Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa
File:                     3570b9a2-7257-34c2-8ad6-93b2c8045343.roa (raw, json)
Hash identifier:          IAGytKyRmqFq9tF3Vov4hDfnyQoe11sEG0IFiLBY6/A=
Subject key identifier:   1E:B8:12:22:81:F5:E6:F7:AC:6C:16:47:29:39:B8:18:1D:69:A5:6E
Certificate issuer:       /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Certificate serial:       010D0C9F4328584DD4C07E2787CBDE2B8F322E00
Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     4812
IP address blocks:        192.163.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7e:27:87:cb:de:2b:8f:32:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=bb73527c-9a63-455c-b891-ef9c280f6217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:28:fe:6a:e0:cb:a5:bd:e4:12:32:b3:3d:
                    8f:a1:55:29:5a:90:9e:04:09:d7:46:35:fa:19:12:
                    17:8b:fb:4c:39:1b:b5:a4:96:9b:14:ed:eb:5f:ab:
                    3d:10:9d:4d:89:ab:a7:d0:c1:de:9a:d9:1e:d0:32:
                    29:0d:18:c3:08:d1:4b:bd:e5:d3:7a:77:31:e5:e9:
                    fa:ea:16:e4:10:65:2b:a2:30:33:b1:dc:4a:7f:68:
                    ee:98:ba:62:ea:52:7f:e6:6b:27:d4:f4:55:3b:30:
                    96:fd:80:c3:7a:38:95:09:e1:05:43:ce:da:0a:35:
                    61:34:af:6d:49:26:63:56:f9:7a:97:3e:71:77:95:
                    be:9e:d9:f0:29:2f:4a:e9:f6:3c:2f:41:2f:e8:05:
                    db:d7:b2:f9:73:26:04:30:d3:ef:93:9f:ca:f6:2d:
                    c9:ed:d6:45:40:ae:37:a9:ab:a3:1e:76:00:d0:92:
                    a0:d2:4c:1d:30:4c:f3:42:1a:a3:a3:22:72:92:03:
                    8d:17:30:28:be:51:b6:0e:98:1d:eb:44:e2:a2:2b:
                    dc:1a:dc:b3:e4:d9:0e:b6:e6:42:be:92:ab:dd:63:
                    1e:19:d3:d4:31:95:ab:d9:98:68:41:42:63:9f:cc:
                    e3:65:7d:8b:1c:f2:82:4a:d7:08:3c:b0:1b:83:e8:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:12:22:81:F5:E6:F7:AC:6C:16:47:29:39:B8:18:1D:69:A5:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/3570b9a2-7257-34c2-8ad6-93b2c8045343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl

            X509v3 Authority Key Identifier:
                keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:0f:a2:95:b5:4a:b9:bd:22:0e:bd:4b:11:af:7e:d5:bb:
         8b:c5:99:a2:75:79:90:ee:9d:f7:33:cb:af:4d:d1:96:1f:15:
         ba:10:b4:dd:bb:47:00:d9:52:61:be:31:be:a5:55:a8:72:76:
         1e:ed:e5:c7:fc:c7:44:82:04:ec:5d:c9:3f:f2:f7:66:55:38:
         65:76:94:90:01:06:15:a4:0f:b9:4d:5e:92:4a:7b:96:1a:50:
         6d:1f:23:48:60:97:c3:4a:4e:14:39:62:5e:c8:21:19:7f:71:
         6e:75:bc:d4:a2:df:03:00:32:e0:9d:16:64:c0:8e:5f:5f:5a:
         77:f7:b7:aa:d1:c1:0a:4a:33:79:fd:fb:0a:e7:36:04:f6:38:
         16:2b:7e:f3:a4:ad:f7:86:0b:d1:31:d7:43:e7:b8:cc:a0:71:
         91:d1:78:67:89:3b:f0:a6:8d:c9:3b:a5:bc:e5:b1:18:df:f4:
         27:ef:f0:df:c0:8f:0f:cc:ec:e0:05:2d:8d:b1:66:f0:86:66:
         2e:d4:22:e1:4b:02:94:67:29:52:a4:b2:82:9a:24:13:b9:55:
         e9:b5:c3:6e:28:16:28:08:06:26:fb:90:c6:45:46:4a:81:6a:
         da:85:a8:c7:dd:7f:a7:1f:60:9c:93:c5:f4:fe:37:da:e8:d6:
         aa:9a:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:06 2026 by rpki-client