Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/0b491f50-8f89-360f-aead-84ef892fa7f9.roa
File:                     0b491f50-8f89-360f-aead-84ef892fa7f9.roa (raw, json)
Hash identifier:          o4Gb3kDIG9JKYL1EeTbMqZLIYzKbDkQJQT3xhYaZ42M=
Subject key identifier:   98:CB:78:DB:D3:17:D4:43:B4:45:2B:FD:B8:BA:93:DE:9B:E5:90:38
Certificate issuer:       /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
Certificate serial:       010D0C9F4328584D20AF51CEA6A8470A80396420
Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/0b491f50-8f89-360f-aead-84ef892fa7f9.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     7018
IP address blocks:        199.15.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:51:ce:a6:a8:47:0a:80:39:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=b1a6b692-8e4a-441e-8a46-0ef40ee14eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:f2:8e:b0:a4:12:b3:3f:0e:bd:4e:11:f6:
                    13:b1:b6:63:9e:47:03:d1:a7:0d:4b:eb:b0:65:33:
                    c3:4b:1f:e4:9d:d4:39:ce:44:76:5f:84:f9:fa:5b:
                    c9:9f:7e:fc:f7:6f:d7:20:bd:13:22:49:b7:7d:28:
                    2f:17:dc:fd:7c:04:5d:62:4a:a9:78:79:fd:3a:36:
                    c9:ef:b3:28:c3:0a:d3:b1:15:6e:0b:dc:34:09:ad:
                    ef:fa:b1:8c:b0:77:df:e2:b3:e3:9b:2d:2b:f6:f8:
                    0c:de:14:9a:dc:ba:c1:b2:50:f4:e3:7c:9e:c4:75:
                    f9:24:9e:0c:12:39:1d:96:06:cc:ea:bc:e1:fa:31:
                    be:c5:9b:11:c7:60:87:c4:9a:4f:e4:4d:74:56:85:
                    28:b4:5d:05:d3:c1:f5:d3:2e:77:0d:cf:66:e4:ce:
                    b6:3c:03:da:7e:35:94:22:3c:33:ef:38:3b:f9:38:
                    0f:d9:11:29:ec:67:88:7b:9e:e3:f2:ae:3c:80:d1:
                    f3:f7:00:9e:5d:39:0e:14:4b:c6:86:e5:87:46:be:
                    c9:27:7e:f7:ca:6e:c9:1f:f4:d7:2e:ad:e9:7c:c3:
                    53:e7:29:dd:33:57:bf:6b:21:e0:20:ef:2b:2e:c1:
                    c8:e5:a9:1d:59:97:28:52:ed:49:65:36:df:14:b7:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CB:78:DB:D3:17:D4:43:B4:45:2B:FD:B8:BA:93:DE:9B:E5:90:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/0b491f50-8f89-360f-aead-84ef892fa7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl

            X509v3 Authority Key Identifier:
                keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:dc:4f:05:ef:cc:5a:b9:83:a5:42:8d:6c:46:48:4b:09:bb:
         55:e8:a6:97:51:7f:9d:49:59:e2:6a:67:2b:fd:84:c6:15:57:
         db:77:4d:52:ef:c0:ef:81:ac:be:bc:59:ec:e5:bb:38:50:0d:
         bc:5a:a0:d2:6e:d8:f4:9a:24:58:10:01:cb:26:16:6e:d2:f9:
         28:72:90:e9:75:20:35:cb:06:ed:31:df:e2:c4:32:a0:92:2e:
         53:ad:5f:d7:77:1c:5e:9f:0d:e4:d5:b0:b4:12:db:dc:6b:99:
         ec:31:f0:bc:3d:07:f5:67:5a:31:e6:af:5f:f7:22:56:c7:51:
         49:e3:d6:5e:dd:e0:7b:0c:6e:32:61:07:77:d5:2c:ba:ab:10:
         f7:f8:31:77:40:b5:01:92:f4:86:63:cb:6a:81:a1:3d:46:0e:
         ea:b5:44:22:ac:2b:7b:eb:9f:03:ef:61:cd:cd:41:32:f8:29:
         47:5d:49:b8:79:aa:56:3b:eb:fa:f6:89:1e:0d:b7:09:63:90:
         df:bc:bc:0c:cc:57:7d:9c:42:fb:c9:f9:21:f1:d7:43:ae:3a:
         c3:c9:ba:59:f1:20:3a:6e:76:fe:2f:bf:36:e0:a7:9a:1c:c4:
         45:f1:7a:35:a1:5e:ab:c2:ad:c7:d9:52:63:95:31:4a:e9:2d:
         40:3c:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:54 2026 by rpki-client