Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
File:                     df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa (raw, json)
Hash identifier:          F1+MXOpP3QTHGpdnrArSKuMP3S1x9eNN5WyIuF7FWLU=
Subject key identifier:   D2:F6:39:D4:79:1E:87:1E:E7:F0:0F:9D:D1:2C:ED:38:BD:1F:88:C4
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584DBBA051B2BFC57C89EBF65300
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     7992
IP address blocks:        192.69.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:51:b2:bf:c5:7c:89:eb:f6:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=f5839172-8629-444a-90b2-225c95a75d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ac:f4:71:3a:51:0e:6d:e9:ac:1b:ae:ab:e3:
                    1a:15:74:99:e5:5c:dd:c2:ef:b8:b1:d5:ab:ba:85:
                    0e:3a:61:04:20:16:39:83:ec:7c:b3:68:f2:a4:a2:
                    d2:ea:ae:c6:b6:8e:be:c8:9d:2c:52:62:53:9d:4c:
                    4d:b3:e7:e7:00:93:67:50:8d:6a:45:a5:8d:ff:bb:
                    99:64:17:fd:61:ba:31:99:3c:a0:e3:67:83:3a:96:
                    2b:eb:2c:66:c9:30:2c:be:fb:d0:7b:b1:bd:bf:c3:
                    08:dc:16:4c:68:71:fd:cf:42:bd:6f:1d:2f:34:da:
                    43:c0:44:58:2f:67:0b:ef:a7:0b:c6:3a:f7:88:9e:
                    55:94:fd:b5:1c:3a:fe:a1:87:e0:1d:f1:43:bb:0c:
                    b8:c9:c4:9a:93:4b:0b:70:36:a4:6e:05:05:a0:f1:
                    c1:11:fa:f9:c8:b5:88:8a:17:56:eb:06:63:dd:02:
                    14:98:b9:61:4a:7b:98:eb:83:fe:8f:5c:e2:31:64:
                    cd:88:59:62:2e:e5:48:83:1c:7e:53:b9:02:cd:a4:
                    b5:92:b4:05:a0:05:d7:67:5a:21:92:35:fa:d1:d7:
                    bc:5c:d0:a8:ee:94:78:d7:af:8b:0f:c5:bc:d6:f8:
                    a6:cf:dc:72:9f:58:dc:b6:4f:e1:f9:9c:6a:8c:42:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F6:39:D4:79:1E:87:1E:E7:F0:0F:9D:D1:2C:ED:38:BD:1F:88:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:29:8c:73:67:94:20:a8:83:31:1a:96:2c:0b:87:0f:27:
         c8:f7:3a:38:78:4b:d0:79:2a:50:40:88:1c:a7:fe:a0:6a:01:
         67:8f:78:45:fe:39:8a:fd:a9:b1:06:b4:d8:61:ed:e7:bf:a6:
         85:6e:b4:12:ab:e8:cd:77:f2:0a:03:53:c0:22:4d:59:39:ed:
         9b:60:f9:a4:1a:e6:49:ca:31:de:05:40:85:b3:88:56:20:66:
         06:1a:4b:98:8a:b8:fd:d9:33:a0:d1:25:e4:0a:82:a1:c4:cf:
         0d:d6:38:33:42:42:b5:79:0b:94:ea:4b:17:c1:af:f2:2f:5f:
         59:45:96:81:22:2f:24:1a:da:b7:7a:bc:4a:68:22:4f:cc:da:
         50:27:c2:5a:4f:a2:57:b1:ab:b2:63:5d:a3:2f:42:cc:77:64:
         72:83:e4:ed:c9:37:bc:76:b3:1e:fa:da:bf:c0:21:32:b0:0f:
         91:6d:5b:04:82:86:69:f8:cf:06:70:30:27:94:f9:94:ab:f6:
         7d:be:48:66:5a:fa:77:e4:ab:de:60:af:39:7b:4e:c0:b0:62:
         f9:bc:38:d6:90:92:dd:3e:b3:16:29:63:f1:61:76:1e:f3:f4:
         d2:33:75:e5:57:80:7b:15:a6:07:c0:ee:eb:07:41:d0:b5:6a:
         0d:ef:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:36 2026 by rpki-client