Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa
File:                     f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa (raw, json)
Hash identifier:          OGAlhvFyYgRknm4+LGfhcBWzj8x7Edp065hEH0mR8Dw=
Subject key identifier:   D3:BB:B7:C0:3E:AF:CC:7C:B8:CF:1C:85:9D:A9:70:64:9B:4A:9E:0B
Certificate issuer:       /CN=19719a18-e52f-4638-aa55-1111ed485339
Certificate serial:       010D0C9F4328584D2A74E3C93DBE9DD390008780
Authority key identifier: E6:D5:9B:4D:63:52:9C:8F:6A:D8:FD:0E:CE:0A:47:4E:FE:9C:C6:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     20438
IP address blocks:        192.80.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/19719a18-e52f-4638-aa55-1111ed485339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/19719a18-e52f-4638-aa55-1111ed485339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e3:c9:3d:be:9d:d3:90:00:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19719a18-e52f-4638-aa55-1111ed485339
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=50b128a7-fdc2-4187-bd77-3d5f3f0cbd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:a0:67:b6:62:1e:c3:c0:b5:ea:30:35:12:
                    a7:49:b9:21:35:c7:54:60:83:eb:70:75:87:09:14:
                    a3:a0:cb:51:1a:28:5d:52:cd:5e:27:fa:5a:57:93:
                    70:db:db:98:2c:d0:ac:d0:73:4b:65:e0:9c:2d:fb:
                    ad:5a:6d:52:94:9f:5c:00:6f:c6:5a:65:80:9f:6f:
                    ca:89:5e:12:9c:69:dc:75:49:7e:b8:6a:5b:e1:fc:
                    af:21:d1:2d:a0:44:91:8a:de:69:5e:e9:08:ca:8d:
                    87:42:d7:ce:8f:38:f7:84:7c:ef:81:b7:32:d7:68:
                    ca:75:1c:8a:11:0e:dd:89:b9:18:fa:38:b4:04:fc:
                    86:0c:20:34:5f:6c:1b:21:49:34:5c:64:47:46:87:
                    2d:bc:f6:dd:ab:7c:6c:9e:a5:5e:24:f4:0e:c9:16:
                    fc:5d:f4:ca:52:aa:ba:3c:f5:ea:69:17:49:a4:02:
                    38:e4:41:13:c9:2e:3d:35:ae:bf:2e:97:0f:ff:2e:
                    c6:bc:74:9d:91:c7:ca:e7:2c:95:57:dc:2a:e8:50:
                    84:bf:d9:41:92:da:29:55:e4:7e:df:71:d6:cb:fc:
                    3d:e2:5b:b2:c4:f0:b4:9f:16:f4:57:8f:65:5f:90:
                    92:8b:8d:31:3d:73:e5:36:41:10:7a:8d:15:cb:e4:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:B7:C0:3E:AF:CC:7C:B8:CF:1C:85:9D:A9:70:64:9B:4A:9E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/19719a18-e52f-4638-aa55-1111ed485339.crl

            X509v3 Authority Key Identifier:
                keyid:E6:D5:9B:4D:63:52:9C:8F:6A:D8:FD:0E:CE:0A:47:4E:FE:9C:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:6f:e5:55:d7:45:44:fb:ec:5e:65:0c:56:51:1b:2e:72:
         57:7e:4b:70:15:77:d1:05:f0:8c:85:c6:44:dd:ab:f3:48:8b:
         4b:f6:a1:a9:4d:78:0f:df:29:1a:9c:e4:17:13:74:40:1b:af:
         3d:85:1a:b6:72:bb:04:79:5d:28:4e:eb:f2:f3:7a:1d:45:86:
         13:58:0c:c6:8f:c7:61:ee:bf:7b:60:2e:64:d4:04:78:c2:67:
         5a:3d:bf:44:de:9b:70:d1:6b:12:c9:f3:c7:a5:8f:c9:ea:76:
         bf:68:4b:4b:02:57:cf:6c:f8:a9:04:7e:b4:9d:07:b5:d0:3c:
         7b:f5:f5:1d:db:b9:ba:02:7c:4a:43:33:ce:8d:4a:72:cc:14:
         f4:1d:31:3f:34:2d:ab:1a:1a:3e:f5:78:d2:cb:74:ad:85:a6:
         d8:c7:3c:22:c3:29:18:03:fc:3d:6d:0a:f5:9c:95:ca:87:b8:
         02:bc:fd:a4:f5:cd:f8:3e:77:3e:81:70:bd:4a:b6:a5:e5:3b:
         07:48:38:30:74:76:01:c4:6f:e8:6d:10:75:a7:36:09:fe:3c:
         7b:a7:84:aa:e2:b9:4c:9c:14:f3:63:00:b3:bf:26:62:c9:ea:
         1d:93:0e:eb:af:9d:3f:cf:c6:92:c1:2f:73:40:5b:31:fd:1f:
         22:e2:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:50 2026 by rpki-client