Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
File:                     1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa (raw, json)
Hash identifier:          yexxfGE3PJuzJfjLn2x/vtg9tvZPLHOFgcXvhqeMvlg=
Subject key identifier:   9F:65:B6:F5:84:49:52:7B:2B:79:B6:63:92:B9:77:C5:B5:1E:18:3F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDC8B5648A82ED19E66C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     64267
IP address blocks:        199.34.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:dc:8b:56:48:a8:2e:d1:9e:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=2b2d5b23-43b3-4491-a712-72dc2d98483a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:ad:b0:60:a7:32:fd:7c:3e:50:4d:0c:32:
                    d7:73:ee:98:d8:05:77:c1:71:35:8e:2d:13:22:b1:
                    18:01:0f:80:8c:8c:6f:c3:fb:e2:ee:07:9b:03:3e:
                    68:52:d3:03:a9:76:7f:ee:aa:de:bd:03:ce:bb:3c:
                    a0:f6:b3:80:15:6d:5c:aa:ab:d6:b8:e1:62:0e:60:
                    67:4f:64:88:00:f7:fd:ef:3c:0e:db:27:e1:98:ef:
                    ee:01:37:4b:ff:19:51:0a:68:3b:25:fd:53:ce:2d:
                    91:1a:84:4e:0b:13:d9:05:5e:f8:39:21:29:50:54:
                    89:7a:a0:72:8d:e2:74:3c:b8:74:32:be:47:c5:1c:
                    e8:38:00:76:eb:55:65:ab:2d:0d:01:18:f4:9c:11:
                    80:f1:10:48:fe:d1:a0:e3:bf:31:17:6d:41:df:e5:
                    49:03:f9:34:cb:be:b7:bc:15:10:09:c8:ec:4b:7b:
                    2c:a2:dd:af:07:0a:40:6b:9c:ec:0e:81:6e:a1:4b:
                    92:61:59:e2:11:80:36:67:d1:c8:1d:eb:d5:60:6a:
                    3d:78:53:e8:2b:57:b6:37:7f:80:4b:15:20:4d:ff:
                    72:e3:47:f1:f8:cf:7c:78:60:88:a0:26:1f:01:d3:
                    0c:fc:76:f4:8f:0d:a8:90:73:a4:e0:45:4f:a9:6e:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:65:B6:F5:84:49:52:7B:2B:79:B6:63:92:B9:77:C5:B5:1E:18:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1a652fb4-5e2d-338e-ba84-ac25f63bf537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:18:fc:a1:43:f2:f5:df:c8:64:17:2d:5b:7f:bc:65:9f:b3:
         02:02:c1:27:d9:7b:35:a9:59:45:5f:18:c3:d1:22:7f:58:78:
         90:dd:7b:2c:ec:50:76:14:b5:b3:fc:f0:8f:41:46:2f:56:04:
         6c:6e:f3:64:3d:7f:75:6a:cf:ab:4f:fa:4f:3b:c6:10:00:11:
         e1:54:f2:3a:d8:13:16:7f:72:96:f5:db:d4:ac:c9:1f:4a:b1:
         31:66:2c:0d:4a:59:b4:33:15:ae:ba:c4:7c:c0:2f:3d:0e:94:
         66:cf:1b:db:00:05:4a:57:21:27:03:dc:36:26:39:b4:d6:c2:
         fd:0e:d4:61:85:a4:1b:2c:75:d4:64:b8:b6:19:99:a0:ef:25:
         6c:3f:74:0a:1d:0e:f1:af:23:85:32:46:e4:fe:5a:41:0f:0f:
         66:31:e9:7f:47:58:3b:67:84:be:45:03:80:ce:90:ec:f9:51:
         1f:ba:cd:91:af:9b:5b:cf:ad:b0:40:8c:30:ee:99:4a:f8:8d:
         10:79:4a:91:68:6d:39:a4:01:69:0c:a9:f9:70:aa:51:c0:df:
         03:fe:0b:19:30:bc:78:cf:bc:80:30:7d:d6:5d:0c:8b:6b:07:
         df:37:b5:4b:d3:f6:b5:80:9b:fb:b9:a8:77:0b:6b:70:82:f8:
         9e:4c:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:44 2026 by rpki-client