Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/bf313bdf-a758-3340-9837-1979eeec2781.roa
File:                     bf313bdf-a758-3340-9837-1979eeec2781.roa (raw, json)
Hash identifier:          pzqdbXAQ0i82jxDET/E8SA/qFe1ekj67aMs4/z1M+H8=
Subject key identifier:   91:7F:B2:D5:80:03:FC:88:C6:E5:B2:93:9D:D2:61:23:EE:66:9B:60
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F4328584D390D9D76B6E4F9BAF4926300
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/bf313bdf-a758-3340-9837-1979eeec2781.roa
Signing time:             Thu 19 Mar 2026 18:30:05 +0000
ROA not before:           Thu 19 Mar 2026 18:30:05 +0000
ROA not after:            Wed 17 Jun 2026 18:30:05 +0000
asID:                     3477
IP address blocks:        204.193.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:0d:9d:76:b6:e4:f9:ba:f4:92:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Mar 19 18:30:05 2026 GMT
            Not After : Jun 17 18:30:05 2026 GMT
        Subject: CN=22a3a361-6aac-4b30-8e8f-3fac753ba9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:28:52:ac:63:18:78:1e:0b:69:3a:aa:e6:
                    96:8c:ae:0d:27:c0:58:e1:ee:04:44:85:cd:a9:38:
                    03:8b:a3:10:53:93:b1:c0:5f:bf:a1:ba:02:bc:03:
                    04:31:a4:3c:e3:7d:b6:81:d7:9a:e0:c6:2f:5a:34:
                    44:ec:70:4b:69:1e:d8:b6:ad:97:57:7f:ce:20:58:
                    b0:53:a4:a9:6d:56:74:92:9c:41:ea:8e:e1:19:91:
                    b2:a7:f2:6d:8a:26:e0:d9:a3:46:44:0a:f9:ba:a6:
                    23:bc:b6:6c:24:3c:a9:21:b2:9b:9a:2d:5b:83:25:
                    da:37:55:22:19:c0:dd:f8:81:02:fb:5a:e5:68:e7:
                    ac:bd:ed:61:d1:27:91:9b:b7:f4:e4:75:eb:86:02:
                    0d:b7:91:af:36:4b:36:61:37:94:7a:d8:61:dc:c7:
                    61:a3:5b:f7:f4:c1:af:69:bb:7b:75:bf:f2:10:f1:
                    eb:dc:a2:05:ef:60:67:5e:7d:5c:03:7b:5a:a6:e7:
                    65:eb:07:d4:9b:1a:1d:06:92:49:cd:1d:ff:09:d5:
                    47:a7:e3:79:4a:15:43:05:af:d1:09:fd:c0:c7:3c:
                    fe:c7:eb:8a:9e:71:6a:3e:2b:75:b7:1f:10:11:ff:
                    49:ac:56:29:b3:98:ea:3d:ea:dc:ea:a8:52:f1:c4:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7F:B2:D5:80:03:FC:88:C6:E5:B2:93:9D:D2:61:23:EE:66:9B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/bf313bdf-a758-3340-9837-1979eeec2781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.193.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:44:f6:9f:34:87:82:b9:ae:99:1a:e5:3c:ff:9f:21:fe:68:
         1f:30:1d:b8:8c:d5:96:03:71:11:b6:7d:f5:5d:3f:6d:9f:ee:
         9b:72:e0:74:ea:64:4f:5f:39:df:d4:f7:b3:e7:87:6f:0e:cd:
         9f:6d:7b:f1:49:cd:58:9e:30:f4:e0:61:54:60:92:ae:18:5b:
         bf:13:81:f9:cf:63:ef:fc:3f:9a:1c:3b:dc:fc:1d:9d:06:78:
         42:19:a9:8e:56:d6:fa:c8:3d:95:c1:25:ac:77:c6:38:ae:1f:
         95:f3:34:da:d7:00:2a:7f:c3:eb:d2:5d:77:7d:83:db:17:e4:
         56:60:c1:54:95:a3:4f:5b:4d:28:16:f0:78:da:dc:71:13:5c:
         71:9c:36:60:b0:86:7c:34:d3:e2:a7:f4:16:f2:25:f3:6e:ef:
         93:a5:04:c0:b0:50:3a:96:92:61:55:2f:24:8b:c7:42:51:a3:
         64:43:62:25:5b:72:03:46:b8:a8:b5:8b:60:6a:23:72:ab:09:
         23:c6:89:59:c3:17:3a:c9:df:55:fe:38:83:0c:bb:c3:02:d0:
         da:9d:10:92:60:97:d2:2b:ae:0f:6b:56:bb:f6:9f:d2:3d:21:
         1d:8e:dd:86:29:a6:1f:2b:9a:ea:41:08:ca:86:ff:dd:5a:78:
         db:df:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:01:59 2026 by rpki-client