Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa
File:                     f99df0ee-55c6-30f2-9f70-4715143eb655.roa (raw, json)
Hash identifier:          VmLOqf1D3cxfQW3LNdtxEnApsHxQdhT0ejL9D9Gp/64=
Subject key identifier:   6B:1D:EB:3D:D4:80:0F:40:31:AD:A1:81:24:54:27:8D:3C:2C:34:B8
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584D95F00038BC4A5F8345B27100
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     396905
IP address blocks:        192.82.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:00:38:bc:4a:5f:83:45:b2:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=82af6e7b-2bea-466c-b3a3-4d2d9efff031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:d3:db:0b:b9:52:d0:bb:d7:af:b1:bc:6a:
                    b6:34:5c:3e:9d:21:ad:59:ef:82:77:20:3c:0c:f1:
                    76:d6:a1:76:cb:7a:7b:c0:f5:e8:cd:13:85:98:1b:
                    a9:25:82:95:49:8d:2a:d1:69:c6:6e:5a:eb:6c:34:
                    1e:2b:e7:ac:02:e1:fc:b1:3a:42:4c:25:f6:29:34:
                    72:0d:1d:76:33:0b:8e:a0:60:9b:a3:38:08:a9:7d:
                    65:58:2c:48:a7:24:60:25:33:8d:cd:16:cf:aa:c6:
                    9c:29:02:82:fd:69:a5:00:8b:33:07:22:69:c7:fe:
                    78:17:27:17:2d:29:b8:24:3d:53:92:26:ac:0a:e9:
                    7a:28:c7:e1:41:c2:ed:89:b1:75:e6:9f:f9:77:cb:
                    2a:22:d1:ec:55:0d:b8:c3:99:99:24:8c:e6:87:08:
                    b6:27:05:c3:dc:5f:1f:54:85:3d:b1:12:2f:37:c7:
                    0c:48:88:d1:43:b2:19:c4:14:08:7e:24:99:90:b6:
                    09:b5:13:22:ee:ec:c1:b3:71:e5:f6:ae:13:cc:46:
                    d5:3e:97:be:55:da:94:06:6b:a7:ae:ae:25:84:3e:
                    a0:dd:55:64:b2:9c:2b:d6:b7:ea:69:a9:6c:22:75:
                    4d:24:8e:86:88:56:fe:9c:49:39:de:0e:ab:a5:3a:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:EB:3D:D4:80:0F:40:31:AD:A1:81:24:54:27:8D:3C:2C:34:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/f99df0ee-55c6-30f2-9f70-4715143eb655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:1f:96:cd:b2:ed:99:5a:b8:1c:f6:de:16:1c:30:26:3d:14:
         25:9a:1b:7a:fe:d9:bd:a9:97:7a:65:cf:29:f3:ec:a5:cf:9f:
         2c:49:19:42:ae:a4:67:73:bf:68:b7:01:9e:ca:7d:53:5f:3e:
         6f:21:d3:8e:7a:6e:94:77:04:88:3a:c0:a5:80:de:49:42:7c:
         fe:64:68:c4:c9:82:cb:38:41:21:3c:e8:10:12:0b:c7:3c:ea:
         8d:62:92:21:98:69:c3:04:f5:fe:06:6d:99:c8:d8:d3:84:0c:
         28:8e:a2:a6:08:b7:1e:bf:c1:d4:29:56:51:70:f7:fd:e3:36:
         cb:b3:02:f8:f1:b4:95:d9:e6:41:e5:b6:7c:60:e2:48:f7:90:
         0e:3b:81:80:46:92:10:4f:d2:27:0b:0c:f5:2a:db:2a:18:bf:
         c5:19:d9:d6:37:a5:77:32:ae:be:05:d1:1d:10:3d:53:85:ee:
         53:41:c6:5c:13:e2:82:56:f0:fd:71:5c:06:52:3f:8f:18:80:
         66:3c:61:21:f2:c0:2b:8b:5c:6c:f9:1b:3f:11:21:66:f1:33:
         ba:ca:11:3f:7e:cf:66:b6:44:b6:2a:46:55:94:f0:05:18:d4:
         bb:8d:ec:b3:74:fb:43:1a:6c:c9:25:03:4e:61:21:58:93:48:
         55:2c:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:31 2026 by rpki-client