Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa
File:                     d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa (raw, json)
Hash identifier:          HD2n4l45wbpvV7XhD6J+P8N+WjT0psEj2Ema1Eu5nEg=
Subject key identifier:   C8:3D:1B:8E:2A:99:59:3C:B3:49:5E:5D:8F:46:94:3E:D6:37:48:5A
Certificate issuer:       /CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
Certificate serial:       010D0C9F4328584D386A5E099DFFF2EDF470F600
Authority key identifier: 84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     49592
IP address blocks:        192.88.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:5e:09:9d:ff:f2:ed:f4:70:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5b13b0-a994-485f-adca-a2ea27fc9de8
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=d1a8456b-f5d1-4f9f-b0a1-3559e65a5e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:d5:50:9a:4e:a2:c3:b1:62:a4:5f:79:f4:
                    19:27:e9:0f:0e:c2:bf:79:06:60:e4:15:5b:78:75:
                    72:33:b1:4b:77:fd:ca:ba:97:6d:19:2b:6d:84:42:
                    ea:0a:5e:b1:88:5a:04:ec:82:e9:7e:e9:ed:0d:d2:
                    20:95:37:4f:45:ef:d2:aa:fc:68:f9:aa:9f:c3:8d:
                    4d:45:4d:b3:cd:48:49:e6:a3:d8:72:7f:6a:18:3a:
                    e6:e3:c8:7e:11:81:cc:6d:4a:6a:7c:62:c0:fd:96:
                    8e:8a:17:7f:56:6b:b9:fd:4f:5b:ac:89:26:92:43:
                    47:4c:70:20:a4:5d:73:a8:36:70:96:33:87:05:53:
                    29:3d:c7:c6:51:2d:14:7c:56:c4:9f:0c:a7:c9:93:
                    38:55:6c:8f:fd:b5:63:03:95:dc:6a:6d:3a:25:cd:
                    f9:5f:4b:88:89:0b:1c:71:5c:d5:77:f4:de:a1:c6:
                    d1:76:34:61:53:e6:c4:fd:85:62:d4:6b:8c:87:82:
                    0c:f5:68:1d:26:b3:3b:47:2e:1b:ad:9d:ad:1f:f3:
                    20:06:cc:8f:31:06:f9:50:53:6d:f1:61:d5:27:3e:
                    f8:6d:ee:d2:a3:3a:18:5f:6d:da:24:78:23:a7:23:
                    de:25:05:b9:0c:b8:1f:c0:27:82:dc:c2:27:42:d1:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3D:1B:8E:2A:99:59:3C:B3:49:5E:5D:8F:46:94:3E:D6:37:48:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/d0740821-c0fc-3e7c-ac29-2d0403368ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8/9e5b13b0-a994-485f-adca-a2ea27fc9de8.crl

            X509v3 Authority Key Identifier:
                keyid:84:34:A9:F2:5D:45:CF:84:C1:EA:21:6E:17:E3:20:D8:4A:FB:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e5b13b0-a994-485f-adca-a2ea27fc9de8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:fd:37:6b:62:43:e5:15:9f:7b:1f:c7:17:c6:5d:84:42:
         83:d1:40:4d:8d:b6:4a:ab:0e:35:ea:f2:b2:48:7a:30:5b:8c:
         6a:b4:74:73:34:06:95:a2:dd:cb:53:a3:ca:69:74:5b:e8:17:
         68:52:d2:0e:08:99:f3:ed:a2:6f:0a:d9:ea:f6:0a:b5:09:a6:
         2e:b3:9f:bc:25:78:30:40:ab:aa:da:dc:e8:40:7e:63:2c:c0:
         b1:02:55:77:41:6a:47:19:68:ba:63:0a:65:99:99:0d:06:e4:
         f7:72:a3:1d:b7:59:34:83:3f:47:fe:3c:2d:1d:6d:d0:5d:1d:
         5b:85:a8:a3:ff:03:66:0b:bb:1f:bd:82:b5:3a:e4:49:3c:6e:
         c2:a3:67:b8:e0:b2:65:eb:75:4e:45:c0:6f:dc:63:b1:44:f4:
         92:1b:99:58:4a:05:96:9d:1c:c9:22:48:ad:40:17:fa:9e:4d:
         f7:28:42:65:f8:3f:31:c2:8b:d2:32:fb:6c:80:9a:9f:26:0e:
         04:0a:d6:9c:68:a9:f4:59:f0:03:1e:44:66:23:0f:04:c4:14:
         bd:a0:8b:14:b9:33:71:9b:d4:c0:03:44:5c:dc:35:38:3d:e6:
         0a:db:a3:d3:0f:da:c8:34:fc:b3:b8:4a:74:58:b4:b7:70:22:
         67:12:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 13:24:45 2026 by rpki-client