Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/f4df4166-2125-380c-b787-0a5024d4fde5.roa
File:                     f4df4166-2125-380c-b787-0a5024d4fde5.roa (raw, json)
Hash identifier:          x+IAeEKZ3I+oQfJ6wjDUYjrVXLLErN3J1HBTMjy2pTw=
Subject key identifier:   0D:8B:49:07:31:1D:54:16:72:57:8F:06:3A:A9:03:31:DD:53:D3:E3
Certificate issuer:       /CN=48e0215a-ab12-4255-b012-bfeb2c6ff823
Certificate serial:       010D0C9F4328584D44FA3361BC65F13789ACF690
Authority key identifier: C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/f4df4166-2125-380c-b787-0a5024d4fde5.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     26213
IP address blocks:        192.158.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:33:61:bc:65:f1:37:89:ac:f6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e0215a-ab12-4255-b012-bfeb2c6ff823
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=4d1706f0-6ea5-4042-b8e0-b4fb4caf23c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:a0:17:80:a0:fc:40:5f:de:ec:df:63:bd:
                    9f:22:41:05:9e:99:31:9d:30:89:06:3b:5b:58:da:
                    f5:8d:a9:8c:03:dd:cf:99:3c:0e:3f:cf:60:73:ba:
                    4d:f1:8c:ae:b9:16:08:02:5b:b7:44:28:07:44:97:
                    83:71:3a:30:21:82:b1:8c:6c:6f:06:33:a9:3d:a3:
                    72:6a:58:4e:9a:59:9c:06:83:37:93:7e:bb:66:98:
                    9c:19:cf:2f:7f:84:59:65:9b:ff:b8:1d:08:52:52:
                    1b:a1:07:d0:21:d2:5a:a1:8d:18:bc:8f:e3:5c:2e:
                    3b:8c:80:62:04:b8:d4:62:6e:46:f5:79:16:a1:f5:
                    cc:a0:98:06:90:b6:98:0c:93:b8:ad:2c:7a:b8:f8:
                    88:a0:4c:1d:d8:d3:fb:56:21:3e:c4:07:70:12:5d:
                    90:ac:8f:e4:76:51:a2:40:d4:98:e3:15:d7:86:85:
                    cf:11:ad:1e:ce:1e:c6:88:ac:7b:88:ed:5b:73:ee:
                    84:eb:6a:83:6b:6c:13:53:13:d5:0d:fd:f7:08:a6:
                    60:76:dd:e0:1d:cb:af:be:39:e1:af:76:2d:cc:c1:
                    dd:52:1f:28:3c:82:da:02:05:fc:ba:dd:21:1b:9e:
                    89:98:10:ed:3a:73:1f:73:56:ec:58:28:2c:92:e8:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:49:07:31:1D:54:16:72:57:8F:06:3A:A9:03:31:DD:53:D3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/f4df4166-2125-380c-b787-0a5024d4fde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823/48e0215a-ab12-4255-b012-bfeb2c6ff823.crl

            X509v3 Authority Key Identifier:
                keyid:C6:BF:FE:B7:39:11:5C:69:3C:65:C7:C5:8F:97:D6:35:65:4B:CC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/48e0215a-ab12-4255-b012-bfeb2c6ff823.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:40:60:e7:eb:d4:24:d3:f5:90:23:ba:e7:e1:53:1a:49:44:
         60:5e:25:20:b7:3b:30:cb:93:b9:1d:c7:13:2b:bd:43:0d:51:
         25:df:52:58:91:71:dd:85:99:75:e5:34:a0:d6:a5:8a:99:24:
         49:64:f1:58:c4:63:31:6f:e5:95:d5:d1:c9:53:9d:83:76:e8:
         8d:15:fc:c2:b8:58:9b:9b:8c:79:00:51:80:fb:11:72:71:8d:
         af:48:e1:5a:9a:23:97:77:f6:41:24:93:f8:a9:3e:aa:c2:e1:
         8d:fc:da:5e:49:04:28:06:1b:30:44:bf:4e:34:54:15:48:1e:
         d2:90:1b:72:84:10:83:73:8e:d2:42:32:91:a5:0d:c1:c2:86:
         d0:bd:ec:df:13:67:54:a1:a0:22:e6:bf:1f:5f:6f:a5:2f:4b:
         57:e9:c6:02:a4:b5:a2:ca:8e:a8:4b:83:ae:87:da:5f:c6:fc:
         37:d3:37:7c:96:3a:3a:c4:73:61:d1:76:64:6a:d1:62:8d:27:
         53:40:1c:1a:ce:f1:7f:17:fb:e2:79:3a:2f:f1:83:41:1a:d7:
         c0:ee:ec:0b:e6:4f:4f:b5:66:77:5a:d6:35:35:b6:fa:c8:05:
         3e:62:1c:82:71:8f:48:c4:80:0f:90:8a:00:b1:dd:a7:10:1c:
         8b:69:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:21 2026 by rpki-client