Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/f92c539b-0df0-358a-b03e-3e58f93e8c06.roa
File:                     f92c539b-0df0-358a-b03e-3e58f93e8c06.roa (raw, json)
Hash identifier:          qno/D7c+MRCDmwGCjc2tYvUQdi4XYcsN5Kr+oT61Ud0=
Subject key identifier:   CC:22:54:B2:B0:7E:1F:8E:36:FB:93:81:7C:52:CD:53:5C:F8:6F:74
Certificate issuer:       /CN=c2f44330-33cb-4ee6-abe3-ad99521d4d4b
Certificate serial:       010D0C9F4328584D3DFFA6B8EBE028AD26E41B00
Authority key identifier: ED:E4:42:F4:9A:DA:A6:B6:A6:B0:1B:61:CD:09:70:96:A8:E2:23:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/f92c539b-0df0-358a-b03e-3e58f93e8c06.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     26320
IP address blocks:        198.35.42.0/23 maxlen: 24
                          2620:36:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:a6:b8:eb:e0:28:ad:26:e4:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f44330-33cb-4ee6-abe3-ad99521d4d4b
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=4ed9074d-0ccd-40ef-a840-50702ccd5647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:a1:56:84:21:86:a1:6b:17:8f:26:85:a2:
                    90:8a:85:11:34:e5:74:f1:d7:b5:8d:2d:a2:7f:83:
                    18:e1:c2:20:62:e5:18:cd:bb:f8:48:fb:7c:a6:45:
                    cc:9b:ce:a4:26:2e:ae:5f:67:be:eb:41:3a:f7:9d:
                    a1:72:1f:99:97:5c:7a:c7:59:81:d2:f0:60:06:29:
                    6b:f3:93:c8:6a:12:ba:9d:26:ac:0a:b1:b9:6c:b1:
                    00:b7:e3:70:62:47:ab:49:b7:19:5d:f1:bf:85:f1:
                    8e:1c:ad:c4:91:7d:69:33:74:e7:14:fd:08:48:dc:
                    09:3f:5e:f0:9a:7c:00:61:dc:77:c6:67:a1:b8:02:
                    60:c4:dd:02:04:fc:0d:5b:96:b6:0d:14:c3:4c:e3:
                    78:0f:09:39:2e:84:fa:81:34:75:70:b5:0d:9f:67:
                    9c:ac:7b:30:e1:e2:4b:97:cd:81:08:5f:b2:a5:95:
                    9f:af:29:f4:69:10:59:f8:03:ee:f4:42:4a:9e:2a:
                    2a:b3:ad:51:99:05:88:17:f9:46:8b:0e:f6:20:ce:
                    4f:7d:97:31:94:af:2e:69:06:0c:ee:54:f2:25:0f:
                    55:5c:24:0a:0f:55:71:51:54:2d:93:45:61:91:39:
                    de:9f:29:c5:f4:6d:08:94:d9:e5:cc:23:e5:d5:9f:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:54:B2:B0:7E:1F:8E:36:FB:93:81:7C:52:CD:53:5C:F8:6F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/f92c539b-0df0-358a-b03e-3e58f93e8c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.crl

            X509v3 Authority Key Identifier:
                keyid:ED:E4:42:F4:9A:DA:A6:B6:A6:B0:1B:61:CD:09:70:96:A8:E2:23:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.42.0/23
                IPv6:
                  2620:36:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:a4:75:64:ec:e1:a5:42:ef:62:8f:a7:d8:6a:a6:a2:76:
         bc:e5:ed:1b:25:f6:4d:a4:68:74:a6:0e:97:b2:6d:0a:9b:78:
         a2:ff:52:18:a5:8e:46:18:8e:cb:ae:22:7b:a3:31:ed:52:a1:
         d9:ae:61:43:bb:d4:77:e9:15:7b:7e:d3:67:b6:19:df:e0:10:
         c5:7f:8e:0c:e5:7e:79:56:e0:2c:b6:67:c2:e3:b7:da:e0:63:
         4a:a5:21:cb:0b:d5:39:91:2e:55:a1:25:34:b2:52:71:49:cd:
         8b:40:8c:4c:a9:33:bf:08:63:e2:bc:47:65:c9:6e:e3:95:42:
         83:7a:c4:5b:8c:59:8c:3b:7c:b6:57:55:02:20:ac:f0:77:6a:
         6f:ea:68:93:5d:8d:05:37:ce:8e:a2:5e:a6:49:91:e1:e1:3d:
         7c:d9:9b:72:36:68:df:3c:81:62:22:8a:c5:9a:6e:52:14:b0:
         49:1c:9f:c1:27:86:8b:c6:a9:d0:07:cc:c9:61:ab:56:d0:02:
         1f:38:da:59:c3:a4:53:3b:5c:c6:a6:8e:37:c9:91:e7:58:a1:
         7f:80:7b:2b:ca:a4:b5:c4:a2:7e:71:a6:01:9f:ce:fa:f2:8b:
         3c:56:e2:dc:19:89:ba:4f:08:b6:3e:69:50:09:13:83:a1:1a:
         96:6e:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:20 2026 by rpki-client