Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa
File:                     2591496d-2f46-3cc4-9079-475ca3a87c7e.roa (raw, json)
Hash identifier:          r8Yz3RvpVpo5R25G1A1MwfZKJY3ygVjgEXFQzRSuZeE=
Subject key identifier:   BE:47:C4:B6:20:3A:03:CB:D4:65:43:55:E5:A1:D4:21:5D:BC:C6:87
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584D95F00044A9369DEC425E58C0
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     396905
IP address blocks:        192.105.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:00:44:a9:36:9d:ec:42:5e:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=3cd9a57c-ae57-4989-b613-1e0da420db7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:f3:bb:bc:a5:5c:a1:58:fe:ad:e9:05:d1:
                    e2:3d:ad:d3:5e:74:7c:41:68:ff:07:d0:3a:38:d0:
                    51:e6:df:57:7a:70:f6:c4:3c:55:8c:8d:0a:dc:de:
                    92:42:de:10:9d:b6:dd:ba:6d:ea:8f:d2:a6:13:cc:
                    f6:eb:a9:b6:82:8a:f1:ec:b9:de:53:b9:11:72:70:
                    e4:ea:ba:0a:b7:8f:92:ab:e6:85:22:12:72:d5:2e:
                    58:c9:6f:f9:51:34:ca:c6:37:86:65:77:19:65:49:
                    74:82:b6:10:10:83:45:77:fe:88:72:fb:96:91:2e:
                    6f:a0:6f:2f:a6:63:cd:c2:f0:f4:6c:86:93:23:c8:
                    c4:7a:b4:d2:b1:5c:17:ff:7a:90:38:56:cd:0f:63:
                    74:95:f1:66:29:26:15:fa:21:f5:ee:0c:f5:14:47:
                    03:0f:09:ed:ed:2c:d1:18:fe:f0:dc:0d:39:bb:5b:
                    c3:ab:c5:fe:46:44:52:28:8c:1d:e2:cd:e7:ee:fc:
                    75:9d:60:09:01:5a:dc:4a:ef:02:1c:13:db:62:27:
                    bf:1e:d6:f1:8c:93:07:40:4e:b8:17:51:34:26:53:
                    94:80:2c:12:eb:b6:4a:5f:00:13:88:97:16:7f:22:
                    30:49:e3:87:8f:e9:22:51:d8:7c:1b:5e:62:36:08:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:C4:B6:20:3A:03:CB:D4:65:43:55:E5:A1:D4:21:5D:BC:C6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.105.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:34:8f:9e:4b:e8:a8:8a:44:0a:2f:b4:84:01:21:a0:c5:96:
         75:b1:bf:06:93:d3:6d:68:72:09:8e:b2:fc:d4:5f:cd:af:b5:
         15:d5:0c:b0:8a:78:19:7f:f2:2b:fc:41:f4:d9:a9:01:41:8c:
         ce:e3:2a:5b:ca:6b:d0:85:6b:d0:6d:db:87:11:3c:dd:56:11:
         22:e8:5d:2e:ac:25:96:6f:2d:8a:78:28:fa:b4:ea:53:5a:cb:
         19:8b:cf:42:10:b9:b6:60:25:1e:f1:5e:43:3e:6d:e4:2e:fe:
         89:e3:35:7e:f1:77:f2:ed:26:0f:31:13:42:cc:a5:a1:48:11:
         bc:43:eb:04:6c:0f:25:ef:b6:66:a1:6b:45:00:10:c0:c4:62:
         ea:12:6e:f6:c6:3c:fb:fe:ae:44:5a:b4:eb:ab:32:2f:c8:fb:
         b1:bb:55:f8:0c:51:b6:74:c7:f6:ec:e3:54:59:c7:be:61:83:
         c8:c8:a0:3a:29:41:dc:4c:1a:97:81:09:d0:93:50:6d:90:61:
         cb:39:0a:65:ae:e8:d5:e6:78:c0:c3:ec:39:4f:6c:c5:21:af:
         3a:df:a0:5c:e2:0d:47:fa:83:52:a1:32:27:5f:f1:e8:49:89:
         19:65:d0:94:5b:5d:99:57:8d:66:08:3b:de:c9:00:0b:67:28:
         33:a9:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:09 2026 by rpki-client