Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa
File:                     e1b29e8b-b39c-3622-80d7-999b82e0b378.roa (raw, json)
Hash identifier:          YVYnG4yvKC3IDsMvvB5MWTXdh8BpeAjvnrbrvyvAMbg=
Subject key identifier:   C5:D0:AE:DC:58:32:F6:2C:08:8E:E6:51:13:3C:AF:7E:B0:30:20:26
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D386A444E8E0622D3768FF300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     64267
IP address blocks:        168.91.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:44:4e:8e:06:22:d3:76:8f:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=6365a75b-01ec-4efc-a3c2-a15f6dfa05df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:3c:2e:a4:81:53:b9:85:f6:c1:44:e8:a7:
                    49:ea:20:2d:85:ac:5e:80:52:f1:91:33:d8:11:0b:
                    49:f7:12:7a:56:1a:be:62:a0:4c:6c:fa:66:47:04:
                    fb:b2:24:c3:23:59:e5:fc:e0:24:4c:1a:e0:12:96:
                    61:57:25:30:10:27:21:79:ef:f2:9f:a0:f8:51:2c:
                    10:c9:df:04:cc:19:e8:39:3f:43:a0:4c:98:e4:d0:
                    90:2d:3b:8a:0d:cd:37:52:97:9f:e4:f3:10:95:10:
                    89:ae:16:a0:8a:f8:e7:2c:5e:1c:8e:33:a0:9e:8b:
                    a1:96:dd:94:dd:b2:b5:87:fe:5d:09:13:04:7d:be:
                    a8:2b:d6:3d:91:7a:d2:2d:b1:27:cb:87:c9:d2:f8:
                    d2:52:20:ba:5b:7a:1a:fb:95:9c:f1:ca:68:63:80:
                    85:67:d6:c1:fb:56:c9:a3:6d:5f:62:88:cd:04:10:
                    bf:37:51:0f:5a:db:2f:1d:bd:6f:f4:95:db:31:3f:
                    4c:7f:18:2d:9d:f6:2c:8c:75:8b:d4:99:02:58:5a:
                    f3:73:48:7c:bf:91:4a:cc:81:7d:a6:3b:03:19:db:
                    51:e9:d4:a4:dc:2e:76:a3:d9:2c:3f:3e:45:ad:2a:
                    ab:22:93:1a:9f:57:a4:af:97:b7:2d:dd:05:d1:46:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D0:AE:DC:58:32:F6:2C:08:8E:E6:51:13:3C:AF:7E:B0:30:20:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e1b29e8b-b39c-3622-80d7-999b82e0b378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:76:03:92:52:cd:24:00:ad:11:ee:6c:35:4e:84:fb:89:
         60:35:8f:31:b7:45:76:6d:66:d4:a2:8f:87:39:fd:a6:b0:84:
         cf:cb:3a:91:f4:3c:59:fb:0d:87:3f:b4:bd:d7:c1:65:76:db:
         96:ca:73:44:33:73:17:8d:8c:8c:a0:38:9d:b3:9d:99:88:13:
         48:cc:28:10:3e:d2:ea:4f:c6:06:2d:c9:f3:4f:fb:29:7f:b2:
         4f:33:52:7f:5b:4b:79:3e:b5:d7:9b:d0:85:41:d5:fd:b0:c7:
         78:2b:76:63:ae:9c:5a:43:27:8e:ff:98:d0:e3:ee:c3:a4:c8:
         38:6d:88:cb:28:89:34:e3:33:d7:d3:e9:40:08:80:96:71:b4:
         5e:35:3a:19:91:f6:57:0e:11:44:13:8e:b5:c3:40:38:8d:2e:
         cc:2f:1a:33:b6:f9:31:0d:15:7d:eb:79:6e:08:f5:b5:2b:27:
         d0:b1:d7:7a:aa:e0:78:a0:40:c9:07:b6:ca:92:58:5f:60:dd:
         b9:c5:11:b7:6a:5f:d2:79:81:2c:4f:b6:a9:bd:dc:12:7f:e9:
         1f:9b:68:1b:4e:ad:ee:76:23:e1:67:6d:ba:43:ce:9d:f3:56:
         ed:79:13:e6:3e:30:02:9f:08:e7:28:a7:bc:e2:84:d7:8e:0b:
         20:bb:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:28 2026 by rpki-client