Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
File:                     3758c344-8618-3225-b26f-acd90e5ffeae.roa (raw, json)
Hash identifier:          twdNhVjgkEATteJIKMXq4YxdcPQMdlwEPzxX2G0WiZQ=
Subject key identifier:   3D:EE:D4:A9:DA:70:52:7D:58:59:97:DB:B0:36:E2:67:58:B0:67:E0
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584D91C0012C9BA0F301D2B5D280
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     14618
IP address blocks:        192.175.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:01:2c:9b:a0:f3:01:d2:b5:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=075ba73e-6940-4cf6-ad05-9eb5454d7ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:0b:33:54:0a:ec:f0:91:6a:b3:d2:67:01:
                    b8:aa:62:82:dd:84:68:8f:a7:a7:33:7f:ab:43:9a:
                    33:41:07:dd:d5:9c:b5:92:be:e6:d1:23:22:55:1b:
                    e1:ff:d4:08:46:08:bb:01:96:b3:72:ad:c0:cd:fd:
                    a3:38:4c:59:3c:f7:34:ce:2e:95:13:37:18:5a:a7:
                    3a:ac:01:89:49:3e:4b:d8:ed:2e:63:ef:01:5f:00:
                    ef:6b:3b:81:36:0b:4a:d1:e5:62:9b:83:2f:21:3f:
                    eb:19:cf:10:b7:14:38:35:33:fb:2e:91:f6:4e:0e:
                    d2:19:87:18:10:85:94:d3:90:e2:7e:18:63:29:d7:
                    7a:52:ef:a7:ad:7f:20:df:27:4a:40:1b:d9:eb:24:
                    51:b8:cb:7b:1c:84:d1:6f:7a:b4:10:d5:89:78:2a:
                    67:db:19:e5:fa:45:f6:f2:d4:d4:48:61:43:8d:2d:
                    c8:6a:e7:6d:64:76:7a:f7:42:cd:c3:02:6e:8f:72:
                    2e:3f:74:af:e5:ac:37:a7:d0:9e:f8:fa:d4:bc:0d:
                    55:c7:8a:30:aa:68:92:bb:a9:25:0a:fe:8d:f5:be:
                    7e:40:62:d1:58:61:e9:c4:47:9b:18:cd:e7:c4:f3:
                    09:49:0e:57:8a:9f:d8:8a:06:a9:c7:7a:8b:8a:b4:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:D4:A9:DA:70:52:7D:58:59:97:DB:B0:36:E2:67:58:B0:67:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.175.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d0:72:c5:99:ae:e5:db:a2:2f:16:73:9d:1a:2f:86:50:28:
         88:27:1d:3d:70:39:2c:cd:72:2e:e5:9f:7d:53:4a:c4:e4:a6:
         5c:21:d1:72:94:5b:2c:bd:1b:d5:d0:ca:2c:01:98:5b:c1:fd:
         74:2e:34:7d:48:a6:e1:cf:ed:00:18:00:04:c6:74:09:a9:76:
         39:61:76:af:11:4e:0a:d0:b2:ff:c6:3a:b6:d4:70:4c:66:92:
         f4:4d:28:f3:89:5c:b9:51:3a:0a:8f:1f:26:48:99:20:0a:81:
         ce:e3:6a:50:20:df:a3:dd:9d:09:9d:f7:4e:4e:8f:ac:4e:d7:
         d8:e2:2e:ad:36:d2:3f:69:6d:8a:81:ba:d5:80:6c:31:c5:3e:
         9a:da:26:f2:ba:42:e4:5f:95:7b:b3:f4:dd:95:ae:6b:cc:e0:
         60:60:c7:88:ea:a3:da:d4:e0:d0:fc:ef:cd:40:a9:9b:ba:0d:
         b2:ac:a0:b8:57:3a:2b:d0:a1:09:1b:a4:56:f5:40:ec:00:2e:
         5f:53:23:a8:21:86:20:c5:69:b4:07:86:ae:9c:e7:dd:7f:47:
         04:05:23:40:1c:9f:1e:97:9d:ca:55:ca:58:89:2e:1c:ff:a3:
         1f:05:a7:de:be:c2:1f:3f:16:41:ae:ce:06:8f:35:0a:06:ee:
         3d:9b:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:16:10 2026 by rpki-client