Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa
File:                     8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa (raw, json)
Hash identifier:          FJA3HPrfmEztUaUYZAjx3YztBP6qoCOVt7Ote+hY/gE=
Subject key identifier:   11:59:02:F7:D7:F1:6E:6F:1C:18:C2:4D:66:51:9A:97:23:07:FC:D4
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584D2D3F821752C25F6D3DA065E0
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     393262
IP address blocks:        192.111.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:82:17:52:c2:5f:6d:3d:a0:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=11d845be-05d0-474a-9b08-d230e5ab7b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:fb:88:47:99:f7:88:7e:e9:36:6c:d4:f9:
                    d1:fa:53:75:9a:79:5c:f8:ca:63:3d:26:f4:1a:18:
                    0c:48:3e:60:1d:c7:7a:47:4d:3e:75:f7:3e:70:ef:
                    25:13:2b:14:e0:02:7a:e8:5d:f4:c7:20:a3:58:a1:
                    8b:b9:80:7c:69:3c:e5:e2:66:79:86:97:cf:77:c4:
                    1c:47:d8:d6:43:3e:c6:0b:9d:e2:6f:33:fd:21:c7:
                    ff:d7:8f:5e:7f:e0:27:3e:ed:7b:74:c7:74:4d:e0:
                    54:b1:06:ca:09:5f:30:55:50:39:4c:ad:9f:11:dc:
                    d5:99:db:8c:49:c5:32:c1:eb:5a:22:38:f7:ce:7b:
                    5f:a3:b0:76:42:27:20:e6:c0:a8:09:d6:fb:2c:36:
                    06:c9:58:66:1a:a0:8c:a4:fc:fb:86:e1:0b:1a:85:
                    3c:49:f2:87:d2:c5:e9:9a:09:40:4a:5d:a4:14:83:
                    05:48:83:30:59:60:33:0c:34:47:9a:8e:01:00:3a:
                    1e:3e:0d:69:01:75:54:6a:bf:fc:80:b7:77:60:3c:
                    63:91:92:a3:70:18:46:e2:1c:ad:20:34:88:07:d4:
                    51:4d:70:a0:ec:5a:f5:0b:a3:c8:9c:c2:3b:b2:3e:
                    ea:00:8a:98:92:ae:7b:b3:cf:40:30:50:c7:b3:90:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:59:02:F7:D7:F1:6E:6F:1C:18:C2:4D:66:51:9A:97:23:07:FC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:06:b6:6e:34:76:1f:09:65:6d:14:21:92:d5:33:f6:0d:15:
         09:7e:ac:b9:06:26:b3:4b:f1:54:26:49:73:d1:d9:de:a6:c3:
         29:6f:26:41:43:e2:a3:d5:37:18:9c:c4:49:d7:8b:b4:b1:59:
         6b:18:a6:2a:4e:07:49:2c:07:75:d7:73:3b:50:04:4f:48:4e:
         98:68:91:c1:b5:6f:46:c6:2a:55:5c:16:c1:41:7a:57:68:28:
         7a:db:b8:63:3b:5b:0e:ed:3b:7e:d0:5b:64:3f:2b:17:69:8d:
         46:36:ae:60:56:83:67:9d:d7:e1:55:94:60:53:65:0d:41:92:
         e6:6a:b9:92:05:2a:78:7d:8e:c9:75:3a:4b:e9:79:e4:a6:ed:
         b4:f0:2d:a7:49:59:22:5b:1b:7a:21:fa:7e:2e:6f:d3:b9:44:
         43:d3:cf:66:24:9a:d1:fc:a9:ea:49:5e:be:25:9c:5c:ea:8d:
         4c:9d:85:b8:85:2f:d7:3f:33:b7:51:7b:d5:53:96:73:b4:aa:
         fc:76:9a:ea:8d:04:d3:16:93:98:73:d9:61:65:f2:88:8c:d8:
         84:ed:a0:d8:90:a6:47:a1:6c:d4:dd:1c:2a:12:f9:da:fe:00:
         b7:b4:be:43:88:9b:bf:05:dd:3b:c3:94:02:d5:a8:68:c6:22:
         d2:a4:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:31 2026 by rpki-client