Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97f1ea23-b241-3ef6-92e3-69f53afd03db.roa
File:                     97f1ea23-b241-3ef6-92e3-69f53afd03db.roa (raw, json)
Hash identifier:          wdUUWuGEzRie2WSaNik0hoN+On/3fVXoW7vYBkgh3lM=
Subject key identifier:   69:EE:C9:3B:30:86:46:3B:43:99:B7:5B:55:18:26:00:21:1A:29:A3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDAB89190F367751F95A0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97f1ea23-b241-3ef6-92e3-69f53afd03db.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     64267
IP address blocks:        192.171.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:da:b8:91:90:f3:67:75:1f:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=8daf4511-76a3-44b6-b6ad-935d7d7b8990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:45:e0:f3:09:1b:b7:25:bd:c7:99:c9:e9:
                    06:54:77:1f:19:d1:59:57:df:62:cc:fe:59:4f:f4:
                    a9:1f:b3:4c:d4:58:34:4e:4e:db:a9:5a:3e:08:db:
                    ca:3e:d5:73:e8:ba:13:d3:81:97:7e:15:04:76:39:
                    8e:30:71:93:6e:0f:75:8d:61:ef:b3:c5:94:a9:f5:
                    6c:c5:54:a7:50:81:b6:e3:dd:f1:29:2f:b6:0c:e5:
                    94:f1:ca:83:54:14:d6:4f:22:2c:5f:00:86:d0:37:
                    c4:a2:6b:bf:7c:f8:e8:77:7e:f5:b5:83:54:06:75:
                    33:fd:35:f6:25:5b:56:6a:9f:0e:77:11:4a:1b:a9:
                    13:2c:4b:59:46:89:99:20:f7:7b:75:aa:02:e3:32:
                    7f:ae:26:97:86:34:19:1c:f1:79:1c:cf:f5:d7:6b:
                    b4:7c:dc:df:86:13:15:25:77:6a:cf:f2:4e:d7:09:
                    f8:82:33:0f:16:05:3e:05:92:2f:e2:68:79:ef:08:
                    87:02:57:d4:ae:b2:b9:03:23:36:f9:a5:c1:53:0b:
                    a5:c8:0d:eb:4d:d0:52:58:ea:a8:11:31:74:8b:d5:
                    dd:70:aa:12:e5:da:dc:48:30:84:fc:2d:91:98:90:
                    1a:a7:43:9b:5d:2a:0f:a7:16:53:e8:85:6f:ab:6e:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EE:C9:3B:30:86:46:3B:43:99:B7:5B:55:18:26:00:21:1A:29:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97f1ea23-b241-3ef6-92e3-69f53afd03db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:19:d0:5d:05:2e:89:5d:7f:3d:71:47:a3:ef:e6:99:63:fc:
         2d:0b:2d:dc:34:a2:b6:a9:2f:9c:8c:c1:f1:4a:da:c7:c8:76:
         38:48:b4:f7:58:ca:06:c9:12:78:c8:b4:dc:c4:87:8e:10:a6:
         dd:54:00:8d:85:7b:bd:fa:54:37:0a:9c:ce:66:a6:e5:b2:61:
         2e:d7:ca:71:be:23:37:fa:c4:ff:33:60:99:c3:36:83:0d:dc:
         be:8c:cf:14:74:89:a2:41:d7:9d:3a:04:95:91:b0:ba:d2:6b:
         40:54:7e:f2:d7:2c:dd:ae:82:17:09:60:63:71:00:18:72:20:
         4e:6e:6e:23:83:eb:ec:36:d2:8b:49:1e:bd:91:45:0b:1a:f0:
         ab:fb:7f:33:23:18:97:53:77:fb:f6:c5:da:5d:29:a4:95:37:
         f3:85:8a:93:d2:9b:0f:55:d0:41:3b:f9:85:bc:27:12:2e:71:
         2b:b9:21:4f:a6:41:09:af:1e:cb:66:ab:f0:f8:c2:31:30:78:
         cd:22:5d:6f:c4:1e:b8:7f:f4:f0:8e:77:fd:da:e0:7d:47:7a:
         31:d9:96:04:a4:e7:c8:1c:62:ea:35:c1:84:5e:5b:67:5d:b1:
         43:23:6c:6c:11:e0:91:1d:a3:2e:8d:8e:0a:9a:9b:99:d4:a7:
         af:75:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:58 2026 by rpki-client