Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/381fc4db-0934-3cad-8f9e-5e977125773b.roa
File:                     381fc4db-0934-3cad-8f9e-5e977125773b.roa (raw, json)
Hash identifier:          QYuAnMyLqncnRHxWK6y4I3eEKDRuw+Jt+4WUXLgmamk=
Subject key identifier:   EA:97:8D:E1:4C:57:8C:C3:6C:0C:04:28:F2:06:BA:76:28:1D:25:0F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CAACA73FB44F38CA8ECD40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/381fc4db-0934-3cad-8f9e-5e977125773b.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16787
IP address blocks:        192.219.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:ac:a7:3f:b4:4f:38:ca:8e:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=5a006d44-d95a-421d-9d84-0ae033f3cf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:d6:d8:b1:41:f2:ad:3b:4e:c9:4b:a3:31:
                    9b:c9:e2:4a:e3:49:19:f0:5a:ca:63:a5:c4:28:4a:
                    53:c0:0f:0e:fa:60:e9:91:77:0c:41:16:42:22:5b:
                    b5:b9:8b:83:b2:76:18:0a:e2:c2:84:d5:fe:09:f1:
                    cc:a3:dc:8c:79:3f:3d:5a:69:d9:dc:26:a1:55:e0:
                    f0:ac:8e:3d:7c:1b:7e:68:c6:86:da:f1:97:df:e7:
                    5f:1c:88:4e:0d:2d:50:d7:33:cd:57:f1:bd:43:d3:
                    9e:ec:3f:07:c5:64:09:d1:b6:09:f0:16:36:02:6c:
                    37:f3:28:65:d7:a8:53:12:1b:3a:9d:14:f9:bd:1e:
                    e9:fb:bd:42:8b:6f:a3:bd:d1:7c:ad:8d:09:08:4c:
                    17:66:cb:77:b9:d9:ce:15:8a:fc:db:a8:9c:43:51:
                    4d:84:ef:40:57:4d:b6:86:b5:16:a2:08:96:e7:dd:
                    22:dc:c3:75:60:4c:63:a7:18:ea:f4:e3:77:83:91:
                    e4:01:24:20:b8:3e:f0:9a:08:35:5e:94:53:27:df:
                    6a:49:44:2f:a1:d4:b8:25:9c:5c:90:10:ea:e2:bf:
                    6b:31:cd:93:49:62:e9:60:87:28:a0:30:e8:86:4b:
                    29:c0:32:d0:5b:2d:83:9e:26:90:77:bc:c2:56:a7:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:8D:E1:4C:57:8C:C3:6C:0C:04:28:F2:06:BA:76:28:1D:25:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/381fc4db-0934-3cad-8f9e-5e977125773b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:85:39:2d:28:c9:3a:cd:24:b0:50:6c:63:15:4b:d0:47:91:
         36:7e:e9:4e:80:48:e3:94:19:e1:7d:85:fd:01:80:5b:66:28:
         cb:92:3b:cc:3e:19:1e:86:da:21:91:fb:eb:cf:c5:4e:88:98:
         4d:83:b3:aa:d9:9a:41:92:4a:82:c5:d6:0f:d9:f3:b9:19:24:
         4d:83:39:56:54:d7:db:f5:0d:fc:4f:d6:ae:39:72:45:4f:a9:
         c4:13:96:11:3f:0f:9b:da:7b:34:fd:d4:18:96:8d:62:31:6d:
         98:db:13:75:11:ac:54:1d:4a:cc:83:9b:5f:20:94:57:be:dc:
         dd:9f:48:78:9e:2b:5a:56:d5:09:38:86:3c:91:32:f8:b1:30:
         88:9f:9f:55:39:a0:2b:ae:40:fd:dd:f2:b0:3f:88:49:66:1e:
         8f:6d:5c:32:08:c2:38:27:04:53:6f:93:8f:ba:f0:fb:6c:2f:
         f2:7e:d5:5e:90:3a:84:e6:36:77:e9:0c:19:f2:b7:c5:68:18:
         5a:f9:c3:6c:0f:b2:8a:62:b6:a6:47:66:bd:25:4c:07:be:5d:
         02:e0:2b:c8:93:55:3c:c2:c2:13:c7:5c:ed:9a:3a:f5:ca:d6:
         59:ea:1b:9a:74:07:78:d8:d5:56:39:de:e3:d3:fc:a1:e5:e8:
         6d:ff:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:15 2026 by rpki-client