Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
File:                     5dd6712e-6178-3993-8873-ab9cf5de0d88.roa (raw, json)
Hash identifier:          RnREPpHqov6bb6XGfrCK22ZhgpRKVeZWtbHwBu+DXEQ=
Subject key identifier:   B2:12:FB:65:0A:53:4D:83:1A:55:D2:06:74:C8:15:DD:40:23:61:54
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D1B1A13721C0ADE98F8DC8840
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        199.250.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:13:72:1c:0a:de:98:f8:dc:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=e1cb9921-e2c0-4f6c-af8a-a69bddcdfc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:f7:a4:18:f7:b2:54:b5:2b:dd:ef:2f:fd:
                    d2:90:97:19:d3:bf:02:eb:94:c9:83:8a:6b:d9:f0:
                    c0:97:63:72:9c:36:73:27:d8:a3:88:c7:3f:e9:1d:
                    b7:56:2e:1d:56:03:bb:02:61:6b:d0:73:8b:47:6e:
                    ec:da:1b:b2:91:17:1e:3d:e6:5c:99:bc:03:0b:c7:
                    ce:3f:29:2d:61:60:81:7f:a8:51:95:5a:27:6d:1d:
                    6e:3c:57:03:94:24:6d:9e:6f:de:e6:8a:55:a1:4e:
                    14:70:ae:6e:aa:1e:fd:9a:e2:67:f0:70:6d:06:9d:
                    b4:7a:68:84:cd:e5:6b:5f:1b:59:6b:2e:32:df:de:
                    23:9e:5e:22:ca:98:03:2f:28:ae:b9:bc:bb:fc:7a:
                    a0:13:b4:3d:51:91:cb:4f:5b:8f:0e:09:fd:3d:36:
                    4b:09:02:c4:80:50:8f:51:5f:cf:de:ee:2f:d8:25:
                    3d:c4:99:82:80:aa:b6:01:23:97:49:f3:4a:79:5a:
                    fa:b4:3d:12:26:42:78:70:a6:ef:d8:f7:a1:17:2d:
                    b1:bb:8e:98:c1:09:40:b7:d8:dd:29:63:10:ef:e4:
                    2f:f1:38:d7:93:13:75:c2:22:5c:d8:7c:bd:1c:46:
                    5b:8e:f0:73:85:04:cd:90:5b:05:dd:bd:78:36:23:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:12:FB:65:0A:53:4D:83:1A:55:D2:06:74:C8:15:DD:40:23:61:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:b3:bf:d8:b3:17:2b:38:89:02:2c:ae:f7:4a:c4:26:5c:2f:
         90:c4:6f:8e:a5:30:b0:2c:20:a4:bd:98:be:5a:38:0b:c0:7f:
         e0:23:ec:87:b2:8f:15:e7:30:f1:06:d3:91:17:9f:14:0a:c6:
         a3:d4:ea:6b:d1:96:8c:56:6c:f1:c8:5a:58:e7:67:b5:60:07:
         fb:ce:c7:3c:b0:0d:e5:13:61:2f:94:a1:86:1b:92:09:be:10:
         f5:f4:03:0d:0c:6d:b5:4f:9b:54:de:28:76:6f:78:1d:2f:51:
         bd:1a:61:02:5e:f0:ba:b2:74:b5:09:5f:27:2d:67:6b:10:8e:
         b1:10:39:c8:3a:d8:53:4b:94:df:02:92:1d:fc:0e:f1:08:fc:
         9d:4d:3c:d0:ea:b0:68:e5:3b:98:f5:e7:8a:26:3f:82:53:11:
         19:c1:9c:f3:09:82:28:fd:dc:4d:7f:bf:27:6d:d2:fe:0e:86:
         37:69:5e:c1:09:ea:e1:0f:41:8c:24:fc:d3:7e:99:db:19:8e:
         da:70:6a:07:41:94:14:76:cf:83:20:b7:eb:25:e8:5a:df:a7:
         09:0e:78:d9:69:7e:70:8b:45:b3:a4:59:90:31:4b:ff:a0:25:
         da:6d:ab:94:bc:0e:9a:b3:ce:11:ae:12:fe:21:db:d0:f1:3a:
         39:ae:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:47 2026 by rpki-client