Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa
File:                     15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa (raw, json)
Hash identifier:          UmxawgTf7v5ENRn6tRZ4MuI8lILFdtSIfRbSChP2+4s=
Subject key identifier:   DF:58:69:51:CC:19:70:63:6C:96:DA:A9:9A:D6:2F:2B:0E:11:93:3A
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584D0D426F3176DFC1AEF4CF8000
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     397373
IP address blocks:        192.154.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6f:31:76:df:c1:ae:f4:cf:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=9ba74b01-fca8-454c-bed2-62430d578403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:08:b4:86:49:06:49:41:e2:50:f9:c3:d1:
                    cb:5c:a7:13:e9:80:5e:2f:ed:54:a8:b2:ac:5f:13:
                    cb:2f:f9:2f:d2:ee:ef:64:0f:50:58:17:be:7a:da:
                    ee:dc:5f:6a:cb:58:01:e0:a0:25:75:3b:91:58:ea:
                    6b:dd:b4:38:68:d3:91:05:e5:b2:f5:34:56:1d:2e:
                    f4:91:27:42:06:10:0b:63:55:b9:74:bc:71:1d:e5:
                    cf:2e:4e:2b:04:9e:c5:03:d3:43:dc:63:e6:3a:25:
                    ed:8f:50:2b:2d:93:9b:49:f4:63:13:82:3e:57:bb:
                    d7:e6:67:42:85:8f:be:64:41:dc:f6:36:42:46:1d:
                    77:16:8b:9e:2f:5e:3a:d4:cf:13:0b:bc:4d:64:ad:
                    dc:57:66:2d:bc:8f:05:14:70:03:68:dd:40:c4:2e:
                    c5:e9:68:ae:d4:0c:a6:f9:75:3d:83:44:c1:a8:06:
                    1c:d6:ed:7d:c9:e5:95:90:2d:41:9c:bc:93:48:d0:
                    14:d8:07:fa:8a:e6:b4:85:f3:41:32:29:ac:82:f4:
                    5e:18:57:13:6f:20:7d:7e:8c:4b:a2:1f:ea:06:a2:
                    da:43:c6:a0:9b:3d:36:e8:ad:d4:62:6a:6a:82:52:
                    50:2d:6f:71:7f:b4:35:51:c2:6d:62:1d:79:09:78:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:58:69:51:CC:19:70:63:6C:96:DA:A9:9A:D6:2F:2B:0E:11:93:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/15e0a6ad-fba5-3cb1-bf22-c25282ca0e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2e:a9:32:6f:37:29:43:65:32:ac:15:f4:e8:91:13:56:83:
         86:e7:ce:ba:50:eb:41:b3:39:60:2d:6c:99:9c:26:a1:aa:83:
         7e:cc:22:5b:8a:8b:e1:f6:1a:ee:05:ed:d8:10:b0:17:8e:a8:
         24:c7:41:47:c2:60:aa:58:88:aa:35:f6:42:4c:b4:0b:92:74:
         2d:3c:19:8f:f1:e1:47:d3:d3:e9:71:48:35:cd:12:23:fb:2b:
         b3:2e:75:a1:13:40:82:4b:83:90:81:26:69:85:00:10:35:b8:
         89:89:79:6f:e8:16:a4:85:83:22:15:c0:06:49:a2:a9:8d:90:
         d3:0d:5a:fb:20:f5:a1:84:12:9a:ef:5a:0a:41:30:3c:b3:ad:
         78:50:4c:3b:19:35:99:e6:3a:e2:be:12:35:35:41:2c:a6:6d:
         be:59:25:8f:63:e7:95:f9:7d:42:60:c5:ef:24:2b:e6:af:60:
         d8:e0:90:24:19:bc:d4:93:19:bc:d4:0a:c2:c8:ae:0c:e4:11:
         a5:bd:a7:10:38:8c:e1:e2:33:1c:10:0b:7f:32:57:18:f0:0c:
         fd:f9:d5:49:23:34:09:6d:ec:c4:a9:a3:bb:12:ff:08:ec:9a:
         73:a0:aa:c0:3d:b2:5a:73:0b:99:1d:67:a8:a2:04:45:c5:71:
         70:57:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:51:40 2026 by rpki-client