Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
File:                     68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa (raw, json)
Hash identifier:          HXf9/XeQ95oN/XaUfPoD42CNmgi83S5bUoDh9EOtDUk=
Subject key identifier:   5A:D1:6D:DE:31:C9:95:20:07:7A:51:B2:23:14:BD:44:A4:10:A9:A3
Certificate issuer:       /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial:       010D0C9F4328584D2BDA179DD14F13CEED2BD600
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     20101
IP address blocks:        199.192.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:17:9d:d1:4f:13:ce:ed:2b:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=b00d93ad-97be-4e61-9408-0fa55dcc41e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:13:66:df:a3:53:1c:ed:ae:86:73:5a:cd:
                    62:c7:8d:b7:3f:62:bb:e2:3a:c8:ff:4d:7f:96:7f:
                    fa:74:b8:36:91:72:ed:91:bf:65:76:0f:92:19:e8:
                    dd:2a:67:4e:0b:2d:4d:fd:86:32:aa:6c:b4:67:51:
                    4c:d4:d2:48:2f:29:19:23:58:45:c2:28:a1:67:d2:
                    ad:d1:ca:e1:33:80:88:d9:26:8e:32:55:4e:b1:2c:
                    d4:85:06:0f:82:b6:7d:fe:f1:5c:35:e2:af:e2:a2:
                    ab:81:21:92:3f:29:b5:1f:0c:72:42:48:9e:8d:40:
                    ac:72:78:e7:72:43:72:e5:22:c7:71:49:49:11:50:
                    b1:0a:0e:80:b3:ea:8e:5f:5a:b2:e0:cc:c2:47:e2:
                    37:26:b3:a3:d4:9c:5e:15:bb:37:6f:f3:56:2d:f4:
                    94:06:c8:8a:8b:8e:28:9d:60:dd:9c:68:ff:59:b0:
                    5d:9f:bd:41:c0:a0:bc:e1:be:76:35:80:b4:26:cd:
                    86:d2:ec:0d:cc:e4:ea:ba:06:30:76:b2:20:21:0c:
                    5f:4c:8b:26:0e:11:47:dc:32:ad:61:57:5a:b1:9b:
                    08:7e:13:d8:ac:6a:16:65:2b:0e:93:3e:81:4c:ee:
                    e6:0a:27:be:e5:ca:a9:52:e7:d8:c6:6b:9b:12:a6:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D1:6D:DE:31:C9:95:20:07:7A:51:B2:23:14:BD:44:A4:10:A9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl

            X509v3 Authority Key Identifier:
                keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fa:06:33:06:bc:59:88:a3:2b:13:4c:f5:a1:60:69:c0:a3:
         11:21:a3:3c:67:b3:99:f5:23:ce:f0:04:08:32:0e:94:b1:c5:
         46:d2:42:5d:f8:12:34:b7:47:6e:aa:f6:ad:7b:09:79:bd:22:
         cf:25:5c:9e:4c:c9:b9:14:63:6d:11:c6:86:88:3a:78:bb:d2:
         b5:3d:01:7c:8f:92:5a:67:65:ed:01:a7:5d:66:7c:04:64:63:
         cd:ce:ff:63:65:72:21:bd:19:4d:52:5a:96:2c:fa:63:a4:80:
         84:25:45:8a:95:2f:b9:60:9f:87:5a:13:d0:aa:3f:3e:35:66:
         30:b8:26:17:dc:e0:d7:e3:f4:1b:fa:7a:5a:1b:24:13:1a:39:
         aa:ef:84:5f:b7:e6:98:c2:66:ef:b5:cc:9d:3a:24:76:cf:33:
         87:c4:37:72:a7:7b:4b:9c:84:5c:66:18:e6:4a:c0:e9:aa:06:
         25:38:04:37:a3:c1:1b:42:05:10:46:14:55:33:0d:00:ae:ed:
         bb:0c:ac:da:49:a0:1e:b9:8a:1c:49:90:d9:fd:4d:5e:e6:55:
         52:50:d0:76:4e:c9:15:07:ca:0f:56:37:03:a0:dc:65:da:1b:
         2b:da:23:8e:d4:12:03:6a:d1:e0:04:62:32:8d:d5:97:64:e2:
         54:0d:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:09 2026 by rpki-client