Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa
File:                     2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa (raw, json)
Hash identifier:          e5jVpjtwQ//3XF5UJB/rwiHWiikaxTywDmABQOx62Pw=
Subject key identifier:   E9:4F:3A:3C:93:B7:DF:70:ED:F3:C0:F9:9D:2D:64:29:A4:21:14:2E
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584DA8157F87B825E878710FE4E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     202
IP address blocks:        192.25.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:7f:87:b8:25:e8:78:71:0f:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=b623a1f5-c703-46a7-b6cd-fd2cf7d333c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:df:6d:10:ee:bd:36:8e:ec:90:1f:4b:66:
                    ae:a8:13:4b:82:7b:e0:03:56:cc:40:c3:69:d0:83:
                    ef:88:88:5d:00:20:15:6e:3e:d6:cc:52:94:e5:c8:
                    eb:84:e3:bd:6b:5e:e7:5e:45:55:75:59:e5:5f:91:
                    9a:48:65:06:d2:ae:c4:0f:45:31:6e:53:fe:7d:16:
                    99:7c:4a:66:d0:27:65:99:bc:71:54:5d:fb:26:cd:
                    2e:04:3c:4a:16:8c:9d:e7:0b:28:9d:4b:c9:91:e5:
                    2e:4f:20:c8:4e:af:b5:88:45:48:70:bf:26:8f:b0:
                    ae:1e:c0:78:8a:97:82:4c:8d:d6:0e:de:d2:12:06:
                    09:ee:d7:4e:09:50:ea:f1:c8:fa:0e:df:23:32:30:
                    66:f7:e0:e3:b5:3c:b1:8e:f7:38:fc:02:8a:c3:6b:
                    8f:d8:bc:1f:65:65:81:24:ad:72:0f:da:90:7e:be:
                    07:0b:b2:cd:60:6f:11:64:68:da:b7:0a:26:0c:8a:
                    54:1d:b4:1b:79:7d:cd:4d:ff:53:c9:dc:11:a5:de:
                    84:01:10:b8:0e:62:b0:86:ab:1d:69:e4:63:b7:52:
                    28:8c:4c:91:8b:ec:6d:3c:a8:17:16:2c:73:06:77:
                    e6:38:91:84:c4:15:d7:cb:94:f2:4c:77:79:76:64:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4F:3A:3C:93:B7:DF:70:ED:F3:C0:F9:9D:2D:64:29:A4:21:14:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2fa6aafa-a6ac-32a6-91c9-11181b539b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:44:05:17:97:68:9c:e8:4a:2b:b5:e3:3d:e0:25:9f:a8:
         f5:26:83:eb:cf:73:49:c2:85:b1:c5:bb:6c:38:28:62:38:0c:
         2b:b0:02:7b:61:f3:05:fe:e8:18:14:cd:41:12:a7:57:23:2f:
         7e:03:82:6d:f9:2e:3d:f2:cb:11:56:23:4e:5b:20:8c:6e:5d:
         ac:64:52:f4:5e:25:2c:ce:86:5c:19:bc:e6:8e:c6:b7:f7:fb:
         7e:d1:fb:f0:db:24:77:c3:7d:78:bf:2f:34:9c:fa:d0:95:4e:
         b4:38:c1:ae:4b:a1:44:99:b4:d6:cc:b2:bb:d3:41:4b:81:8d:
         53:41:9a:9f:b6:b0:cf:08:2d:d6:9a:5b:0e:61:6a:eb:cb:f0:
         5e:0f:45:f1:df:26:ab:96:c0:f3:eb:86:bf:55:8b:66:f1:cb:
         36:af:a6:97:c9:d2:a7:82:7d:5b:d7:fe:40:49:4d:27:a6:e3:
         f3:c5:67:60:08:3e:70:84:ce:bb:52:cf:1c:70:c0:57:ce:cc:
         5c:59:8d:15:7a:e3:d8:27:85:4b:e9:bb:1d:1f:39:b8:ed:16:
         75:bb:3d:8a:14:87:4d:7d:15:7f:47:7d:34:97:48:f9:3e:56:
         09:4a:9e:d2:11:7b:53:28:07:37:59:a8:7d:d9:d5:df:ba:0b:
         f1:e1:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:38 2026 by rpki-client