Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa
File:                     932701dc-5170-37c8-b804-8055128c2742.roa (raw, json)
Hash identifier:          UVCFF0+WKLJ9wKQNXQp0UTrXZ8BHpQlgqMU4o1tUZEI=
Subject key identifier:   B6:2D:AA:CA:FD:99:CB:DE:06:7E:A0:8B:67:65:94:EC:57:DE:6D:6A
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584D91C015ECA8F68AAF8F293040
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     36692
IP address blocks:        198.41.12.0/23 maxlen: 23
                          198.41.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:15:ec:a8:f6:8a:af:8f:29:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=82310c32-1679-44a1-a517-b701b247c3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:f9:14:b5:f4:3f:72:78:14:02:e7:ee:e8:
                    d3:a6:c6:f8:d5:da:92:32:30:32:99:5b:ea:ff:74:
                    59:37:e1:8e:9c:32:57:48:34:1c:2e:27:d8:61:a8:
                    cd:3c:d7:5f:73:ea:08:81:f9:d3:c3:d5:1a:bd:1d:
                    ea:96:bb:ef:7a:d5:2a:df:16:58:5a:48:48:7a:a0:
                    c3:c6:bf:fa:37:31:eb:a5:86:b0:ca:e5:e1:05:08:
                    8e:86:ec:64:e4:c1:41:8f:5a:26:18:93:03:e5:6d:
                    10:51:f7:9c:38:b5:55:ee:db:f8:72:24:a9:bf:d4:
                    59:14:41:04:e7:c2:66:c0:a7:b0:c8:e4:52:c1:64:
                    b1:3e:29:80:65:39:34:5f:55:18:64:8c:3f:f6:03:
                    76:a7:a3:e8:ec:fd:6b:12:da:d3:dc:2d:53:f7:cb:
                    45:85:ce:c4:5c:4e:7b:9f:b5:04:7d:64:e0:13:c1:
                    70:c1:c8:aa:0b:25:97:d0:e2:89:b6:4b:99:4c:a5:
                    bd:73:b2:ac:4d:6e:3f:2a:63:5d:01:26:91:2f:83:
                    8f:ec:fa:50:df:e7:dc:2a:d3:ea:09:65:bb:d8:0b:
                    d9:08:28:56:b4:28:65:5b:e3:60:ab:0e:6c:9b:01:
                    6a:9b:15:c6:86:6f:95:c9:83:58:2e:15:df:d9:57:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:AA:CA:FD:99:CB:DE:06:7E:A0:8B:67:65:94:EC:57:DE:6D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/932701dc-5170-37c8-b804-8055128c2742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:14:bc:6d:69:de:80:43:04:19:5a:ce:e7:b1:46:d2:83:46:
         66:e5:6d:e3:a2:99:b0:00:86:17:9c:8f:5d:02:23:1e:fd:28:
         30:80:53:b4:ae:64:bb:00:9a:ba:8e:7d:2f:fe:25:14:66:8b:
         10:4d:31:3f:8f:21:a3:e7:78:cc:5c:5d:49:23:c2:12:49:2f:
         a6:bf:63:40:46:f6:88:b3:96:70:e7:52:e1:18:20:59:2d:fc:
         32:b7:e3:9c:dd:b0:5e:f7:20:97:ea:00:10:68:56:fe:eb:01:
         b9:00:90:be:34:04:9f:06:b7:bd:e4:f2:ce:c2:f7:68:d1:cf:
         20:0f:2c:55:2f:b7:bb:db:f6:8a:2e:42:64:c9:79:30:54:6a:
         02:10:2f:d8:a9:89:27:f0:6d:74:a2:0e:ae:39:fe:f3:02:5e:
         b5:8a:6a:9b:04:38:ae:b0:d0:9b:46:b6:30:6a:a8:82:06:70:
         0b:ed:c0:ee:06:2f:13:03:f8:65:82:9d:cd:a9:e2:50:be:79:
         e8:21:f5:a0:c1:f9:78:49:d8:05:27:23:c8:a7:a0:b6:70:8c:
         b6:4f:b8:2b:52:d7:80:32:19:3c:88:c4:56:83:01:73:e0:25:
         83:2d:14:b2:66:e9:94:16:8c:28:20:ff:86:dd:76:20:77:4f:
         80:86:2c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:26 2026 by rpki-client