Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
File:                     cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa (raw, json)
Hash identifier:          Sebf3q6CeOXyuddE8w/JrMpSWU0NHXSYorX3bknSchc=
Subject key identifier:   27:E3:40:DD:A7:44:A5:14:20:B8:16:CF:11:2E:EF:C6:83:D1:1C:94
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F4328584D3E001E3949BBEE6128D85F40
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     32590
IP address blocks:        192.69.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1e:39:49:bb:ee:61:28:d8:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2b1f1d52-118d-4d21-b38a-40153f495893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:90:42:b9:dd:1a:11:0e:82:83:db:d1:45:
                    12:55:01:2d:b6:34:d5:06:5e:85:2b:36:28:0b:2c:
                    26:a5:f8:72:de:c2:8e:f6:da:b9:ac:54:4e:d5:38:
                    03:e3:47:e4:e9:12:a1:e5:11:4c:96:7d:ba:33:27:
                    0b:7e:4e:45:5e:ce:1c:49:69:0a:6f:ba:46:c5:56:
                    14:37:d6:39:75:ad:c1:cd:76:20:2e:70:9b:5d:27:
                    5e:94:61:12:29:66:81:15:8f:86:dc:35:53:33:86:
                    3c:03:1c:e9:4f:dd:8b:e4:6f:4c:13:7d:c7:3b:98:
                    dd:3e:92:06:59:a9:84:15:54:b1:fe:6e:b9:39:fe:
                    d4:b9:76:09:b9:b1:d5:dc:14:cc:e6:27:f1:11:29:
                    41:c3:5c:44:b9:3f:cb:9c:ff:83:73:d7:c9:07:59:
                    ac:21:a8:fc:69:d9:c1:c3:f6:96:60:a1:1d:4e:62:
                    36:e5:67:21:f3:b9:41:06:51:21:09:15:54:f6:b7:
                    07:1f:f5:d6:34:7e:23:89:18:91:92:d1:21:ce:1f:
                    b9:15:a7:54:09:a4:cd:a0:ae:18:70:90:08:8f:bb:
                    c9:be:57:36:ca:38:40:3a:b3:20:07:12:31:63:b6:
                    73:b8:9a:e9:f6:77:eb:d5:dd:cc:01:0a:95:38:98:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E3:40:DD:A7:44:A5:14:20:B8:16:CF:11:2E:EF:C6:83:D1:1C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:28:de:6c:a2:c9:8b:25:14:2b:64:c4:34:8f:60:ec:62:c9:
         2e:a9:ac:c1:b0:02:37:89:28:dd:c2:08:a8:b1:cf:dd:b1:92:
         c8:7e:2c:c2:6b:19:b4:98:8c:40:29:d1:09:32:a8:fb:a2:70:
         bd:1d:73:20:64:a6:65:79:fd:eb:94:c3:b4:f8:68:01:5e:00:
         48:70:b3:7a:fb:8a:f4:27:1b:88:d7:64:1a:2a:1f:57:f8:ab:
         e2:97:3b:cb:57:5f:a3:62:8f:18:2e:c9:11:c5:b5:fd:8d:cb:
         e7:f9:e6:3c:a1:5c:0c:f1:bf:2f:7f:31:0b:17:60:47:11:09:
         a1:df:66:e9:68:b2:9e:9d:70:5b:41:35:fa:f6:75:0e:17:cb:
         f6:98:16:8a:97:80:f0:b0:30:3f:73:5a:74:e4:a8:49:1a:96:
         26:34:23:98:ef:f7:78:9f:b2:cd:9b:2d:b2:ff:bf:aa:de:77:
         78:7c:fb:f1:c2:ed:1e:02:11:7b:66:6b:fd:73:0d:eb:96:87:
         46:74:5e:d7:de:f2:07:a2:d6:eb:52:ab:a7:b3:5a:3f:90:eb:
         b8:31:a1:d0:bd:fa:99:ad:05:eb:27:a7:22:9f:5a:6f:0f:cd:
         a3:17:f2:c5:0c:4d:d0:82:33:17:13:b6:b5:27:96:dc:68:69:
         7f:41:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:25 2026 by rpki-client