Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/a9d3b6b3-3dd4-3d9c-91a4-1a290c5b902d.roa
File:                     a9d3b6b3-3dd4-3d9c-91a4-1a290c5b902d.roa (raw, json)
Hash identifier:          GCMb4UdnUz9p1uBHJC2q3bx3v1Jtpr3NE1MEm9QZjU8=
Subject key identifier:   E6:DD:60:8B:1A:98:E1:AA:49:7B:D7:45:3B:2C:29:BB:6C:64:B3:DA
Certificate issuer:       /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial:       010D0C9F4328584D3DFF9A961CE15A5B5CA59680
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/a9d3b6b3-3dd4-3d9c-91a4-1a290c5b902d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     18656
IP address blocks:        199.27.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:9a:96:1c:e1:5a:5b:5c:a5:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=c866f14b-0347-4f37-acca-215374935fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:ce:dc:52:46:3f:94:54:dd:4e:62:7d:7e:
                    22:8a:0b:21:32:fb:1c:0d:c2:fc:f4:01:df:32:fb:
                    78:43:0c:01:91:06:85:63:5b:27:d0:e9:f8:87:b6:
                    9d:b3:40:2c:1d:75:9a:98:99:89:3f:55:8d:89:2c:
                    d2:9e:6d:69:37:c7:83:3c:99:a5:03:e8:ce:da:0f:
                    aa:5e:76:4c:bd:d4:33:f4:6d:05:4c:b1:e3:0f:18:
                    dd:c2:23:7f:13:10:97:b5:0b:93:a3:3d:8c:57:68:
                    01:33:eb:d8:16:98:d1:4d:08:74:19:f0:e4:de:80:
                    65:c9:fe:e2:1e:5e:8b:19:95:0c:38:02:02:1c:d3:
                    98:d9:f6:f2:f9:99:c9:69:f2:96:8d:59:cf:df:1e:
                    05:7a:d6:08:82:e5:af:83:e3:f4:dd:54:d8:e6:93:
                    64:2e:52:71:1b:f8:f2:42:96:ab:a4:17:55:59:a7:
                    5d:ef:8b:ea:e1:cf:08:63:ba:92:08:f5:7e:89:19:
                    eb:2a:e8:ea:e7:88:92:1d:3f:c2:bf:0e:8f:ef:e7:
                    7b:b6:5b:9a:28:4d:4e:3f:0a:7b:4f:ab:f1:18:9e:
                    05:39:e0:28:dd:54:6c:ec:d1:dd:55:3a:3c:0c:56:
                    f1:52:3b:1c:0d:ea:81:b5:15:d3:a1:c5:7e:ca:8b:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DD:60:8B:1A:98:E1:AA:49:7B:D7:45:3B:2C:29:BB:6C:64:B3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/a9d3b6b3-3dd4-3d9c-91a4-1a290c5b902d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl

            X509v3 Authority Key Identifier:
                keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:02:48:2d:13:1a:5a:28:38:0e:42:48:78:b7:c2:da:c3:d5:
         ba:7e:5e:22:26:68:37:67:bf:e1:9e:c1:6b:7b:b3:92:78:75:
         05:30:1c:19:75:cb:fb:64:cc:73:51:37:da:f6:01:96:b7:67:
         fb:1f:77:fc:f3:16:76:17:95:65:24:9e:96:b8:1f:cf:e8:1a:
         44:27:9c:2a:28:e1:ae:1c:30:db:37:00:5a:6f:db:80:3b:83:
         71:ca:91:ff:58:2d:2c:f2:85:2d:c3:e4:f2:c5:74:7d:57:51:
         a1:44:6a:16:6e:0f:da:ec:37:49:3d:e5:de:81:57:99:bc:c9:
         4c:44:29:31:bb:0a:0f:64:02:37:2e:03:11:69:0c:51:68:06:
         4c:d7:63:0a:97:64:bd:4a:8b:ea:df:97:58:ba:03:49:9c:e6:
         2b:2e:83:18:2f:4d:4b:87:7b:9d:eb:d3:80:2d:59:c8:41:7d:
         82:d2:b4:93:46:29:be:02:2f:5a:fa:6c:62:39:c4:80:59:f6:
         ef:4c:e3:a9:95:c0:f7:87:b8:ca:b8:9c:4c:41:fe:72:26:63:
         bb:a8:28:20:ec:10:b4:fb:f2:f6:87:31:d9:8e:87:8e:42:ac:
         39:f3:ac:3d:71:82:35:22:e7:41:7c:f3:96:2f:44:8a:52:92:
         14:66:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:14 2026 by rpki-client