Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/97b6295a-df81-34fb-a443-d95f2e045f7f.roa
File:                     97b6295a-df81-34fb-a443-d95f2e045f7f.roa (raw, json)
Hash identifier:          FUsWAbqOpGPgRvHULejSjvE7V1bwvtKJLCx4YX2F7jQ=
Subject key identifier:   4E:FB:74:6D:22:67:A7:D1:AA:89:56:8F:21:7D:91:12:27:02:DD:8C
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584D98BAA9E78B464B3FF16CDFC0
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/97b6295a-df81-34fb-a443-d95f2e045f7f.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     30045
IP address blocks:        192.219.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a9:e7:8b:46:4b:3f:f1:6c:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=1f5f9037-ca93-4ae4-be89-3084d0f4c8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:88:80:98:bb:2e:c8:96:60:4e:54:b5:ee:
                    df:9c:a8:df:a7:99:e3:fc:a6:d4:cf:73:6e:8e:4c:
                    25:27:0a:8b:5a:15:e0:2f:aa:5c:ba:8c:77:55:f3:
                    ef:9d:09:0e:6a:a8:d9:21:86:65:86:f0:1b:5f:46:
                    33:c7:df:cf:6c:3f:7e:f4:d8:3e:9e:d5:ae:b9:fd:
                    04:00:95:1b:5c:9b:21:3c:24:04:44:6b:85:50:78:
                    b6:24:ff:88:b6:71:20:ef:5a:a8:37:01:4a:fd:c2:
                    0f:81:9c:da:26:a3:fa:06:f7:fb:77:99:18:45:d8:
                    a3:50:e3:4e:b3:6d:b7:24:ec:81:48:3c:95:c7:20:
                    8e:86:ac:cd:5a:35:97:a4:36:3f:8c:c6:d8:e7:f1:
                    3a:e9:8a:b4:dc:56:95:00:59:70:2b:b6:85:9a:c0:
                    53:04:b5:8a:b0:82:d4:9d:0b:19:3c:82:1b:51:6c:
                    14:d5:33:fc:1b:cb:68:a6:da:25:3b:24:f8:2b:87:
                    b4:c6:2a:0f:d2:e2:d2:0e:90:17:8f:57:0d:03:fc:
                    9e:18:1a:20:99:fd:61:93:dd:cf:f4:45:fe:77:d1:
                    7d:be:eb:9d:bb:a3:38:59:96:51:25:f1:26:34:71:
                    c5:de:e7:aa:e6:23:6e:91:59:06:b7:a1:e3:98:80:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FB:74:6D:22:67:A7:D1:AA:89:56:8F:21:7D:91:12:27:02:DD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/97b6295a-df81-34fb-a443-d95f2e045f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:51:47:22:82:38:fe:68:7c:cf:8f:db:8a:92:74:0c:81:98:
         31:7a:93:65:60:2c:a8:ad:dc:e5:88:cb:23:60:71:b3:07:97:
         fa:be:25:a9:bc:be:09:f1:52:af:83:d2:f5:58:74:75:5a:1a:
         6a:81:78:4d:13:16:47:6d:d1:ce:37:a4:87:d0:1f:4d:5f:42:
         62:ae:49:0c:e2:63:14:de:b7:aa:35:0e:0c:d4:24:ec:5d:b3:
         f5:e7:65:e9:7a:d0:48:97:38:91:3f:d6:f1:8d:8c:06:7d:ed:
         29:cd:f6:8c:18:1a:89:34:0c:91:cd:64:72:63:d2:18:b2:4a:
         6a:11:0c:af:b8:2f:ef:d2:0b:45:4f:27:bf:35:7f:70:e5:f2:
         86:6b:dc:d7:2e:cf:06:12:6d:13:8c:7f:81:de:47:15:09:b8:
         e9:6b:49:7c:70:9f:91:a5:f0:38:68:8e:0d:ad:84:82:4e:b2:
         47:73:43:31:b4:cd:bf:68:f4:4d:89:f3:ad:bc:7d:47:0b:2d:
         98:eb:d5:1f:81:63:a9:6f:ef:4a:37:89:68:f3:86:96:37:ad:
         67:fc:f2:fd:cf:65:a6:d1:1f:24:fa:9e:c6:00:35:7e:39:38:
         34:3e:33:7b:8d:7b:62:01:71:cc:d4:c6:ed:05:a6:a0:0f:74:
         79:6a:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:49 2026 by rpki-client