Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/20ed0538-aee1-3f30-9484-bcbcb2febd93.roa
File:                     20ed0538-aee1-3f30-9484-bcbcb2febd93.roa (raw, json)
Hash identifier:          gFJdeXwaN9U3+OmOy/9mjQWfV++6eXZa0m56h961M9c=
Subject key identifier:   23:E8:78:86:7F:C3:3A:87:FA:5D:67:6A:68:E5:F1:B7:77:AB:B7:A6
Certificate issuer:       /CN=a7a512b9-2c70-4de8-b33f-6b56d395dbb2
Certificate serial:       010D0C9F4328584DCAFB08284C18C5ECFE90C700
Authority key identifier: E7:67:6A:D0:86:69:0C:3F:DE:FB:AB:E6:55:1D:C4:BC:70:F4:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/20ed0538-aee1-3f30-9484-bcbcb2febd93.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        192.234.104.0/24 maxlen: 24
                          192.234.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:08:28:4c:18:c5:ec:fe:90:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a512b9-2c70-4de8-b33f-6b56d395dbb2
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=e1f9875b-3745-4db3-99cd-e40feefbef35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:d5:96:3c:e9:49:b6:1f:b6:90:55:6e:df:
                    18:cf:bb:5b:36:8a:8a:08:62:fa:c4:b7:e9:8a:f3:
                    23:49:c5:f6:2f:53:c1:bc:3e:21:7e:2b:cf:18:18:
                    89:6a:50:3c:c8:c8:e1:62:6c:6e:3a:53:1a:ae:ad:
                    21:52:1d:2e:66:ff:83:f8:09:94:9e:81:4d:00:82:
                    7f:20:79:be:13:7e:2b:96:af:9c:b5:c9:8c:7a:da:
                    28:be:e6:65:36:b0:26:ba:4f:5b:b6:18:60:dc:59:
                    c0:56:b6:68:a3:cb:44:29:c2:ac:ba:98:c5:e7:fc:
                    de:44:c8:1a:b4:16:8e:33:b7:47:f1:bb:30:55:6e:
                    86:42:36:81:bc:4a:9e:51:46:ee:ca:bd:17:00:1a:
                    0a:4f:27:1c:6a:f6:00:d2:68:5a:f2:c0:02:6f:89:
                    0a:a3:0a:f2:ff:e0:24:20:a4:45:82:3a:f2:9e:e0:
                    28:a8:9c:18:60:3b:07:36:23:67:b2:17:88:6b:3c:
                    08:78:0b:e8:72:6b:d2:c2:5e:19:82:79:5f:7b:c1:
                    f5:bc:20:3f:8c:83:0c:c6:81:3b:1c:fb:67:00:d4:
                    fd:cf:16:24:a2:5b:87:eb:f3:35:29:1e:6d:de:d2:
                    03:19:74:a1:40:9a:15:58:14:10:7f:5e:86:12:4e:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E8:78:86:7F:C3:3A:87:FA:5D:67:6A:68:E5:F1:B7:77:AB:B7:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/20ed0538-aee1-3f30-9484-bcbcb2febd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.crl

            X509v3 Authority Key Identifier:
                keyid:E7:67:6A:D0:86:69:0C:3F:DE:FB:AB:E6:55:1D:C4:BC:70:F4:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:98:be:2c:3a:8c:35:e6:ef:d8:9f:8a:9b:cc:66:a9:93:5c:
         f3:f6:4f:16:e2:75:10:f9:7a:5c:23:9a:c3:67:68:b6:80:65:
         66:03:33:34:c0:41:90:ab:38:aa:03:ec:63:7d:92:7d:f9:62:
         f4:36:f4:db:4a:ef:98:c5:37:5e:d4:1c:f3:75:b1:c6:bd:7f:
         d3:7f:fd:f3:f7:4e:0e:57:80:ef:d8:f8:05:91:b6:da:94:49:
         02:24:75:52:0c:d0:2d:23:c3:9f:e9:3f:c1:bf:43:dc:4d:08:
         68:12:39:10:2c:34:20:c0:eb:f5:ba:87:10:9a:5b:a9:14:12:
         c9:ec:1d:cd:7a:bc:09:72:6a:5f:84:45:50:76:e4:39:94:2e:
         48:d2:25:5d:1a:c2:ed:ec:05:71:c4:62:7a:a4:a6:c7:ee:63:
         e6:56:5c:13:4f:f2:1e:19:79:b7:6d:e2:5e:72:4a:e9:58:de:
         d5:9f:18:3b:ff:e1:23:5a:7a:bb:f6:f7:e2:44:0e:9a:a4:7b:
         de:3d:5e:4f:2e:44:06:ed:89:1e:a2:34:b8:00:6b:5c:47:3a:
         2f:07:91:f8:6a:0d:ba:1b:09:93:e1:41:96:23:93:e3:90:02:
         a3:89:8e:61:02:96:6b:df:bf:da:5c:38:db:dd:e4:e9:c4:19:
         b2:23:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:28 2026 by rpki-client