Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa
File:                     c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa (raw, json)
Hash identifier:          G7QH+2SU9U+PaD18w9Vrbp9Wsnk3mLfs3w7UtaZft/w=
Subject key identifier:   DF:98:58:5D:37:EC:59:FE:29:46:7F:7A:41:FD:FD:9A:86:48:0C:47
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F4328584D2644B2EA86ABE19CA6912020
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     393732
IP address blocks:        192.76.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b2:ea:86:ab:e1:9c:a6:91:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=60b94a8f-12d9-4cdd-902f-25155a49ab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:43:0c:93:13:d5:d4:6d:be:e0:41:2f:92:
                    81:2b:10:c7:ef:85:77:f7:c6:94:4c:e5:37:de:09:
                    de:df:ff:41:dd:ad:a1:df:c8:e8:a6:1f:58:7f:5d:
                    c8:89:23:78:9e:3a:40:f2:1e:3d:ba:a6:cc:f2:a4:
                    fc:e8:4b:33:01:ae:92:f5:36:be:c2:ac:cd:ac:da:
                    39:c8:f0:70:1d:bf:b6:85:f5:33:0f:09:ed:3c:27:
                    5c:bc:34:a8:09:c0:49:3c:e0:fd:e7:74:4e:dc:a0:
                    c2:5f:15:16:ca:0e:83:09:94:40:f6:25:3d:21:37:
                    9a:b8:92:5f:25:86:e5:a4:ce:73:74:65:fd:92:90:
                    8e:e9:c8:db:70:03:e4:08:ba:d5:26:b3:4d:a9:ad:
                    35:6d:0c:c5:33:93:aa:70:1a:7b:e7:35:f5:97:1b:
                    6e:99:62:dd:47:2f:96:0d:5b:f4:38:75:d7:cf:da:
                    d6:d3:b3:a8:f6:37:e5:86:8e:d3:f8:c7:02:7d:30:
                    c9:ab:13:3f:56:8e:09:4f:77:01:8d:76:d9:33:a7:
                    c1:de:60:1c:4c:0b:f0:1e:0c:2e:fb:e5:66:49:ac:
                    a2:6d:77:4d:1d:ad:ea:46:38:3e:99:9a:e7:7b:c7:
                    7f:69:f3:a0:d0:56:c3:1a:db:91:63:ff:03:bb:9e:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:58:5D:37:EC:59:FE:29:46:7F:7A:41:FD:FD:9A:86:48:0C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.76.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:26:24:e8:95:51:b3:20:38:f0:d3:5d:d1:6d:f0:f1:55:78:
         e0:c6:0d:7c:32:88:04:84:f7:a0:d0:62:35:d1:ec:ad:3a:07:
         5b:a3:e1:2b:e7:aa:68:4c:f8:61:10:c2:75:ac:1b:45:f7:c2:
         f4:54:59:b1:f8:2e:08:fc:6a:a3:25:39:87:87:91:5c:b3:3b:
         a2:f6:30:68:88:89:de:c1:d2:5e:1a:b9:ef:80:95:11:26:f6:
         45:f8:19:ad:30:a7:9a:44:c3:ed:a4:2c:3b:b6:5d:df:69:00:
         b5:c0:4b:4d:59:76:e4:68:bf:45:10:b1:45:9a:11:13:9a:4a:
         35:2f:dc:41:47:66:57:31:5b:b1:cc:a5:58:e1:60:6f:d0:a3:
         dc:1b:cc:a2:6a:2c:b7:56:ef:9a:0b:70:95:20:d0:cd:34:1c:
         be:90:9f:81:be:78:13:e8:5f:a0:cc:2c:d6:43:19:9d:5e:19:
         07:e5:27:5a:80:97:af:71:46:3d:30:a4:6e:5c:05:94:d3:1d:
         4a:f3:b7:ce:75:6f:64:03:89:60:b6:ac:86:f6:f6:35:33:bf:
         f7:8d:05:33:4f:58:df:7e:70:91:9b:a5:11:90:74:f4:e1:93:
         da:8c:fb:f4:47:00:5b:8f:92:0d:23:e8:4e:24:24:7e:4c:84:
         65:d3:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:38 2026 by rpki-client