Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/e8e579df-a1d8-37f3-81a6-b414a005081d.roa
File:                     e8e579df-a1d8-37f3-81a6-b414a005081d.roa (raw, json)
Hash identifier:          6RoinmjM4TQ2h9O7gv0+Sna8ekvNiLqGkPYiyu0YDus=
Subject key identifier:   61:94:3D:39:E2:AF:E0:70:50:A0:0B:5C:FA:65:21:4C:BC:BA:40:F5
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584D3F64F080EE81E9DA2586A980
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/e8e579df-a1d8-37f3-81a6-b414a005081d.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     400859
IP address blocks:        141.195.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f0:80:ee:81:e9:da:25:86:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=aedb0b9f-ae12-4db2-810b-93100c8f9244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:de:63:eb:ac:32:7d:d7:f0:ea:7f:aa:57:
                    81:6e:c0:65:0f:c1:b7:c6:18:1c:39:cf:92:b7:e4:
                    f7:6f:6a:b3:6d:c1:f7:97:3c:aa:df:5e:0c:3c:a2:
                    25:1a:bd:37:cf:05:80:06:de:1f:da:66:08:5b:4c:
                    d2:b8:25:1b:92:e1:72:1f:de:ab:e3:34:c0:df:c2:
                    df:79:2b:37:7f:4b:72:72:df:01:c0:9f:04:a2:b1:
                    9e:ae:55:91:ea:f3:ef:f3:77:ac:72:9d:b9:ee:90:
                    91:09:a3:ca:6f:a7:68:c3:e3:07:fd:fc:89:ca:da:
                    b7:42:32:8e:7b:d0:93:2d:a1:5a:bf:04:45:7f:64:
                    1b:93:85:34:fb:dc:1c:21:87:eb:79:d6:f7:cd:cf:
                    b0:16:35:5d:af:7b:40:6b:39:bc:9e:05:d3:3b:44:
                    69:1d:e3:a6:b4:f3:b3:9c:dd:7b:ee:17:71:d1:41:
                    b6:73:c8:4d:0c:09:01:06:2a:43:fa:d1:fd:5a:bb:
                    e7:68:12:59:34:cc:65:ec:b2:c7:65:05:6f:11:23:
                    d1:5f:54:b1:37:3c:f8:0c:ff:8f:ea:11:32:71:e0:
                    fb:f1:16:bc:1b:c4:ac:e4:41:3c:c1:22:1e:13:5e:
                    c3:8f:81:68:28:d1:6d:15:54:b9:46:ac:8f:8e:e4:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:3D:39:E2:AF:E0:70:50:A0:0B:5C:FA:65:21:4C:BC:BA:40:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/e8e579df-a1d8-37f3-81a6-b414a005081d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:10:98:c3:b2:d7:17:70:b9:b2:00:4b:9e:23:a0:b9:1c:fa:
         90:63:15:ea:7b:57:f1:35:1d:af:72:b6:f4:26:45:02:b8:a8:
         3a:a0:a6:8e:51:ca:34:63:d5:ea:25:c4:85:4d:ec:b6:ca:89:
         14:49:d4:b4:08:c9:82:61:bf:a8:96:5c:58:88:93:92:09:6d:
         25:6c:5f:8a:7b:cb:9b:2c:c8:71:7f:db:73:50:8d:21:d7:49:
         22:be:25:a3:42:0a:fd:68:0b:f7:1c:6c:36:67:0c:5d:7c:b7:
         c4:f7:c7:26:ab:0b:fa:87:8a:1e:1a:12:c2:f7:0d:d6:0c:e2:
         8c:cc:ff:b4:98:14:a7:78:9b:22:ce:a0:c0:bc:b9:2f:df:fd:
         de:60:2a:da:08:2f:40:b8:a1:a8:7f:13:33:58:78:4e:ab:4d:
         43:cf:83:aa:1f:66:8a:bc:08:8e:cb:5f:98:fe:d7:12:2a:f1:
         5d:bf:33:8d:4c:e0:7c:c2:a0:96:d2:5e:03:70:40:63:00:76:
         f9:5d:c3:1c:4a:97:c1:5f:39:ad:2a:f8:ce:99:f4:46:c7:10:
         f5:c7:4d:93:95:03:1b:af:4e:55:37:60:a5:90:e7:81:b9:63:
         a3:77:1d:08:c7:bf:e5:b0:fa:a9:8a:37:29:27:50:55:d0:29:
         59:5a:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:07 2026 by rpki-client