Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f1864827-02cb-3147-aaf2-6f18ef8302e3.roa
File:                     f1864827-02cb-3147-aaf2-6f18ef8302e3.roa (raw, json)
Hash identifier:          qy1r/Qy4P5JZVC5c/Ko99JddhXdw9N6Da17EnJI/Zyw=
Subject key identifier:   15:B7:E5:0F:9F:B7:77:E2:E9:F0:4F:04:38:4E:B7:4C:46:19:44:5F
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584D316F6DF51B92D23265DD4A00
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f1864827-02cb-3147-aaf2-6f18ef8302e3.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     3300
IP address blocks:        192.157.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:6d:f5:1b:92:d2:32:65:dd:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=99df0c1e-6688-4065-b1ab-9635ab1043ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:13:4d:02:60:3a:a9:68:34:68:e4:f6:ae:
                    bd:0b:8e:a4:72:33:91:a7:e7:2a:66:77:e3:be:21:
                    9d:e3:c1:c3:a2:45:de:2a:98:6f:39:34:52:dc:6b:
                    af:72:16:4a:e8:fe:be:88:72:68:ac:dd:fe:28:7e:
                    3c:36:f3:87:a1:a8:8f:2d:b2:eb:59:2c:06:95:c7:
                    86:a0:26:ec:3f:51:5b:b8:c4:f8:ff:9c:3c:4b:28:
                    45:92:20:fe:29:47:dc:04:09:53:b4:9a:13:83:7d:
                    b0:c2:90:3e:a3:eb:3c:71:38:a4:37:c7:40:e2:a7:
                    f1:96:2c:e7:9b:01:71:a2:14:2e:b7:f0:b0:97:e0:
                    eb:58:9e:c4:66:94:44:7a:ec:4e:9c:57:95:c4:e0:
                    b3:c5:07:a6:e5:31:8a:32:14:1e:2b:95:f7:e6:9c:
                    fa:50:ff:21:c1:1f:14:10:af:a7:ed:33:df:9c:41:
                    09:a5:d9:0d:87:f1:26:f5:f6:77:c4:ba:8b:c3:8d:
                    45:74:73:6b:12:0f:e2:b0:01:c2:a9:a8:85:3f:56:
                    34:37:9a:41:cf:64:73:5e:b3:df:4e:2c:d6:5b:84:
                    e3:9e:f8:2b:33:29:ec:16:24:7a:17:71:ca:8e:58:
                    10:fe:d2:5a:3b:d9:3a:45:5f:1c:da:eb:23:cd:a1:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B7:E5:0F:9F:B7:77:E2:E9:F0:4F:04:38:4E:B7:4C:46:19:44:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f1864827-02cb-3147-aaf2-6f18ef8302e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:30:7d:d8:c1:b6:8c:60:1e:5e:f5:1b:10:67:7c:a9:57:
         2b:d5:dc:6a:93:42:50:25:0b:cc:8a:f9:6f:03:31:53:81:20:
         f4:e7:1a:cc:49:a1:c3:f4:91:10:d2:c6:9b:4a:fb:b4:5d:fb:
         ef:ff:14:9c:2f:71:b8:aa:fb:ae:e2:6a:f6:5f:47:93:57:a5:
         36:57:f3:9b:5d:af:cd:88:19:51:57:80:57:80:91:db:d4:5c:
         5f:62:03:d4:9d:73:c5:d3:9b:3a:38:2d:be:f5:d8:5a:c2:09:
         95:58:41:4c:5c:7d:00:b0:6c:7c:77:f9:f0:0d:9d:e5:bc:4b:
         db:16:ea:0b:14:7b:05:0f:49:97:49:3a:85:84:42:04:ea:cd:
         ca:1e:f5:fd:d5:4d:07:ff:a1:96:3e:95:d2:a9:16:e7:fb:9d:
         03:cd:54:dd:56:9b:1f:c8:b1:48:98:a0:70:b6:db:44:3a:09:
         26:0e:5b:f2:9c:5b:ae:70:c3:06:47:fc:e0:3d:4d:7a:5f:2e:
         6a:6a:d4:8f:12:c6:97:58:d1:63:4a:d9:cb:da:3f:5f:da:7d:
         5f:5a:4a:9c:a8:ea:86:a7:67:29:54:5c:9a:95:95:2c:0e:72:
         64:8f:82:91:c6:2d:b1:54:8f:56:5a:af:8b:5e:25:58:a3:6f:
         3c:84:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:54 2026 by rpki-client