Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa
File:                     d2be373a-4ce4-35fb-810e-542b3f8888eb.roa (raw, json)
Hash identifier:          6m7k1HiyIwiQyQMBCB4sSHD5AKHWemQQALIMSNf3jpY=
Subject key identifier:   76:19:27:D1:90:19:3C:73:BA:BC:E7:D8:39:E5:A2:DF:4F:86:FE:95
Certificate issuer:       /CN=13168988-4625-42dc-9138-e5632130d1ba
Certificate serial:       010D0C9F4328584D492A74738019A50967FF36C0
Authority key identifier: BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        192.197.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:74:73:80:19:a5:09:67:ff:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13168988-4625-42dc-9138-e5632130d1ba
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=8a0e75c6-392a-48e9-9dff-d8d3e37ebf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:b5:56:a4:21:75:8e:0b:1d:f0:81:c7:a2:
                    c8:23:98:e6:3c:99:f1:ab:3a:7c:c9:20:bb:5f:57:
                    9b:ca:fb:1d:84:fb:fd:27:f9:d7:c2:f7:da:fa:47:
                    09:02:d5:37:00:60:60:15:67:3e:61:fb:1c:79:e5:
                    7c:41:47:2a:09:4e:fb:04:53:ed:98:85:c2:60:3c:
                    a9:d8:d2:f0:da:3e:68:75:7d:fe:4c:ca:8d:f5:ef:
                    b6:bd:bd:1f:18:4e:0b:22:41:1c:4a:a2:95:29:73:
                    c7:3d:a1:45:56:28:e8:6f:1c:8e:f4:78:a7:f4:80:
                    cb:50:2c:67:05:b8:bc:6e:9e:02:ec:cf:50:f5:4d:
                    2e:60:af:be:b8:bd:20:40:59:0d:04:01:d4:f6:98:
                    fc:5b:bd:dc:f1:df:9d:ba:0b:1f:53:34:0e:6b:fe:
                    6a:1c:ab:05:79:86:a9:3a:c9:20:31:aa:a4:3b:99:
                    73:bb:92:3b:49:36:99:99:ec:94:c1:3e:bb:2d:e6:
                    92:d1:58:bb:c7:6d:eb:fd:8e:28:b8:24:84:04:b7:
                    08:9d:98:e8:8f:a5:01:59:5a:60:77:f2:e7:38:f7:
                    e5:b7:ad:a1:12:b4:d4:57:74:48:55:18:4f:3d:1b:
                    f8:95:fe:38:37:aa:33:8a:32:f5:5b:17:c7:74:8a:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:19:27:D1:90:19:3C:73:BA:BC:E7:D8:39:E5:A2:DF:4F:86:FE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/d2be373a-4ce4-35fb-810e-542b3f8888eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba/13168988-4625-42dc-9138-e5632130d1ba.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:DC:07:5C:53:AE:AF:90:86:FC:68:91:CA:5A:20:22:9D:E1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/13168988-4625-42dc-9138-e5632130d1ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:a2:01:2b:a6:0e:3a:40:df:7d:ae:1a:64:97:4e:66:86:
         7c:3e:1b:36:71:06:a4:8f:da:12:35:a8:f1:54:5e:f3:dd:86:
         32:70:3f:4e:b9:b4:fb:d9:7b:6e:7d:c2:c4:2d:1a:af:03:5c:
         5c:de:a2:42:b7:17:db:97:82:1d:99:5d:a9:7c:65:af:af:65:
         21:48:03:76:2a:31:77:b7:7d:4c:61:52:52:36:13:0d:3b:db:
         6a:eb:3c:d6:79:49:0b:e2:2b:09:c8:2b:11:86:35:29:fc:f3:
         ff:e6:d5:92:5e:9b:d6:80:12:b9:96:7a:34:77:0b:ca:07:8d:
         67:40:fa:db:ae:b3:50:d5:27:b9:f0:94:0f:e5:06:5c:a1:c6:
         5f:2b:11:51:78:dc:51:f2:32:1f:0d:f2:2f:44:ea:4b:f2:a1:
         e1:a3:08:c6:06:2f:5d:32:6f:7b:d1:5a:28:07:36:37:9f:38:
         8d:25:53:bd:55:e9:41:23:37:e7:17:56:28:15:4e:b4:a2:82:
         73:c2:ff:ab:d1:47:7e:ed:63:14:79:4f:76:32:e3:8d:40:e9:
         ef:ec:2c:83:d9:bb:af:4f:83:f3:65:99:0d:5c:06:d7:6a:71:
         6d:d2:d9:49:96:4c:91:db:6c:0f:10:c6:40:4d:40:a7:2f:e5:
         10:83:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:45 2026 by rpki-client