Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f215558-c170-34b6-8362-397a40312303.roa
File:                     2f215558-c170-34b6-8362-397a40312303.roa (raw, json)
Hash identifier:          dYqbuEn6cM3Ls2pjs/CaAegccxtfZXu+bzwBQMEEiPA=
Subject key identifier:   4B:9D:06:CA:87:97:1B:5B:D1:93:05:DF:F1:EC:96:8A:69:5C:5F:0E
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584D9A20356467B5C8F960368A6C
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f215558-c170-34b6-8362-397a40312303.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     5650
IP address blocks:        192.81.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:35:64:67:b5:c8:f9:60:36:8a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=9cdf9289-8cc4-41a7-bdc8-7f8cc02d0dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:a8:4d:f0:36:cc:f0:c4:25:39:2c:c2:85:
                    15:0f:e8:2e:54:77:39:d3:0d:33:39:5f:c6:40:aa:
                    a3:0c:28:a8:01:60:f9:9e:50:a8:35:c1:51:8b:4b:
                    21:9c:20:ff:73:69:5c:8d:db:a7:0a:4c:cd:05:5a:
                    24:93:20:96:8a:c6:be:f5:4c:ce:07:7c:fd:6f:f0:
                    48:ef:3e:e1:96:f3:a4:0f:20:23:c0:83:44:e6:83:
                    7e:ea:13:5b:16:fa:e7:3d:9f:dd:f7:91:60:63:9d:
                    2e:89:9a:8c:1a:4b:11:c8:b3:97:e2:09:f8:60:93:
                    83:1c:2e:73:f2:7d:68:00:78:08:fa:30:52:a9:c7:
                    3e:ca:31:e8:61:ec:3b:77:5f:c7:40:7e:90:97:d1:
                    28:6a:c7:13:fc:d2:df:ce:b7:19:d0:94:be:5d:be:
                    ce:96:c7:9f:c6:bf:28:6c:36:35:71:a2:5c:30:b2:
                    52:d8:90:2a:4f:98:9d:a3:06:7f:68:7d:6b:aa:01:
                    60:1d:42:1c:0e:e6:38:de:84:98:d2:e7:fb:40:8c:
                    93:76:68:cf:23:49:72:31:63:d1:84:4a:3f:d0:4a:
                    67:f0:af:e4:0c:45:58:38:b4:bd:5c:8a:a1:21:7b:
                    81:94:6a:7b:bb:b8:74:2a:8b:81:15:2d:c2:a3:1f:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:06:CA:87:97:1B:5B:D1:93:05:DF:F1:EC:96:8A:69:5C:5F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2f215558-c170-34b6-8362-397a40312303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:59:e0:66:2b:f1:0c:ce:f0:2a:6d:bc:ca:06:67:43:83:b6:
         40:5a:f2:d4:2a:19:be:11:56:90:99:e6:d4:05:89:42:e4:c8:
         23:e6:39:ce:d9:a3:f5:73:42:13:44:f5:a0:5b:9d:30:c7:32:
         64:9a:a8:a0:79:d5:59:f9:5c:48:18:50:5f:19:da:52:ab:f1:
         3d:86:a5:fb:00:28:25:8d:6d:b8:d6:b4:39:74:12:df:5e:1a:
         49:69:65:4e:af:c8:60:94:bf:97:81:1a:39:11:44:fa:fc:5a:
         7b:86:31:c9:5b:2b:12:8e:41:16:fe:d4:7d:43:5a:db:49:30:
         97:cf:01:f9:b5:b3:4e:18:d3:e3:37:16:f1:9f:6a:4a:af:dc:
         f9:8f:78:4f:0b:19:ee:c0:96:73:41:a2:5d:b4:6b:68:e2:26:
         e6:6a:01:f9:5f:c2:60:2c:19:8c:47:31:e4:b9:5c:64:cb:a3:
         0e:2c:3d:92:b9:8d:34:54:a1:cd:f3:e3:c9:c5:4c:4d:af:4b:
         59:65:6c:33:16:6e:54:0b:8c:fe:cb:e4:90:5c:7f:58:83:be:
         09:78:de:47:8e:24:9d:11:f8:ab:e9:4e:61:13:db:88:ed:43:
         8e:44:ba:bf:58:39:a9:5f:7c:b3:35:f2:99:13:ef:ba:cd:7d:
         49:33:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:34 2026 by rpki-client