Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4c2ff5c1-7efe-3d17-abea-8688e4f97186.roa
File:                     4c2ff5c1-7efe-3d17-abea-8688e4f97186.roa (raw, json)
Hash identifier:          6cxF4o4VxnPG3isr4A5SP+LrfVhdY9MFsby2MO5F/dw=
Subject key identifier:   A2:0C:32:4B:59:86:20:9C:34:56:F5:9D:DA:97:C2:F7:EE:9A:E0:6D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D368CC0F5F7E91164CEFC8B00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4c2ff5c1-7efe-3d17-abea-8688e4f97186.roa
Signing time:             Wed 18 Mar 2026 20:58:50 +0000
ROA not before:           Wed 18 Mar 2026 20:58:50 +0000
ROA not after:            Tue 16 Jun 2026 20:58:50 +0000
asID:                     215728
IP address blocks:        149.19.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:8c:c0:f5:f7:e9:11:64:ce:fc:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 18 20:58:50 2026 GMT
            Not After : Jun 16 20:58:50 2026 GMT
        Subject: CN=150587bb-e837-42d5-acb0-4175d29ceb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:d6:b9:1a:a8:b0:ee:c1:94:99:36:e0:84:
                    f1:5b:28:05:66:fc:69:86:97:c5:8d:51:d9:17:b8:
                    82:b2:1d:51:9b:29:d6:ad:16:91:c4:bd:1b:36:c3:
                    d4:b6:b8:83:96:2b:7c:67:7c:3f:8a:42:1e:1a:24:
                    c8:87:e9:0a:5e:cd:27:1b:e3:05:9d:46:4c:7c:97:
                    99:07:85:da:09:6d:dc:28:1c:d8:72:fc:f9:0e:a3:
                    e4:94:c4:64:b4:ae:73:fe:91:45:aa:ed:07:7d:2a:
                    e8:20:3f:68:da:a2:71:77:af:19:62:54:3c:c4:d9:
                    a7:2a:8c:79:59:37:ff:c8:55:4b:4f:6b:d6:d1:93:
                    c7:4b:07:85:01:34:88:8e:4f:ff:c2:e0:f7:1e:06:
                    b8:27:6b:82:6a:e6:5c:49:4c:e9:c6:d6:97:3a:4b:
                    d6:d6:eb:91:96:a6:39:a1:b9:6f:ff:2e:fa:45:2b:
                    0d:7f:7a:04:f7:1b:6a:da:9b:d0:c9:3e:2a:2f:9c:
                    36:e7:89:56:d6:cf:69:5f:f0:c5:54:97:09:3e:c5:
                    dd:9f:98:3d:36:14:e3:67:4e:e2:37:16:e6:49:bc:
                    b2:9c:74:14:73:a1:84:f3:48:cb:fd:58:f4:78:08:
                    1f:9c:95:45:11:f0:3c:d3:31:42:0e:dd:e0:f1:c3:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:32:4B:59:86:20:9C:34:56:F5:9D:DA:97:C2:F7:EE:9A:E0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4c2ff5c1-7efe-3d17-abea-8688e4f97186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:d6:77:51:24:6c:3a:d8:07:57:98:71:7a:0d:36:6e:16:
         14:2d:b3:15:8d:2f:76:09:46:11:b7:13:1a:0a:2a:4f:1a:b7:
         d0:f3:6d:a8:8f:5d:a9:ac:c9:b6:a9:0f:0c:e4:d5:3c:33:2e:
         03:6a:69:ef:d3:47:d3:7c:3f:84:95:c1:29:b7:74:90:b3:70:
         93:2c:48:ad:7f:f1:9e:81:a5:61:95:a0:d8:9c:7c:d7:35:fb:
         90:db:d5:57:ef:d0:11:9d:92:1a:ef:eb:c5:f7:76:fa:9d:3b:
         28:6c:c6:6b:5f:2f:6a:13:8e:3f:34:e3:41:48:d4:d1:d1:38:
         55:d6:cc:d4:19:7b:72:a9:0e:5e:ba:47:df:2c:b4:62:67:3b:
         3d:a6:57:7e:b0:0a:3d:ef:bd:d0:42:e8:41:ae:37:84:92:04:
         92:35:5c:58:0f:65:c4:12:24:39:4b:15:c2:81:af:d7:6b:5c:
         76:e2:9e:6e:49:e4:2a:33:0b:1f:37:93:19:94:1e:28:3d:07:
         88:67:11:2e:f1:91:da:76:66:40:3a:6a:f9:44:4b:09:50:32:
         2d:57:7b:10:e8:6e:35:d3:42:fd:f9:db:2d:56:49:ef:89:90:
         68:14:34:c3:e9:dd:1f:14:7e:0e:02:84:67:ab:be:9c:4a:f4:
         dd:7d:26:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:22 2026 by rpki-client