Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
File:                     2436cc83-a62c-3742-950a-c8c1fdc678de.roa (raw, json)
Hash identifier:          P5ydGpMw/pkBqX8DVGDKHDoTNhGGQzV3sNwJvl/uFyI=
Subject key identifier:   B4:E8:9E:DD:66:F7:E2:D3:FB:3D:8D:1A:03:F4:82:EC:D8:12:1D:6F
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584D59EA4B67B45630592F228B90
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     19830
IP address blocks:        144.249.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4b:67:b4:56:30:59:2f:22:8b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=6217d8d6-e5f4-4ab3-972c-a01413695c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:5e:c1:7b:8a:e8:7a:e5:08:d4:6b:10:35:
                    96:ff:d0:f5:85:73:e2:db:93:18:c2:7a:ed:3c:8e:
                    bf:d5:f8:11:c2:3c:08:9c:05:64:87:e8:91:69:35:
                    61:2b:92:8d:c3:5d:fc:2f:ec:d3:96:01:a9:53:e5:
                    3b:9a:9c:1e:ff:4a:72:1e:50:b5:17:bf:82:19:0c:
                    07:39:fd:fc:4c:40:48:ae:5e:df:f3:40:ac:e4:8a:
                    c8:fd:af:c2:f7:22:a9:a9:bf:d1:69:7e:f6:e5:7f:
                    61:0f:0f:72:50:d1:10:56:5a:c2:35:e2:56:f3:5c:
                    be:18:28:21:f6:49:a9:c7:5d:7c:d7:21:38:e6:a3:
                    c7:9f:fd:0f:44:f3:d7:de:f1:ab:d0:c4:54:e6:22:
                    69:d2:e8:9f:c4:bc:17:5f:92:fd:c8:ba:9e:67:7b:
                    f2:3e:d9:a2:10:04:6c:91:08:bc:84:03:65:de:b7:
                    1d:b1:be:39:b9:70:02:b1:20:2b:38:f1:f1:b6:31:
                    ca:9a:88:81:05:47:39:ab:9e:47:2e:3f:26:f9:8e:
                    d6:9a:a6:c4:55:40:7e:0c:ed:1c:3d:0b:12:fd:85:
                    c5:64:55:c9:b8:3d:9a:26:a7:4c:4c:e9:22:65:a0:
                    aa:82:26:e7:ea:41:63:08:9f:e2:5b:99:34:ad:3c:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:9E:DD:66:F7:E2:D3:FB:3D:8D:1A:03:F4:82:EC:D8:12:1D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.249.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ab:2c:b9:23:7b:5f:d5:1a:37:97:e2:7c:f6:da:3c:5a:8f:
         75:90:54:26:d4:a7:73:2b:f6:69:02:81:ad:ff:d5:8d:49:5d:
         43:e2:82:84:f9:40:69:01:a9:fb:e3:09:74:5e:00:41:d7:b4:
         04:f4:41:dd:13:1f:e2:7f:69:c4:98:69:a4:08:f7:1a:65:f8:
         e0:2a:8e:82:f1:ad:c3:54:0f:fe:2c:32:02:39:27:06:6e:05:
         a9:d4:a7:ab:fb:0a:f3:3f:c7:5d:2f:48:f4:03:c8:a8:7b:f8:
         58:1c:34:dd:98:c1:39:b0:e2:84:44:64:be:3c:b5:7a:fe:8c:
         da:c1:16:2f:02:a0:f1:a3:44:0d:dd:12:c6:9e:c8:5b:c5:43:
         dc:6f:2e:59:82:36:11:56:82:b4:1e:b8:62:87:e7:ae:65:48:
         56:ea:4d:cf:54:e3:9a:a5:b2:f6:3b:13:2c:32:13:41:49:a4:
         3c:6b:f9:d8:19:aa:e8:ae:8d:b9:7f:0e:80:55:d9:72:0c:59:
         12:7d:3a:d6:e1:e8:d3:7e:8d:16:9a:50:2c:89:74:dd:d1:bd:
         84:7e:df:a7:0c:c4:c3:83:14:c9:c0:85:06:a2:5e:87:9f:c6:
         44:b4:ef:da:80:6b:43:be:cd:45:9a:09:84:7d:52:9e:06:9a:
         25:86:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:12:30 2026 by rpki-client