Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476/14098425-1993-391b-a258-deccb29f44b5.roa
File:                     14098425-1993-391b-a258-deccb29f44b5.roa (raw, json)
Hash identifier:          478Obib0mw3J/JXnYwqF/ePio5nfsBp0Pv9egldY9tU=
Subject key identifier:   59:46:DB:67:DE:16:EA:5B:63:E2:79:B1:A7:BC:C8:CF:7D:84:BF:6E
Certificate issuer:       /CN=529ccaf9-4764-4f86-912d-a97b35b97476
Certificate serial:       010D0C9F4328584D3F64DF5AFF51CFBF809CFE80
Authority key identifier: 06:3B:63:BC:29:83:D6:6E:21:C4:46:8B:E1:35:51:86:14:B1:40:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476/14098425-1993-391b-a258-deccb29f44b5.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     27270
IP address blocks:        192.107.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476/529ccaf9-4764-4f86-912d-a97b35b97476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476/529ccaf9-4764-4f86-912d-a97b35b97476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:df:5a:ff:51:cf:bf:80:9c:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529ccaf9-4764-4f86-912d-a97b35b97476
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=beac56ba-8d3d-4bfb-a1bb-cc54d3ea0c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:fc:90:5a:05:68:df:d8:1d:ea:12:18:3c:
                    ef:fa:bf:2b:ec:dc:f2:4c:9c:14:15:c7:40:20:cb:
                    9c:4c:77:9d:20:ce:41:bc:e1:7e:b2:36:0c:ce:2e:
                    30:ed:c5:6f:9c:c6:e5:ce:a3:b6:34:67:05:88:17:
                    3d:e7:1a:25:83:11:cc:02:59:1c:a7:94:67:5f:3c:
                    b3:7e:fe:de:fc:79:5d:5f:4e:32:e3:c9:7d:ce:dd:
                    2c:0a:38:64:6e:a4:e9:62:ab:17:42:b4:ed:af:40:
                    49:22:e8:79:e8:88:30:34:35:9b:2d:b1:00:36:39:
                    ff:76:13:ba:eb:81:c8:c8:35:58:2a:26:16:4c:84:
                    24:f2:52:20:66:64:be:b0:47:55:31:56:06:24:a5:
                    53:81:3c:d6:8d:92:21:2d:b8:5a:ba:64:b8:29:a5:
                    7b:80:8e:ef:e5:a6:12:ae:37:e4:62:c6:58:5e:a9:
                    8b:5e:09:3e:51:8a:c7:c9:a7:77:c0:bf:5d:40:4a:
                    54:9e:9d:1c:59:34:7d:92:ac:df:6a:42:95:50:d9:
                    08:5f:a6:3f:15:7e:0d:ae:58:0f:1a:99:2d:ac:6c:
                    e7:98:e6:92:1f:4b:7b:2a:79:7e:44:e2:f6:03:51:
                    10:e6:ce:11:d7:43:65:64:ab:76:14:8b:ae:b0:f4:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:DB:67:DE:16:EA:5B:63:E2:79:B1:A7:BC:C8:CF:7D:84:BF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476/14098425-1993-391b-a258-deccb29f44b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476/529ccaf9-4764-4f86-912d-a97b35b97476.crl

            X509v3 Authority Key Identifier:
                keyid:06:3B:63:BC:29:83:D6:6E:21:C4:46:8B:E1:35:51:86:14:B1:40:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/529ccaf9-4764-4f86-912d-a97b35b97476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7b:02:96:33:c6:c3:42:e9:ee:1e:32:68:88:7f:44:1a:10:
         68:37:ca:35:81:0b:99:b1:9a:31:a3:fd:37:0a:f5:2d:8d:0c:
         6d:e5:20:d3:90:c8:c0:17:07:c9:95:9a:63:d8:56:9d:0f:05:
         9b:b3:59:b5:61:95:0f:15:57:e0:2a:c1:81:08:e8:d1:3b:af:
         68:b0:fd:d5:7e:f5:2f:42:86:fa:c0:ae:25:76:c4:77:00:6d:
         1d:c9:60:9e:74:0a:44:6e:dd:38:dc:8a:e4:ab:61:b7:53:87:
         a3:cb:6b:53:88:cc:cb:8c:35:7e:d6:4e:df:b5:55:41:61:3e:
         4f:4f:3e:6f:4c:da:0e:e6:ca:b2:0d:00:4b:d6:87:cd:9f:42:
         45:d5:62:8f:0f:4f:74:27:23:8b:76:37:4a:f2:b8:6b:5c:c5:
         51:dc:77:ef:56:8e:45:36:b7:a2:26:f6:f5:5b:74:bc:f1:5f:
         8f:8f:3e:df:bf:9e:56:72:ad:6d:e4:fb:65:2a:ec:6f:b9:1b:
         da:d9:03:28:36:68:3f:d2:c0:fa:8e:34:5d:5f:a2:e8:13:59:
         7e:74:75:95:69:f6:4b:27:33:8b:d7:42:1d:8c:92:ce:f1:e9:
         0f:45:8e:96:9c:4d:68:50:5d:df:19:71:29:39:5e:30:b3:90:
         65:44:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:58 2026 by rpki-client