Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa
File:                     2dc06a22-db8c-36bb-b152-eba31714116f.roa (raw, json)
Hash identifier:          13IBQLkXnpgc+mddN7WmMC0gsq7BeKlxVJ2Rf8SJ5Rg=
Subject key identifier:   06:A5:CD:3D:DE:7B:D8:53:3C:6C:FD:ED:C9:8E:F1:A9:96:2D:AC:1A
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584D39CF8EA63CAAE6B3A4C61600
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     36829
IP address blocks:        141.195.98.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:8e:a6:3c:aa:e6:b3:a4:c6:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=f012c3d5-035b-4eaf-ac9c-3c2d8daa503e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:5e:fb:57:8b:8f:a6:7f:34:85:c3:88:bd:
                    86:87:d5:32:08:ec:22:ae:9b:ff:2e:ea:97:8b:b8:
                    d8:41:9d:29:57:10:57:61:b7:38:c4:ed:91:06:b0:
                    06:76:c5:92:58:0f:12:ef:77:7c:9c:2e:cb:e2:2f:
                    92:e1:e4:cf:c3:31:b0:85:23:a4:95:98:ef:3c:c1:
                    5c:31:53:ef:7a:87:49:4a:d1:9c:83:a8:cd:10:39:
                    a7:fe:70:bc:4f:56:4c:6f:ba:e4:ce:5b:ce:61:98:
                    32:0a:f6:79:4c:98:fb:c8:49:a4:35:28:c2:11:d0:
                    44:59:c5:26:16:25:b5:7e:f3:51:ed:d6:bc:d1:dd:
                    3e:1b:fa:4b:2c:d1:e2:f5:3c:91:53:79:ad:cb:9d:
                    4b:fc:8c:8d:14:b9:80:0f:03:b7:04:6e:8f:7d:5d:
                    b6:cc:30:d9:0c:5b:88:e9:47:28:3d:8a:72:f6:34:
                    3a:66:50:68:8a:fa:d0:9d:b1:64:ce:e8:61:75:42:
                    3d:80:54:f5:0d:f2:c0:69:91:db:ca:e3:76:e6:86:
                    1c:fb:17:2b:64:71:66:be:15:d1:22:3e:4b:f8:61:
                    1b:6e:a2:a3:a7:22:bc:e6:fc:d7:19:88:49:45:ce:
                    76:39:ff:f5:c1:23:79:30:06:62:0e:fc:ee:45:ae:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A5:CD:3D:DE:7B:D8:53:3C:6C:FD:ED:C9:8E:F1:A9:96:2D:AC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:53:dd:5d:55:83:d6:91:dc:e7:11:05:46:3b:d3:0f:46:
         ec:6a:15:02:57:1f:66:79:0b:f1:79:8e:57:72:bc:6f:b3:77:
         2d:ea:ff:da:2a:5d:0a:bd:4a:4c:3b:24:a9:3c:74:bf:e6:4f:
         d5:46:78:98:ec:28:ba:97:d8:d8:bd:d4:8f:5b:14:35:7c:98:
         48:66:a3:e1:c3:ac:8e:33:ca:42:a9:95:18:be:85:b6:f7:b0:
         1f:7b:d5:96:29:f7:56:fb:56:f3:e1:17:97:91:56:04:a1:9e:
         79:7b:b1:a1:c4:6b:9d:d1:d9:87:24:08:2a:e8:cd:07:4a:06:
         95:d4:14:c4:7c:b9:38:59:c8:62:07:38:c7:84:0a:26:a7:30:
         56:43:e2:c7:a8:e3:e3:3c:36:bb:6a:59:d0:c3:82:db:57:c4:
         49:c2:38:48:b5:72:c3:88:c5:b9:88:53:87:7e:ae:dc:24:fa:
         16:61:db:2c:d3:81:a1:9b:a9:20:fe:aa:7b:b0:7f:64:a9:7f:
         ea:2a:43:a6:23:4c:17:c9:ef:e8:8f:ba:76:6a:92:5b:6c:42:
         83:a5:e9:a6:4c:2c:82:e6:fb:ac:96:61:2b:85:5d:00:ac:fb:
         85:27:b8:33:ac:90:5c:d7:a5:be:8d:ba:d3:b4:3e:f1:0a:02:
         a1:cb:64:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:54 2026 by rpki-client