Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa
File:                     8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa (raw, json)
Hash identifier:          Cq6BTtrDT8fd2a7zWf2EZncMI6hzo9QewT28eQNashQ=
Subject key identifier:   2D:8E:43:EE:8B:F0:BE:8E:5E:F4:53:49:B6:8A:A0:0C:AA:AE:F7:27
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584D1B1A63B81CE954A0288FC580
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     21949
IP address blocks:        198.1.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:63:b8:1c:e9:54:a0:28:8f:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=df71e797-80d8-4874-b243-d733248a508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:72:9f:ea:74:8e:2c:87:ec:6a:dc:92:97:
                    12:4b:ce:cb:3b:bf:5f:87:42:95:d6:85:c4:ca:1c:
                    1d:98:e4:c8:65:13:e2:27:60:64:87:1b:fd:ba:b6:
                    c9:a6:f0:c9:d9:ec:c8:5e:38:a3:27:4d:e0:fa:28:
                    3e:e3:c7:50:36:f2:41:a9:f9:76:27:90:1b:b6:b2:
                    a1:05:68:26:9f:af:9e:39:8a:f8:ba:cd:f1:7c:91:
                    c6:c8:b3:37:5b:55:14:17:1a:91:58:8f:83:17:ef:
                    1e:a5:f8:3b:93:3e:8d:a5:c4:08:9d:30:ba:f4:d4:
                    d0:d1:ea:d0:3a:f6:a6:d8:51:76:a5:18:30:f4:3e:
                    0b:67:bd:ab:f0:2b:b5:c7:d3:9a:52:9b:57:42:5b:
                    37:5a:40:82:03:4f:39:c6:20:fb:c4:ed:4a:29:5b:
                    60:33:94:8b:ad:48:cb:7d:fc:c0:89:c8:ad:ea:5a:
                    8b:f9:d3:93:32:fc:31:60:9d:0f:3b:d1:90:90:62:
                    75:46:4b:8f:d6:cc:48:9f:a6:a2:84:83:7f:c2:6f:
                    6f:c5:05:e0:b7:2c:80:28:72:72:23:4d:4c:8f:bb:
                    cf:70:d7:13:c0:30:76:90:a6:a2:4f:27:6e:c4:54:
                    bc:74:d2:c5:8c:58:56:86:ed:1b:33:61:ef:8b:51:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8E:43:EE:8B:F0:BE:8E:5E:F4:53:49:B6:8A:A0:0C:AA:AE:F7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8c2fb4e4-b30a-3653-9a68-aae31f9bfbd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:58:54:d8:4e:27:48:2e:81:2e:2c:38:87:74:ed:e9:de:
         19:f5:b6:5f:5b:d0:77:fc:b2:9b:66:62:c0:d0:2e:0e:68:4e:
         10:28:4a:7b:02:cc:5a:d6:da:64:df:ba:b2:c5:84:8c:93:b3:
         d6:d4:5f:1d:12:76:88:7b:42:10:1e:9a:1d:38:70:bc:5d:e4:
         fe:55:35:1c:4a:a9:08:cc:b1:c7:10:9d:7f:f4:72:a4:65:bc:
         32:30:c8:11:3b:05:59:7d:7e:40:47:9d:f8:f5:66:e9:25:e7:
         45:63:45:e9:58:da:0b:64:3b:db:41:8a:c0:9f:5d:88:cc:e9:
         89:43:bf:be:36:c4:2b:f0:07:ef:13:cb:2f:af:04:15:21:85:
         3e:90:dc:f9:17:71:46:c0:5d:82:e7:49:6a:2b:22:ab:81:b2:
         20:e2:c2:95:d4:68:11:f2:d9:c7:9f:ae:0a:4b:f3:f1:df:3a:
         66:86:5c:2b:27:bf:ce:eb:19:02:92:03:8b:98:a4:5e:01:36:
         13:79:79:f3:99:5d:3e:54:07:96:13:d6:cf:9f:15:65:ff:2b:
         dc:d0:b4:c0:0b:91:0a:a1:4c:da:96:c0:f1:9f:c9:67:33:ca:
         33:d7:1a:04:0e:3d:ad:d8:23:6a:19:dd:8e:b1:a0:33:1a:10:
         29:fa:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:30 2026 by rpki-client