Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/5c3808ee-173c-36ed-99f4-b9d880984e67.roa
File:                     5c3808ee-173c-36ed-99f4-b9d880984e67.roa (raw, json)
Hash identifier:          irGCBLWPf76zQfCegEYyLcj6zxmuhOKxmkBlh9Vj2Fo=
Subject key identifier:   7C:17:C0:7E:1F:67:AC:47:FD:28:71:92:8C:59:3D:6B:D5:D8:8A:B0
Certificate issuer:       /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial:       010D0C9F4328584DC565A12CA59A23A0A19F6C00
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/5c3808ee-173c-36ed-99f4-b9d880984e67.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     12022
IP address blocks:        192.190.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:a1:2c:a5:9a:23:a0:a1:9f:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=091be659-a171-43de-8f01-b47091066e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:89:ee:7f:20:4d:81:8d:5c:80:80:0f:10:
                    ff:b1:05:37:c2:80:a7:33:23:8e:b7:d9:ab:ae:18:
                    48:24:76:ff:5c:05:c6:e3:dc:3a:53:c5:c6:d4:f0:
                    03:5a:bd:26:bd:c7:78:a9:b3:a2:28:26:b2:7e:8b:
                    90:8e:3f:45:bf:78:e1:3b:45:ae:3b:de:45:2d:b0:
                    12:82:60:be:40:68:8b:9e:64:5e:83:e6:a1:25:19:
                    2f:d3:20:ad:73:f8:1f:7d:33:67:6b:21:0a:d0:7c:
                    2e:12:ae:c0:dc:40:0a:13:26:8a:5c:43:d1:c4:41:
                    bd:85:49:17:05:25:aa:8c:71:f3:4e:e7:17:89:bb:
                    c7:59:49:bb:12:d8:1c:ab:67:7c:4f:6b:00:b7:c2:
                    d9:ed:ee:4f:a8:95:23:67:a7:ed:64:04:84:ac:b3:
                    36:97:5e:b5:8a:e3:2d:2b:93:73:6e:99:d6:3d:80:
                    3d:a0:28:a4:a4:3e:bf:d1:c4:e5:51:09:88:35:e8:
                    70:2e:c6:e1:96:0b:ef:ab:8b:6e:5b:ef:be:df:d9:
                    d0:de:3c:09:16:04:28:52:d9:7b:02:d9:06:67:aa:
                    c8:7a:ba:a0:ed:15:93:da:ae:83:48:65:12:78:9f:
                    46:f4:10:85:73:2e:67:e0:e7:bd:d5:83:cb:6c:51:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:17:C0:7E:1F:67:AC:47:FD:28:71:92:8C:59:3D:6B:D5:D8:8A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/5c3808ee-173c-36ed-99f4-b9d880984e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl

            X509v3 Authority Key Identifier:
                keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3b:b3:02:55:ee:77:93:a6:87:a9:68:c3:60:a7:df:93:60:
         45:e6:fc:8b:98:77:44:1c:7d:87:2e:9c:e8:d1:5c:fe:9c:c1:
         e2:12:2a:ca:9a:2e:a5:e2:f2:ff:23:c0:19:af:87:b2:36:a1:
         0a:32:59:b6:fa:c8:11:0d:08:2e:d6:94:c7:d9:c9:7a:4c:b7:
         40:71:81:86:6d:77:ae:ab:08:ef:f0:1f:1c:2c:91:44:fe:aa:
         ca:9f:99:e2:91:67:17:d4:e1:b6:00:43:01:69:a8:a2:c8:3a:
         a8:23:c4:2d:a6:5f:ed:ce:60:c8:ae:23:ad:dc:a3:3d:2e:0e:
         58:47:6f:fc:2f:8b:0b:37:74:54:d8:cf:50:b5:aa:5a:b0:b9:
         f2:d3:ae:e2:50:02:67:2f:f2:fc:7e:72:0d:10:53:86:f6:18:
         e1:14:e0:7c:67:41:a4:a9:db:1b:3c:41:e2:6c:1d:4d:0c:f0:
         c4:a9:d2:75:a8:70:e5:62:bb:cc:a4:ce:24:54:bf:9b:9b:48:
         b1:56:94:f5:a7:37:8f:60:9d:7c:d6:df:62:a8:65:ea:a9:6a:
         9d:9d:47:80:36:09:57:60:79:0b:c2:d0:e1:f5:f6:2c:1f:d2:
         17:f8:0f:4a:81:5d:b3:37:4d:4b:81:52:89:40:cd:8c:6a:6d:
         b4:2c:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:47:14 2026 by rpki-client