Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/fea999f6-44ec-32d4-a187-dbceb430649d.roa
File:                     fea999f6-44ec-32d4-a187-dbceb430649d.roa (raw, json)
Hash identifier:          G0jH7GIQR4ljfeJAb91RlGp5QY00rMaVdxRzWyuDVw0=
Subject key identifier:   B1:D3:96:3E:5C:39:84:23:07:3C:4D:A4:A0:85:78:E3:C6:29:F4:5A
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584D91C0118149ECE1F7C66C5940
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/fea999f6-44ec-32d4-a187-dbceb430649d.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     26383
IP address blocks:        141.195.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:11:81:49:ec:e1:f7:c6:6c:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=15efcc26-fa1d-44d3-b60f-062b8aec7aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:f0:79:04:5b:47:15:18:e5:d8:47:f4:87:
                    7c:54:d5:ed:b6:9a:df:6c:eb:db:8d:20:b8:48:b6:
                    4a:1f:d1:16:56:f5:46:58:cb:cc:30:ad:7f:48:63:
                    97:df:ce:5d:ea:b8:9a:3d:11:a8:45:f3:ab:e3:dc:
                    bc:b0:cd:e3:71:38:ff:d6:7a:56:99:51:76:43:e4:
                    1f:84:f6:ea:60:0b:ec:2e:0a:bb:51:7e:6b:8e:d3:
                    0d:e0:a7:d0:76:2d:fb:68:94:86:b7:f6:ce:dd:5a:
                    fc:a0:a5:27:67:af:5e:4b:ae:b6:85:d1:56:db:0e:
                    cd:8c:f3:94:c1:b7:96:00:ba:34:22:ee:c7:34:4e:
                    8d:cf:3f:55:2c:13:95:40:04:77:0a:a9:04:95:bf:
                    71:ea:d3:8a:b9:1f:ee:36:95:8e:55:c3:86:17:00:
                    30:f6:70:85:9b:da:6f:e9:32:7a:1a:28:5f:37:b0:
                    a1:3e:fb:bc:fa:1f:b8:16:ca:19:0c:e1:ad:c1:37:
                    38:54:38:71:63:46:0b:2f:12:d0:26:22:78:e9:08:
                    ec:27:86:b7:d7:97:84:bd:83:85:ee:c8:b6:22:49:
                    65:3a:3d:f7:a0:be:f9:ce:71:21:c8:df:4a:69:d8:
                    83:ca:f0:c6:55:03:e3:fe:98:5f:65:8e:f0:6c:85:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D3:96:3E:5C:39:84:23:07:3C:4D:A4:A0:85:78:E3:C6:29:F4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/fea999f6-44ec-32d4-a187-dbceb430649d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:cf:67:e1:83:68:7e:2c:fe:5a:30:4a:1a:89:10:f0:4d:
         0c:8a:ac:5b:bc:95:06:4b:e6:70:58:a9:ab:77:04:20:0f:e5:
         74:7e:43:79:b4:51:28:14:d1:a7:fc:8f:76:2d:1b:f4:03:e6:
         a8:f9:ba:fd:d2:d7:58:1e:55:0e:65:53:eb:6e:34:3f:5e:19:
         bb:6e:04:ac:5b:a0:37:26:ad:f5:4b:44:9f:8b:63:ed:40:fa:
         1e:37:ae:6c:75:c9:11:73:7b:30:02:72:b1:c9:dd:5d:45:06:
         2a:2b:a9:b1:b6:11:5d:58:f5:3b:a7:01:76:44:5c:57:47:3f:
         19:e7:48:d2:c3:44:ae:43:8e:15:6d:ef:49:aa:ca:a0:67:f6:
         e8:0a:47:5b:32:32:af:5d:44:9a:12:72:1f:3e:04:12:6a:17:
         28:8b:95:39:5a:39:a9:01:ed:c3:08:91:68:7c:c4:52:1e:70:
         22:6a:4e:dc:9c:6d:eb:28:47:19:40:0f:3b:68:7c:e2:a3:26:
         da:80:f3:4c:e5:dc:4a:3a:0c:a7:19:ff:ae:d4:03:e4:7b:06:
         9f:c2:4c:31:6a:a9:92:ae:25:1f:d8:37:ff:4c:8f:c2:11:0b:
         94:0c:79:88:ec:a2:22:a2:b5:4f:0a:e0:d8:89:3c:fc:1d:48:
         eb:ed:ee:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:33:38 2026 by rpki-client