Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa
File:                     c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa (raw, json)
Hash identifier:          3iqUHwu9GhbRqOYif6c6hirKK8CGTE/uhcZ1C862PRk=
Subject key identifier:   08:21:9A:6D:AA:FF:DF:36:E1:34:80:0F:51:51:B4:17:4C:B8:73:23
Certificate issuer:       /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8
Certificate serial:       010D0C9F4328584DAF102EB33356B9A91AD67310
Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     22223
IP address blocks:        192.190.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2e:b3:33:56:b9:a9:1a:d6:73:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=48fe7d12-0163-4dbf-bc26-18bd54613b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:c8:47:72:b1:5c:d7:f8:d3:30:7f:a7:0a:
                    68:aa:2d:7b:8e:53:50:85:fa:1a:67:2d:c8:33:ec:
                    33:fb:b8:15:85:e1:77:00:e1:d3:f3:26:ef:d5:71:
                    f7:05:fd:7f:cd:e7:11:7d:d1:a2:82:ba:7d:c8:8d:
                    88:3a:56:8d:6d:30:15:bf:44:6f:5a:16:ac:25:0b:
                    ef:58:02:e0:b3:d8:14:66:6e:40:bd:02:5c:95:3c:
                    80:a1:00:55:f9:35:3c:83:7e:07:6c:fc:d2:cf:b2:
                    e7:5a:c2:43:ea:f3:37:bf:a3:a1:a2:ba:f7:62:3b:
                    4d:79:74:c4:bd:52:2a:d3:ad:cc:c5:0e:ab:8f:20:
                    ac:6f:42:44:ea:05:17:5e:bc:ff:37:f3:1f:c6:fc:
                    9c:1f:4d:9b:db:f9:7b:e6:8b:81:43:60:b2:29:9b:
                    6e:c6:cf:c6:34:0b:4e:ef:3d:f1:b7:73:e1:76:04:
                    bd:fa:99:e8:9d:63:3a:f7:9c:7e:0c:0c:47:53:18:
                    38:01:8e:bd:69:e3:54:f0:0b:62:c6:80:ed:52:df:
                    56:34:86:dd:fd:2c:2e:ec:0d:c2:97:db:e4:b8:b0:
                    af:5b:95:1e:d4:d2:f2:d8:ac:8e:72:70:d4:3d:a3:
                    2f:eb:37:92:83:bb:a4:47:fb:66:2f:f1:cb:b0:43:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:21:9A:6D:AA:FF:DF:36:E1:34:80:0F:51:51:B4:17:4C:B8:73:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/c46ea3f5-3830-3ebc-9f66-c4557d46e7b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl

            X509v3 Authority Key Identifier:
                keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c8:91:4b:c2:e0:3c:d5:20:a7:5e:79:ba:a4:84:29:ee:1d:
         b9:a1:cf:88:a2:cf:1e:81:c2:8a:c5:b8:a5:a3:c5:2c:88:77:
         15:01:d6:45:5b:f8:fa:72:9e:82:54:83:eb:1d:eb:f7:57:bc:
         49:32:c0:69:01:6c:31:81:03:da:c1:21:56:60:ae:b5:3c:ad:
         61:61:c6:45:e9:f0:b3:28:59:c8:fc:ea:ad:4a:c5:bf:89:b4:
         db:20:22:8c:6c:28:f0:b1:49:c7:fc:1f:1a:8d:54:38:4b:02:
         a6:ec:72:27:ea:ae:f5:e3:3f:fe:c0:75:0d:09:ac:5b:38:15:
         f7:96:b7:eb:55:56:48:48:fc:48:f1:8d:c8:8a:0f:13:be:af:
         3d:27:7d:b1:57:f4:f1:6e:e3:d2:ec:fc:34:f3:f0:d7:99:43:
         dc:94:62:2a:ca:02:09:ae:1b:26:68:1d:8c:96:ac:39:b2:17:
         ef:30:1c:c1:da:01:b3:25:f3:62:f7:0c:1e:ce:05:13:32:2b:
         10:78:f5:d6:85:39:78:ff:f5:8e:c7:98:23:23:09:44:73:04:
         84:cd:be:6e:72:13:7a:92:11:61:eb:7e:35:0b:16:4e:73:7c:
         88:44:c1:e2:01:26:11:ed:f3:8c:7d:2d:9e:f0:b6:08:a9:25:
         78:f2:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:07 2026 by rpki-client