Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa
File:                     c07d9477-bd5d-310a-b557-4b0b4a46506e.roa (raw, json)
Hash identifier:          FcQGsgueU/xogQqruD+hSVVKagoZLWhCPdjApUvgZIQ=
Subject key identifier:   4B:DF:65:0D:19:AC:BE:8D:D1:BC:99:11:6B:95:85:74:A8:54:F9:C2
Certificate issuer:       /CN=219f6136-3599-4e41-920e-eccbe6592210
Certificate serial:       010D0C9F4328584D300A289F7FA5DFE6906A40C0
Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     17001
IP address blocks:        192.139.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:28:9f:7f:a5:df:e6:90:6a:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=bda8a760-bca3-4fdc-82c1-a94b7a014aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:9e:35:f4:77:ba:d9:d8:64:5e:32:28:dd:
                    db:3d:d8:06:9c:15:c8:fb:94:dc:f0:13:92:73:b1:
                    f8:da:d0:86:ef:ef:2a:0e:fb:bd:0d:70:74:b6:da:
                    d0:5c:85:0f:09:f3:5b:5c:c9:1d:8e:c4:73:43:89:
                    d7:1c:15:ec:fc:38:99:79:7d:b5:cf:18:98:7c:c7:
                    dd:ca:9f:11:53:81:63:2e:bf:b3:30:f8:2e:6d:78:
                    19:7e:ef:1d:81:20:c4:9d:59:6a:9b:4d:03:3e:3b:
                    e8:4c:72:57:78:c8:9e:92:a3:c2:bd:de:ce:f1:24:
                    ad:78:38:b1:cf:53:67:df:3d:c0:41:c7:b8:dc:d5:
                    f4:16:f5:2f:7a:63:df:72:12:da:fd:16:5d:e2:ea:
                    3f:f6:16:b4:92:68:8c:17:ae:42:9c:e6:c8:96:64:
                    a9:3f:8a:34:57:69:e9:a6:b9:63:99:a7:4e:28:d9:
                    31:9d:e2:de:d1:b3:0f:93:6a:4d:56:ae:6d:70:78:
                    3a:2c:80:a7:08:b1:47:f5:49:2a:2e:6c:30:69:96:
                    94:3a:17:9e:69:53:17:d9:71:5c:e2:11:2b:fc:bb:
                    c1:9f:39:a4:b2:19:51:98:25:14:61:36:d9:a5:3a:
                    db:b5:5f:8e:63:91:d8:81:f0:67:3f:82:6c:68:36:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:65:0D:19:AC:BE:8D:D1:BC:99:11:6B:95:85:74:A8:54:F9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/c07d9477-bd5d-310a-b557-4b0b4a46506e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl

            X509v3 Authority Key Identifier:
                keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:c5:ad:5d:0e:a7:b6:23:cf:d6:c2:29:da:d2:9e:0c:b5:
         bc:c4:92:02:96:c2:92:e9:96:5e:c6:24:cb:bd:3f:3f:d1:08:
         66:e3:d8:7d:6e:2e:bd:8d:64:b2:05:c1:9b:b0:9e:5a:5f:c7:
         97:15:ca:22:df:fa:ac:68:69:18:de:69:95:4b:5b:26:3c:bc:
         a8:cc:99:cc:1a:f5:3e:9e:15:06:18:8b:b8:64:fa:f0:14:df:
         c5:71:03:c1:b3:66:e1:c2:4b:3d:c9:2b:05:6b:b2:27:25:7e:
         1a:ae:f0:6a:b9:99:80:64:46:9c:15:6c:d1:89:78:57:b2:88:
         06:2c:05:5b:58:73:8c:d0:d4:92:c1:3a:9a:64:36:96:ad:30:
         3f:c0:dd:ac:bf:46:cc:96:2a:66:1f:2b:a8:26:9c:5f:6a:73:
         8f:ea:ca:00:ae:12:f1:24:8a:6a:a3:bc:1b:89:c5:14:e3:4b:
         c8:d0:d3:ff:ae:89:4c:90:71:08:9c:99:75:df:83:3b:b9:fc:
         98:27:22:b6:9d:dd:21:6d:9a:da:2b:43:f5:2b:df:ec:e5:8c:
         e4:01:bd:c6:ca:fe:cf:c8:08:65:5a:ae:c4:03:25:e0:2e:b0:
         72:8a:f6:39:2f:d3:da:86:a9:75:12:c3:93:52:ab:94:1c:bf:
         7e:f2:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:20 2026 by rpki-client