Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa
File:                     2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa (raw, json)
Hash identifier:          Ow9DXMABsJXi763Ytr9sidcYkocgSHn64Zx7Qd17FlM=
Subject key identifier:   EC:6C:8D:3F:A3:9C:8A:E9:8A:6B:09:E6:AA:47:5B:43:A1:44:14:93
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584D4CF485AFF74B746370BC7500
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa
Signing time:             Thu 26 Mar 2026 21:35:41 +0000
ROA not before:           Thu 26 Mar 2026 21:35:41 +0000
ROA not after:            Wed 24 Jun 2026 21:35:41 +0000
asID:                     394352
IP address blocks:        192.219.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:f4:85:af:f7:4b:74:63:70:bc:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Mar 26 21:35:41 2026 GMT
            Not After : Jun 24 21:35:41 2026 GMT
        Subject: CN=fb9c8453-2437-46ab-b648-31b4e5dfede2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:ab:ce:e1:7c:2d:0b:57:be:a4:db:b2:c3:
                    10:50:d9:ea:27:2b:cf:46:7a:3c:d3:b7:be:e7:98:
                    6b:10:13:5f:27:c9:13:d9:80:9e:11:23:5a:52:13:
                    8d:6c:7b:92:47:08:ee:cd:b9:1f:5e:57:88:2d:fb:
                    8c:a8:81:cf:8d:99:ef:01:2e:38:3d:4f:e3:35:77:
                    12:57:c9:b2:bc:84:69:22:ff:81:82:f3:1d:b1:b4:
                    b4:09:1a:10:94:3f:e4:e1:93:4b:cd:68:7c:cd:98:
                    d2:40:8b:a8:87:43:17:07:b5:9c:d4:0d:43:fc:e2:
                    af:33:c6:cd:73:d2:d5:0b:97:60:ee:f6:c0:51:2c:
                    80:46:15:7a:fe:a5:b6:ad:c1:eb:b2:08:33:f5:a5:
                    a4:94:ad:88:30:60:9f:44:08:82:e4:06:e4:f9:81:
                    24:54:94:9b:d3:ff:d6:b5:0d:de:9f:b5:9e:6b:b6:
                    71:5c:60:e4:99:97:61:4d:34:0d:b2:61:d6:28:f5:
                    76:26:c7:05:a3:59:57:1d:e0:2e:75:b1:7f:66:74:
                    bd:be:2c:19:52:00:e2:cd:1c:c1:83:dc:2d:36:e0:
                    2f:c5:4f:c3:f3:57:46:3c:6c:50:8a:cb:4b:d1:c7:
                    ae:f5:38:74:5e:53:8b:30:c4:44:63:77:c0:70:55:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:8D:3F:A3:9C:8A:E9:8A:6B:09:E6:AA:47:5B:43:A1:44:14:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:31:5c:6a:84:aa:33:6c:d5:3c:80:f0:37:5b:70:3f:49:
         2c:c6:cd:f3:38:60:c5:6e:d5:89:da:8c:01:5f:b3:39:8c:ec:
         dd:ae:03:53:a3:71:66:de:3b:1a:e6:f2:68:8b:81:86:58:ac:
         7f:a4:2b:fa:5a:36:26:ae:93:15:dd:fe:cc:31:96:b3:0a:26:
         ec:f1:36:8b:b5:61:2c:06:b3:c4:bb:49:c9:23:f0:a8:8e:1e:
         a6:72:9d:62:db:73:e3:de:1d:46:94:53:fe:58:05:43:20:87:
         c4:ee:1c:28:48:ad:04:e0:ac:a9:4d:04:a2:e5:8d:48:1e:b9:
         f8:b5:84:ba:f8:26:82:85:24:79:fe:f3:d3:27:9f:35:00:17:
         cd:dc:3c:81:a0:5a:e4:f8:3a:66:22:d3:10:45:7d:06:72:9d:
         a8:8f:fa:66:c0:d3:45:3a:00:bb:39:67:90:53:f8:6c:95:a4:
         b3:51:ab:6f:e8:04:a6:3e:41:7f:1a:f1:bf:0b:36:10:2f:ce:
         28:1d:b1:cc:7b:a8:b0:2b:2b:48:b1:10:23:66:0a:27:3d:db:
         e4:2c:99:65:91:5a:fb:cf:eb:2f:64:13:21:e6:31:1a:da:8e:
         0a:09:1a:24:e6:57:7c:b8:a7:36:a0:12:7f:cf:7b:d8:bb:33:
         31:1a:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 16:00:26 2026 by rpki-client