:a9:21:c4:9b:db:79:
         1a:5f:0a:61:1b:64:a4:ce:16:97:3d:98:57:96:6c:41:5d:d8:
         c0:52:d7:ee:85:8f:16:10:be:3d:a4:4b:8d:a7:53:f5:45:94:
         b3:92:1c:da:81:03:d3:42:4c:fe:9f:80:b8:b3:5d:0f:8f:2a:
         64:0b:e3:61:62:ee:87:62:3e:cc:55:40:36:4c:c9:8f:3b:85:
         12:41:34:f5:71:5d:0c:e8:42:81:3f:b4:e2:2e:0f:f7:1d:6f:
         7a:d0:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 01:42:01 2026 by rpki-client