Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
File:                     3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa (raw, json)
Hash identifier:          36XyE2SKfqco4xVz9K8+SViVbtr5DOP+e66t4R8H0E4=
Subject key identifier:   26:DD:F6:74:AD:55:C5:BE:CF:FC:D5:6F:C1:14:3D:0D:28:3C:F0:D2
Certificate issuer:       /CN=53482e94-c66d-458c-842b-1143e3693e88
Certificate serial:       010D0C9F4328584D3DFFAE3992202C820BDC1780
Authority key identifier: 88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     54393
IP address blocks:        192.70.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ae:39:92:20:2c:82:0b:dc:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53482e94-c66d-458c-842b-1143e3693e88
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b2c0ce52-9520-4604-8129-f342bc5ca99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:8a:2e:44:fc:24:cb:44:a1:7d:a9:0e:e7:
                    5f:76:a9:be:a5:00:78:59:bf:f0:84:7d:fb:ed:a0:
                    a7:e3:10:de:dc:53:35:f9:26:5f:07:40:79:9d:5e:
                    72:60:03:99:ff:3b:76:a3:64:65:a7:e2:33:48:1d:
                    62:0e:5e:3e:c3:2f:1e:bb:8c:65:eb:80:d2:22:a7:
                    d1:0b:f7:19:4e:bb:83:33:fd:fc:de:47:12:1f:82:
                    82:7c:24:08:f9:22:3a:31:4c:3e:39:52:3e:74:cf:
                    cd:c8:26:65:a8:9a:01:91:95:0c:bc:3f:4e:a8:98:
                    21:df:d5:e3:e9:ed:33:2d:a3:96:2f:ac:27:3a:3e:
                    8c:d0:3f:72:f3:7b:f3:14:f4:1d:e4:94:af:4a:7e:
                    cf:0b:92:d3:ab:03:6f:b7:b1:0a:17:cb:3b:ff:95:
                    0a:7a:ff:48:ec:f7:57:26:af:fe:87:79:c3:86:17:
                    cc:3f:40:9c:f4:38:00:99:fe:76:7b:94:fa:d8:cf:
                    d0:1c:fd:43:35:b8:10:72:82:ae:a5:f7:48:01:f7:
                    c2:b1:e0:83:55:3f:35:b2:a3:59:b3:db:0b:a3:da:
                    1b:88:c9:7c:8b:fd:1a:f3:0d:24:bb:fd:39:df:50:
                    34:bb:8e:f1:bd:f5:90:91:e3:d2:78:02:1b:68:45:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:F6:74:AD:55:C5:BE:CF:FC:D5:6F:C1:14:3D:0D:28:3C:F0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl

            X509v3 Authority Key Identifier:
                keyid:88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:99:a0:f2:56:a9:79:3c:01:4b:39:7b:5d:07:71:be:4f:9d:
         b5:9b:6a:99:ab:85:55:e8:5f:ed:e6:c0:17:27:8f:46:fa:85:
         7a:7a:a9:d1:1e:30:20:27:49:19:de:74:26:7e:a6:38:a3:a8:
         f0:9e:28:bc:4a:cb:9e:80:09:4a:9f:ec:0c:da:a7:e5:a6:70:
         97:d5:27:d7:dd:96:86:0b:ca:66:3f:a9:37:2b:b4:f3:f8:f6:
         15:2d:f1:3b:78:b1:9f:95:5f:c4:1a:f0:61:1b:3e:d6:9e:a4:
         c6:eb:9c:3f:99:ef:f5:39:85:cf:d5:34:1b:57:ca:4d:40:d8:
         f6:68:38:51:ad:ad:56:94:c1:2c:59:5c:c4:5a:b6:73:3c:7a:
         d3:b4:d4:48:01:cf:0f:d2:61:73:80:c2:90:54:e0:06:67:1d:
         62:34:66:b7:8e:07:f9:b9:86:61:c0:38:5d:73:ea:36:d3:8f:
         8e:35:5d:d7:d9:b1:fd:15:97:96:d9:c4:df:da:be:d5:15:b9:
         82:9e:0b:5e:ed:02:a7:64:0e:b6:5d:8f:4f:81:04:7e:05:db:
         e1:67:28:9b:14:60:dd:fc:b7:6f:eb:b3:5e:1b:a6:cc:25:05:
         65:19:a4:cc:e6:a9:6b:7d:4f:1a:08:ec:97:b3:0f:cf:4e:18:
         cf:f4:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:07 2026 by rpki-client