Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00/0fdfac34-2fc2-31dd-b09b-c72fce6ec61f.roa
File:                     0fdfac34-2fc2-31dd-b09b-c72fce6ec61f.roa (raw, json)
Hash identifier:          IoXC/Gu2WkjV5m0zizLSgaP3242uOfBKoO3ovT31XlI=
Subject key identifier:   75:AC:3B:53:23:09:C7:F0:EA:4E:88:FB:F3:E2:E1:B7:3F:E3:2E:32
Certificate issuer:       /CN=573d76da-0c7b-43c1-96d6-0728653fda00
Certificate serial:       010D0C9F4328584D253D5F720C877A4B9CFA9280
Authority key identifier: F2:0A:9C:62:81:5F:E5:22:DF:F6:82:F2:72:14:2B:35:96:0F:F6:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00/0fdfac34-2fc2-31dd-b09b-c72fce6ec61f.roa
Signing time:             Thu 12 Mar 2026 16:10:09 +0000
ROA not before:           Thu 12 Mar 2026 16:10:09 +0000
ROA not after:            Wed 10 Jun 2026 16:10:09 +0000
asID:                     53288
IP address blocks:        192.81.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00/573d76da-0c7b-43c1-96d6-0728653fda00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00/573d76da-0c7b-43c1-96d6-0728653fda00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:3d:5f:72:0c:87:7a:4b:9c:fa:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573d76da-0c7b-43c1-96d6-0728653fda00
        Validity
            Not Before: Mar 12 16:10:09 2026 GMT
            Not After : Jun 10 16:10:09 2026 GMT
        Subject: CN=b2984ae5-8f99-4584-823c-21e58b08160f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b0:5a:67:50:cd:8a:55:9c:47:9a:71:e5:ec:
                    2b:f2:27:b5:95:6e:f4:f4:fd:a1:30:c5:76:93:13:
                    f5:67:41:82:29:6b:6e:e0:c9:8c:c1:61:b8:31:48:
                    4b:bb:da:0f:9d:b9:8d:4d:e5:32:0b:2f:75:8f:1b:
                    e3:35:21:ef:23:fb:a4:ba:aa:29:8f:4f:5d:45:f5:
                    a3:71:0f:5c:ba:bf:af:83:d1:ad:7e:4a:74:be:f9:
                    89:86:39:c8:bf:a9:dc:7d:c4:d3:75:5e:ba:d5:a0:
                    f4:95:ba:21:ff:6d:1f:e8:0e:1f:0a:5b:5d:b3:3c:
                    0b:22:a6:ec:6f:c8:20:d5:63:58:51:0d:27:93:9c:
                    cf:41:6c:9f:dc:d7:eb:7c:08:2d:2a:d0:f5:9b:5f:
                    2a:d4:bd:68:28:99:cb:60:d2:d8:78:d7:c9:c9:02:
                    8f:1c:02:e7:e6:29:d3:dd:cd:e4:7f:87:69:48:83:
                    8c:72:ee:46:8c:5c:d1:47:7e:58:ea:64:d8:f7:f0:
                    5d:03:2b:4f:59:fe:8d:60:2f:eb:dc:26:5c:59:44:
                    bc:6a:2c:17:29:b8:b5:a7:63:4c:81:8d:c0:ea:c8:
                    33:67:58:15:55:0a:4a:f0:1b:ba:76:5e:01:eb:e3:
                    dc:8d:48:50:52:1b:2c:ac:a7:0d:a3:ea:55:4c:41:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:3B:53:23:09:C7:F0:EA:4E:88:FB:F3:E2:E1:B7:3F:E3:2E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00/0fdfac34-2fc2-31dd-b09b-c72fce6ec61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00/573d76da-0c7b-43c1-96d6-0728653fda00.crl

            X509v3 Authority Key Identifier:
                keyid:F2:0A:9C:62:81:5F:E5:22:DF:F6:82:F2:72:14:2B:35:96:0F:F6:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/573d76da-0c7b-43c1-96d6-0728653fda00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:0d:a7:28:1b:d5:14:d0:b4:1d:1a:2d:bf:5a:38:34:d4:
         a1:3b:bc:21:a7:a9:fe:4a:3d:83:d9:94:3f:5e:b7:d8:e0:00:
         08:a7:53:18:4b:38:29:d7:5a:c5:c6:0e:13:fa:f6:86:a2:ed:
         e0:73:81:20:b1:1c:5a:a5:fd:bb:1b:2e:16:eb:86:b8:dc:72:
         86:0d:9e:32:86:88:ca:0c:60:f0:bc:2f:ad:d4:84:5c:93:8a:
         7f:72:0f:b9:20:16:89:b5:56:6b:1a:21:0f:0e:62:6c:a3:57:
         83:63:25:f1:03:40:51:18:d2:de:04:17:43:b6:b7:d2:5f:67:
         0c:8b:15:96:57:73:b0:ae:2e:8b:46:d1:b7:ea:48:20:03:ec:
         e0:47:58:fd:7d:d7:de:93:bd:7d:a1:ca:c8:3c:44:9d:62:21:
         1f:cd:d7:cc:16:ce:98:79:eb:fa:c0:d0:1f:99:8a:45:df:64:
         2e:15:07:f6:0b:1a:34:1c:be:46:93:50:c3:11:69:38:a8:23:
         f6:11:e4:f5:2a:c3:55:ec:5b:62:e5:da:01:7a:45:4e:3e:55:
         f5:f8:28:cd:32:f7:ea:bb:aa:19:08:51:bf:e6:0f:76:c6:9c:
         d9:d2:64:83:40:6b:59:1c:f9:13:5f:0a:7f:a0:52:c6:e5:80:
         a3:08:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:45 2026 by rpki-client