Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/de61a027-f38d-3973-b508-b0013dbf6399.roa
File:                     de61a027-f38d-3973-b508-b0013dbf6399.roa (raw, json)
Hash identifier:          H54L0lyo6R4Wj4dWmSA6h9vKSuYtQLtNSJtXHk0cFlg=
Subject key identifier:   DE:54:C9:AA:54:48:7A:CD:31:11:0D:7D:5C:BA:50:65:86:F5:0B:3A
Certificate issuer:       /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial:       010D0C9F4328584D8EF555BE9267A3682FC98A00
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/de61a027-f38d-3973-b508-b0013dbf6399.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     53831
IP address blocks:        192.187.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:55:be:92:67:a3:68:2f:c9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b76b4fce-5c93-4c01-816e-b4a5f5925199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9c:d4:36:86:55:9f:53:1b:0b:74:f3:fd:ee:
                    87:a6:9b:e6:8e:03:48:e9:bd:63:1d:15:03:f4:87:
                    a6:a1:7d:32:a6:88:36:e7:36:e7:cd:11:65:7c:ae:
                    fe:41:09:eb:af:f1:a6:81:4f:cd:05:5b:6c:a1:0a:
                    f1:7b:25:16:3a:a6:c5:b9:ca:93:6e:1f:35:18:ab:
                    9f:4e:10:7e:d6:72:c9:f3:de:22:b0:c4:3b:ac:e9:
                    be:6e:75:e4:04:60:6a:1c:8c:c2:7d:35:97:d5:66:
                    0c:17:73:e0:52:04:f2:06:f6:49:22:53:f8:10:33:
                    76:6c:01:9f:5e:9d:e0:86:ba:59:ff:ad:6e:e9:31:
                    dc:19:85:d4:87:c1:b8:70:c0:ed:19:d0:c2:1d:18:
                    dd:a6:68:d6:a2:6c:5d:1b:9d:40:c8:ce:4f:1c:ae:
                    d2:13:24:34:9e:03:9b:ba:09:f2:04:a2:a8:30:2c:
                    41:86:ec:2e:a8:e7:87:46:1d:51:7e:21:f5:72:b5:
                    f1:e0:59:35:ec:f8:fb:67:e6:67:27:5b:c1:f8:0f:
                    61:4a:d2:7b:ac:42:67:df:69:01:bd:8c:b4:db:88:
                    a8:ac:8b:4d:8e:35:15:55:af:76:4d:94:2b:cc:b5:
                    a1:42:3b:1e:a3:b6:df:c2:69:14:de:85:28:03:3c:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:C9:AA:54:48:7A:CD:31:11:0D:7D:5C:BA:50:65:86:F5:0B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/de61a027-f38d-3973-b508-b0013dbf6399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl

            X509v3 Authority Key Identifier:
                keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:46:45:99:53:b5:49:60:f7:d6:cc:c1:16:7a:b8:03:1c:f4:
         1e:1e:a7:07:5d:85:e4:79:f9:cc:f6:1d:a6:ca:c4:04:6d:5e:
         3b:02:92:99:1a:4e:95:42:b6:a1:91:be:fb:19:3b:c5:a0:b2:
         e6:65:ff:b6:04:90:fd:52:62:84:53:93:b9:16:7b:ba:ac:65:
         1e:78:59:63:8b:9b:1b:dd:47:da:36:ff:19:eb:5d:d1:0d:5f:
         96:fc:1b:60:8a:18:91:70:28:06:32:79:ed:89:7d:8e:1c:44:
         95:fd:7c:5d:d6:24:41:e5:6e:d4:2a:a9:5a:e5:3d:67:b5:d0:
         4c:ec:e3:f7:de:c1:20:be:38:8b:c3:94:81:3a:c1:e7:cd:35:
         b4:06:c6:ed:88:0c:29:8e:39:25:04:0a:f5:11:cc:b3:af:1a:
         ba:26:fb:a3:f8:2d:db:0e:c7:e5:6d:61:67:a5:df:89:94:2a:
         1a:fa:20:9d:d3:19:22:2f:e8:56:2d:dc:d9:ef:f0:6a:d6:80:
         62:14:c6:c8:3f:c5:f1:77:c5:42:c2:76:7e:5e:cd:63:09:c6:
         e2:f1:e3:0f:51:d3:1a:02:68:0c:06:7a:ba:4f:16:a1:1f:3c:
         d8:9b:f4:7e:85:27:ad:12:a2:de:c9:41:8f:13:6d:7d:d8:71:
         a0:b2:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:21:26 2026 by rpki-client