Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/4661c5b0-3ddc-36cf-83de-f75598043a83.roa
File:                     4661c5b0-3ddc-36cf-83de-f75598043a83.roa (raw, json)
Hash identifier:          qpfvnKjOL3JEEgyy4NXvxIuSC4b5SDdivuUrDK6eN/E=
Subject key identifier:   CE:F1:23:74:27:D1:7C:2D:B5:51:B4:13:94:39:22:0B:72:25:9D:3A
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584D80FFEC0C51E5D9CD74EF2780
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/4661c5b0-3ddc-36cf-83de-f75598043a83.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     12208
IP address blocks:        192.96.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:ec:0c:51:e5:d9:cd:74:ef:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=3e3e4028-acdb-48c4-9ab4-211777130256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:94:fc:5f:bd:bb:5f:f5:96:7b:25:20:30:
                    2b:5e:ba:ad:bd:c6:14:56:18:5a:22:f1:49:b8:70:
                    ca:06:f4:b0:7b:67:83:02:a5:94:85:86:80:c3:c5:
                    20:c4:39:c9:a9:a1:b0:64:70:9d:70:4d:8d:f0:de:
                    90:fd:70:b0:d1:b0:e5:fe:be:d1:e8:fa:8b:18:32:
                    ea:d2:ab:e7:c2:97:97:aa:80:2d:f3:70:bb:ab:47:
                    37:3c:13:54:8c:b1:26:5a:54:25:95:88:91:97:81:
                    fb:6a:1e:d1:0b:e3:2e:6d:51:f9:b2:1f:e7:e8:7b:
                    4b:47:1a:19:1f:55:c9:d8:b0:9c:ee:ca:35:1e:1f:
                    a9:1c:05:2a:74:b5:96:31:83:2a:43:de:69:9a:35:
                    f8:fb:c6:28:4c:b8:55:19:f9:cb:b0:f8:a2:34:7f:
                    b5:aa:80:2c:4f:52:9e:8a:61:65:08:b9:ae:f7:5f:
                    e4:07:8a:e3:d6:a4:96:1e:2f:a4:fc:63:67:4c:4e:
                    2f:e1:4a:08:1c:f5:b8:87:a0:5a:68:2f:59:0d:3a:
                    fd:03:7e:f9:ab:ac:5f:75:ff:0c:42:4d:5d:0a:a2:
                    f9:25:44:ba:c5:cb:b9:f8:11:88:43:17:7b:a7:6e:
                    60:8c:ef:63:0d:b2:04:80:c5:4d:7d:5c:68:3a:c5:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:23:74:27:D1:7C:2D:B5:51:B4:13:94:39:22:0B:72:25:9D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/4661c5b0-3ddc-36cf-83de-f75598043a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:23:cb:01:66:82:af:ea:4d:9d:54:36:09:69:28:e1:9a:
         a9:84:2a:be:40:c6:b0:91:99:54:2a:b5:ad:b6:07:31:a9:7b:
         91:34:6d:6c:2a:06:4c:e7:a9:43:03:ee:4f:40:90:5e:06:a9:
         d7:c2:ee:2e:2e:ed:ff:41:fa:98:77:f1:e1:e9:26:fb:81:55:
         ab:7e:92:04:16:33:14:88:09:b8:28:a2:1a:50:9b:69:dd:6b:
         b5:b2:3c:67:a8:37:a8:c0:47:44:0a:e3:15:ff:7b:9f:47:af:
         6e:6f:52:cd:15:35:21:19:04:63:c5:4e:47:f0:4f:c5:68:ea:
         0d:63:00:27:71:f9:99:07:3e:36:c1:be:7f:23:50:1f:23:f5:
         bd:dd:6a:4c:0e:52:3f:f2:26:fd:d0:0c:e3:a9:fa:7c:9d:43:
         98:89:8c:0c:07:ef:e0:65:d6:bc:77:83:1a:2e:3e:43:42:72:
         50:45:90:f3:d7:21:21:d3:8f:98:75:64:78:b9:cd:d7:b3:6d:
         00:87:49:04:d1:db:67:b3:79:49:ee:3b:25:48:d5:9e:7b:7b:
         93:56:ba:2d:ec:af:d9:e3:cb:3f:34:9c:ef:83:0b:00:ed:6b:
         53:14:74:4e:e7:02:37:7d:36:74:0d:0f:91:0e:34:39:be:66:
         ed:78:bf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:01:04 2026 by rpki-client