Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
File:                     ea93ae24-34e7-3c83-9477-44557229880c.roa (raw, json)
Hash identifier:          4kk7i/ZNPKSmQAwGEJddobIdofSKFBHZjRvw7W4f9fw=
Subject key identifier:   87:C5:71:7A:F2:A5:ED:13:6D:D0:AB:30:03:F8:EB:A4:79:8D:FA:6E
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584D98BAAAB732DECFA0A6D6E180
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     20237
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:aa:b7:32:de:cf:a0:a6:d6:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=2bf96bdf-b06a-4908-8b32-5a17196551f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:9b:b7:cc:3c:fb:e0:18:85:60:bb:56:ce:
                    98:02:c6:e8:e5:92:3b:b1:96:72:4c:15:36:05:96:
                    58:bc:c0:c0:99:1a:ae:d6:fd:32:11:f5:bf:97:1c:
                    90:84:8e:09:93:cc:76:d5:ea:1c:d6:ab:87:01:ba:
                    23:8a:bd:58:4c:16:5c:a5:d9:2a:b9:a2:0a:f8:b9:
                    a8:16:ae:62:2f:2f:a4:66:70:d5:2f:0f:77:a4:e0:
                    ec:2f:d1:6c:a3:f0:72:de:8c:74:b6:17:23:f8:f7:
                    3e:38:38:26:60:b6:ca:f8:b7:d3:b4:28:7f:8a:9d:
                    87:6c:4d:7c:5e:2a:8a:fb:e4:bd:7f:d8:a5:d4:c2:
                    a1:90:e2:4f:97:95:47:94:eb:7d:ea:b5:14:9e:68:
                    73:e9:0a:0a:23:64:e4:13:c6:00:c6:f1:0c:83:e8:
                    50:cc:89:81:f2:67:28:4f:ed:22:61:67:6f:6c:9a:
                    f2:0b:89:c9:d5:3c:30:93:07:f7:cb:48:cc:75:5c:
                    a1:97:39:85:01:2c:be:b4:3e:25:13:62:6a:51:1d:
                    74:34:65:2b:0b:2a:de:88:c8:a0:7d:bf:4c:49:ff:
                    7a:b0:68:79:72:b4:cf:88:6c:6c:ad:91:a0:96:d1:
                    f9:9a:8e:59:45:bb:0b:d9:9a:a6:60:49:0b:4b:11:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:71:7A:F2:A5:ED:13:6D:D0:AB:30:03:F8:EB:A4:79:8D:FA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/ea93ae24-34e7-3c83-9477-44557229880c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:af:79:b5:d6:ea:c1:d7:29:43:94:3d:1a:69:05:48:df:
         7a:51:10:db:b4:86:1d:5a:3d:05:18:35:4d:06:ae:c4:9e:86:
         d9:b6:cc:d0:a2:ca:69:1d:10:e8:a6:15:42:d8:c9:6d:80:59:
         a9:ca:08:0f:c2:be:f8:34:65:a2:18:16:6e:de:ee:69:ff:62:
         d0:1e:ad:c8:73:9e:dd:4e:d1:94:a3:ec:07:ba:48:02:1a:14:
         24:46:35:ee:e9:01:9a:ba:d7:c8:c1:e4:59:4c:0a:9a:63:ac:
         73:bc:99:eb:74:b9:0b:88:16:e9:36:2c:b3:50:a4:cc:eb:eb:
         49:a9:4c:2c:ea:d8:86:43:dc:e0:5c:2e:5d:04:60:15:15:1b:
         61:2e:64:4f:c9:55:7f:7f:18:79:09:7b:9b:8c:98:a0:47:86:
         59:5d:79:f3:e7:91:dc:c2:cd:80:85:c4:4a:c0:a9:da:db:22:
         7a:c2:3f:5a:c4:c1:26:1d:e9:95:67:ae:f4:dd:5e:4d:d0:94:
         c9:08:e7:98:a5:53:7e:a9:28:40:2d:8c:72:b3:78:4d:55:5c:
         4b:64:78:1e:b0:b6:96:cb:bf:cb:bd:e3:65:4c:8b:a5:1d:70:
         8e:d3:f0:7c:7a:39:53:79:d5:48:ad:7d:b1:32:60:51:2f:c2:
         cd:c4:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:15 2026 by rpki-client