Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/5c0dd995-7d73-3c24-a970-f7520de3af1b.roa
File:                     5c0dd995-7d73-3c24-a970-f7520de3af1b.roa (raw, json)
Hash identifier:          CD6MjIcXMTzlg82ViWU70bGufkEhMORDeRWtkJ9mf7s=
Subject key identifier:   6A:2F:23:27:18:40:54:BA:E4:1C:C0:16:88:BF:2C:02:4F:76:60:C7
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584D39CF8F329B97619B86283820
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/5c0dd995-7d73-3c24-a970-f7520de3af1b.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     19637
IP address blocks:        192.19.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:8f:32:9b:97:61:9b:86:28:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=2653d4a1-dedf-464e-84f0-34986159c5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:f8:05:41:6f:74:ad:67:f4:11:a3:59:e7:
                    ee:cb:f7:1c:12:ab:90:25:7b:71:0c:f8:0e:c2:08:
                    e4:8e:b5:19:24:7a:64:8d:8a:bd:a7:18:1a:bf:87:
                    66:40:43:1b:a3:00:1c:1e:d8:f1:57:3b:41:21:0d:
                    a8:02:c1:32:d3:ee:b2:ac:2e:d0:41:57:17:f1:83:
                    cb:6d:20:77:26:36:d7:99:49:c5:eb:6c:68:18:d6:
                    a1:45:3c:2f:15:66:e0:44:fb:22:2c:59:c0:0e:27:
                    59:b8:c8:17:c2:d5:18:6b:bd:f2:e7:d1:f2:ad:5a:
                    7b:b3:70:eb:e2:de:9a:ae:a5:19:2e:7b:d9:43:a6:
                    70:17:77:21:65:60:6e:1c:eb:36:f9:a7:3a:eb:d4:
                    60:07:41:66:3d:6b:e6:39:32:42:29:fa:e9:a9:39:
                    e1:48:6b:7c:c1:4e:e6:29:a0:e2:40:b7:30:86:81:
                    25:4a:30:3d:41:c8:16:94:0b:0f:85:77:6e:af:96:
                    96:a7:f6:b0:4c:d8:75:d2:80:2d:d9:63:a1:f1:5e:
                    92:d4:d4:c0:d0:fa:7a:ac:72:e3:70:e9:f6:32:28:
                    c0:3d:47:e1:80:89:ad:10:69:48:9a:f6:80:87:4d:
                    4b:1d:62:d4:67:15:c0:34:56:9c:6e:98:9e:8a:16:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:23:27:18:40:54:BA:E4:1C:C0:16:88:BF:2C:02:4F:76:60:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/5c0dd995-7d73-3c24-a970-f7520de3af1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:20:d4:e2:d5:69:93:ec:2f:22:7b:4f:11:80:6e:66:d8:
         c9:9d:31:0b:b9:19:3f:42:95:c2:48:d5:14:52:d0:59:95:61:
         46:f3:79:e8:32:10:0e:43:86:9b:51:f9:8d:1e:b4:82:c2:99:
         59:8c:32:27:8a:2e:28:f3:6e:78:8d:a0:69:fd:98:df:cd:af:
         47:4e:65:6b:58:f3:5c:f5:02:17:f3:8a:27:2a:3b:d9:89:38:
         c7:5a:01:b7:a0:9b:d0:01:99:42:18:b2:33:76:3b:d8:bd:54:
         6b:a3:85:4b:90:c7:47:e1:cb:16:52:e9:49:bd:a3:50:55:ef:
         c2:70:e7:10:84:ec:49:0f:eb:54:b2:5a:9b:85:4f:a0:5f:bc:
         8a:d1:c3:38:c1:98:16:23:d7:6c:c3:03:fb:00:44:fe:4b:03:
         97:6a:58:c3:3c:c8:ad:4c:54:9e:9e:8b:37:88:38:fc:d1:81:
         ae:a2:71:9e:b2:a9:16:e9:14:a5:db:6f:e2:5b:4e:12:0e:f6:
         0b:97:8e:41:d6:03:96:47:9e:d7:6a:c3:b5:2d:0c:92:a2:00:
         0f:7d:bf:22:cb:57:a4:68:b7:84:b5:ab:a5:2f:ca:31:d8:31:
         d7:44:fe:76:8b:cb:56:2c:7f:c1:57:fb:1b:3d:ef:0d:4f:7e:
         b7:28:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:25:12 2026 by rpki-client