Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad20bf8d-9dd5-3ddf-b454-2619ab4842f0.roa
File:                     ad20bf8d-9dd5-3ddf-b454-2619ab4842f0.roa (raw, json)
Hash identifier:          NCiMAuPgIn5XbBvSJBcIL9skuXrkdxv1h3m97Hvetf4=
Subject key identifier:   2C:85:D8:D5:C7:4F:FD:19:91:97:6F:A8:28:03:AC:4A:61:DD:31:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB8F2E8BF1BB7935B99680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad20bf8d-9dd5-3ddf-b454-2619ab4842f0.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        192.62.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:8f:2e:8b:f1:bb:79:35:b9:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=302e4fa2-3ede-4c7c-b970-fb4a4e04e9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:4a:9f:08:87:d2:32:c6:b8:65:aa:07:23:
                    5c:73:86:8c:68:69:87:22:d3:89:dd:ed:6c:d3:fb:
                    5c:21:05:a5:47:e4:a3:35:ee:bc:e4:ba:e1:11:20:
                    2c:9b:3c:1d:67:84:a7:91:14:ad:35:e1:ba:9d:85:
                    80:37:04:3c:17:51:0b:6f:dc:90:70:3b:5e:3b:2e:
                    ed:96:c2:56:ec:c8:b9:38:b2:ce:90:d7:fa:8b:f0:
                    86:da:96:d8:80:cd:c8:53:8b:bd:e1:93:d0:fd:9a:
                    49:30:40:9e:d0:3c:39:66:83:5e:1e:ff:ea:fa:1f:
                    c3:44:2f:6f:20:60:26:87:c9:8f:ec:83:a2:c4:15:
                    0b:e8:dd:80:f3:c3:b7:a9:d8:6d:ae:51:a2:68:e3:
                    7e:b9:da:11:98:22:f6:50:dd:f8:d2:3f:73:6d:84:
                    4b:45:d8:19:9e:ee:99:06:ee:ec:ac:18:a6:ef:67:
                    f1:ce:d8:e8:bd:b8:97:1c:65:ec:5e:fa:c3:37:d7:
                    b0:9a:31:70:0d:fd:c4:33:ec:27:0c:49:5e:bc:d4:
                    62:22:64:89:d4:4a:2b:04:13:2d:ea:fa:1b:3d:0d:
                    ce:e0:f9:9a:b4:34:44:48:63:0c:85:07:dc:08:66:
                    a9:f6:90:12:04:b6:a9:01:45:8f:b6:6e:1b:db:dc:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:D8:D5:C7:4F:FD:19:91:97:6F:A8:28:03:AC:4A:61:DD:31:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ad20bf8d-9dd5-3ddf-b454-2619ab4842f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:6f:15:8f:92:0a:db:03:0d:3a:38:18:dd:63:d2:c7:54:
         52:e6:72:ef:9c:70:6c:a3:0d:bc:58:48:6a:85:a8:7e:f2:4b:
         52:d0:01:34:aa:30:24:16:3d:02:0a:b2:6f:a4:6a:89:8e:e5:
         43:91:60:2e:68:10:da:47:58:67:5a:27:ff:63:1c:f2:63:d1:
         2e:ad:78:bf:41:ff:b5:9e:32:a2:f0:cb:09:3b:13:92:67:b4:
         8b:13:13:cc:e6:ea:c8:46:d8:e4:c2:db:1a:f9:d1:f4:ed:21:
         ec:91:31:96:60:d9:a9:d6:c8:6d:61:a0:dd:27:c5:42:e4:f2:
         43:4d:5d:0b:af:a7:e1:d2:3c:a4:d3:21:f5:38:05:96:90:50:
         a6:94:d4:f0:83:b1:44:32:3b:35:2d:f4:3a:93:43:20:63:f9:
         de:ec:4b:03:30:15:94:58:13:c0:45:0d:3b:22:0a:42:61:c9:
         df:df:be:fa:ee:44:45:7b:36:5d:49:5d:eb:ac:44:a2:f8:ae:
         3e:7a:d2:1f:c4:14:8c:5c:ba:b6:cb:9a:6e:c6:62:24:f4:91:
         11:fc:7c:56:4a:06:0e:ca:fd:2a:f9:3e:67:6a:14:74:b0:72:
         5c:6f:6e:44:8d:8f:c4:b8:8a:42:e9:fa:1e:37:56:8a:69:17:
         45:a1:df:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:50 2026 by rpki-client