Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa
File:                     f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa (raw, json)
Hash identifier:          NVpccbIbhDC2sgGMuyfubk7e8NuRmeLO89+0pS+HJ3Q=
Subject key identifier:   30:F2:18:45:D8:CD:17:36:B9:93:2C:E7:B8:27:0E:1C:41:EE:FD:A8
Certificate issuer:       /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
Certificate serial:       010D0C9F4328584DDBBB21D9E664A62523273F40
Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     1299
IP address blocks:        192.225.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:21:d9:e6:64:a6:25:23:27:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=36d58b28-c6cc-43f9-8375-2c1c4f87f706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:8e:a2:b8:16:1e:60:c3:13:9d:ac:ea:d9:
                    20:c1:99:7c:c3:2f:db:3b:67:66:52:91:a9:70:6c:
                    60:38:f9:c6:f2:83:65:b3:dc:c1:b6:76:41:49:4e:
                    b6:71:06:aa:f0:fa:e4:73:88:cd:d5:ea:72:56:07:
                    9d:ee:25:51:c6:f4:e5:48:08:7d:8e:99:56:b7:b2:
                    95:3b:e5:bc:f4:61:c3:83:6c:55:54:8c:35:e0:a0:
                    48:30:10:5b:52:81:8b:2f:8f:2e:d5:65:47:ca:11:
                    f3:56:4c:81:64:98:1f:37:b8:de:d4:41:bc:20:64:
                    e9:03:31:db:78:10:62:33:17:e4:b1:18:7e:e2:99:
                    dd:8e:63:e4:c5:61:24:12:1a:d8:7c:ab:d3:21:a3:
                    2a:85:8d:26:51:2c:fc:6f:3f:ba:2b:f2:d9:a5:8f:
                    57:fa:93:63:fc:f0:b0:60:05:21:46:11:97:03:73:
                    92:83:3c:44:12:39:30:a4:9f:22:17:af:b5:3d:99:
                    f9:b7:19:aa:92:b2:f3:fd:47:c1:41:ed:54:ac:95:
                    81:bb:be:7d:1e:f3:96:61:da:e7:d1:b2:8e:6b:3c:
                    67:e3:bc:22:a0:48:77:95:b6:6a:b2:fe:ba:13:93:
                    c0:db:bb:99:af:aa:23:4e:86:62:ef:3c:ee:42:82:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F2:18:45:D8:CD:17:36:B9:93:2C:E7:B8:27:0E:1C:41:EE:FD:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl

            X509v3 Authority Key Identifier:
                keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:34:9f:71:1a:23:af:50:0e:c2:fe:c5:7c:b8:cd:d8:82:
         40:aa:ae:da:9d:4e:83:5a:ed:ab:c3:4f:c5:35:d7:13:b2:e1:
         d0:b7:1e:4b:1a:5d:06:2d:48:c7:c0:d5:c7:65:01:5f:3e:90:
         27:af:c7:28:39:af:5b:3f:65:8c:01:97:b0:60:d4:4c:4f:28:
         5f:29:db:16:a8:b1:95:f3:c9:58:fe:cf:a2:70:f7:6f:f4:d0:
         ee:55:a4:22:d2:90:63:a9:33:16:f3:f2:62:c9:64:45:43:4e:
         95:38:aa:c4:58:f3:4d:6e:2f:09:ac:05:3a:26:e1:86:28:3c:
         e5:5a:54:0f:d8:7e:79:91:73:31:91:0f:12:36:22:64:39:3c:
         4b:8e:d4:50:94:b2:a2:a3:7a:00:8a:2c:09:08:36:94:58:06:
         fa:d3:b7:3b:12:04:f9:76:54:8a:89:8e:d1:61:b9:05:b4:57:
         99:97:c0:0a:c9:fc:ed:18:d0:29:c1:41:75:35:80:0c:66:af:
         e0:2e:fb:f5:0e:3e:bd:cf:aa:21:7a:bb:64:a2:39:80:58:20:
         18:4f:11:62:ef:30:67:27:c4:ef:3d:cb:5b:89:bb:a9:b4:86:
         e9:30:d7:22:cc:95:12:24:b7:58:fa:f6:86:04:89:d8:db:ef:
         ea:be:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:29:16 2026 by rpki-client