Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa
File:                     a32eae39-94aa-37fa-bd74-50b883837770.roa (raw, json)
Hash identifier:          PVxEgahu9mNrDS06o/mjqHAIolitr7oOVFkJDnkzvEk=
Subject key identifier:   0A:39:51:D0:14:61:9E:BD:2B:48:40:EA:0C:1F:1F:80:4B:5A:56:5C
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584D39CF8F448588A51E1B92CF00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     19637
IP address blocks:        192.19.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:8f:44:85:88:a5:1e:1b:92:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=a4facc24-35d0-4d42-a8ab-9f2732724078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:28:db:d8:7f:1c:1e:ba:da:7c:58:e7:a1:
                    0a:90:8d:8a:8b:4c:e3:6d:15:00:a0:65:f5:4d:83:
                    b1:29:db:61:a2:30:75:4a:78:da:a3:23:58:f3:f3:
                    98:6a:06:ca:5b:ed:dc:67:09:26:74:06:7e:f8:22:
                    7e:95:c5:a6:78:15:73:25:0c:ee:73:71:0b:85:cc:
                    8f:99:22:28:65:4f:1f:08:71:37:c1:8a:d9:07:a8:
                    25:39:35:ec:f3:00:f1:ac:cd:7b:84:b7:dd:e2:1f:
                    b8:ba:0b:14:4f:61:8b:e8:0f:c5:a1:4e:a5:78:55:
                    39:ba:6c:39:29:05:2f:92:61:5f:1d:66:5a:59:c8:
                    51:58:7f:42:a6:7a:e5:b5:80:b2:33:85:f7:e9:a5:
                    0f:9d:cc:44:a0:5b:d2:fd:d0:99:0e:0f:75:e9:4f:
                    17:64:1f:70:fb:6e:2d:ca:b1:fe:fc:dd:cc:35:98:
                    4a:61:52:ab:5d:5d:51:d5:ca:61:e3:af:b3:d3:6b:
                    6e:5c:a3:d7:a1:8a:49:2a:e1:1c:08:cd:07:81:89:
                    42:b7:d9:a4:35:31:0f:1e:91:c2:2c:02:b3:b2:2e:
                    a9:90:88:fb:c7:39:1e:de:9b:b9:30:49:be:cf:d2:
                    5e:e0:7e:20:ac:74:0f:8e:15:84:d7:1f:0a:bb:34:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:39:51:D0:14:61:9E:BD:2B:48:40:EA:0C:1F:1F:80:4B:5A:56:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:50:6d:21:b9:cc:92:15:c8:d9:2e:db:32:a7:d9:0b:58:ef:
         8b:46:16:6c:a8:fe:be:d1:e4:4e:bc:cf:66:dd:69:18:74:ae:
         dd:f1:60:d8:3c:30:ab:06:e6:6d:93:7d:46:02:b4:fa:da:5c:
         49:b0:41:e1:20:60:f1:6e:8a:ab:c1:79:d1:d2:00:7e:94:eb:
         aa:ab:dd:f3:9f:db:c6:5a:1e:b9:49:2e:dc:ac:f3:79:99:4d:
         c5:1b:fd:21:18:c3:e2:18:3f:ee:aa:e2:d8:7a:8f:24:5c:36:
         7e:d6:26:d6:a3:29:30:30:84:24:78:de:f0:d2:6b:a0:61:c0:
         65:2d:b9:bd:5c:db:a2:4f:71:d5:5c:d3:0c:5f:a5:39:e0:cc:
         09:97:58:e5:7c:3e:8e:5e:b7:ce:4f:fb:0b:71:2d:96:9b:c6:
         1c:05:57:9b:69:c7:76:46:42:f7:90:db:ae:28:a9:2a:c4:f0:
         5d:d2:e3:e9:5b:cc:79:00:62:72:9a:88:2f:c7:e0:65:f5:dc:
         e3:4b:10:5b:07:4e:5a:2a:5e:71:7c:39:c1:3e:ff:6f:02:5a:
         89:f5:03:65:64:30:fe:02:88:9e:c4:3a:4a:24:70:1d:eb:4b:
         e1:97:63:19:52:36:9f:54:78:99:f9:20:16:3b:df:0d:5e:d4:
         79:30:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:26:57 2026 by rpki-client