Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa
File:                     57a291ec-9029-3bb0-b770-6419cd621358.roa (raw, json)
Hash identifier:          kd0Kw+AnqPv1SdHIKLkznXK4YcCYrNicHmOlVUeGeWU=
Subject key identifier:   21:28:43:17:17:1D:57:A4:97:BD:B8:81:E5:8C:D2:B8:A9:CA:ED:A3
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584E3A2F28237BAC12324C530D00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     5050
IP address blocks:        192.231.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:28:23:7b:ac:12:32:4c:53:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=5dc353d2-bc51-4f64-95a1-039ed95f24a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:40:a4:a7:e9:79:a0:6c:31:37:17:b5:4f:
                    86:29:af:41:65:66:fc:19:a7:80:40:bd:a8:6d:29:
                    8c:78:ab:fa:dc:e8:bb:e1:f9:2c:83:22:a7:1e:ff:
                    66:29:e6:19:33:96:38:1e:00:03:68:23:c1:86:6d:
                    f2:8d:41:4c:28:75:6f:c6:34:bf:29:2f:90:47:50:
                    14:7f:8b:65:a9:09:3a:4c:02:78:3e:7b:09:6e:5a:
                    58:65:c0:70:8f:45:fe:9f:c9:34:ed:ef:16:97:dd:
                    2a:53:81:fb:10:2d:4a:74:8c:07:3b:dd:a7:53:f1:
                    d2:70:4a:85:65:3e:c5:bb:3e:55:a6:0c:30:d4:79:
                    79:39:0e:b1:0a:30:3c:4f:da:f2:22:8a:13:95:c8:
                    34:de:71:79:a1:db:00:c6:bc:60:22:f3:2e:87:6e:
                    cf:3c:45:aa:fd:d1:03:27:9a:cc:c8:03:de:93:c6:
                    db:b9:7a:7d:f9:da:db:8e:aa:33:65:51:f2:1b:6b:
                    d9:20:36:34:26:89:68:da:b9:b5:bb:0e:38:6a:25:
                    2b:4b:82:d4:19:2a:ea:c7:7d:24:01:0c:0a:11:c4:
                    ab:1f:22:d1:c3:d8:71:18:d9:5a:fb:5d:f1:a2:fd:
                    98:d0:f6:d3:f7:d1:93:de:1c:5c:0f:24:b3:5a:c9:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:28:43:17:17:1D:57:A4:97:BD:B8:81:E5:8C:D2:B8:A9:CA:ED:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/57a291ec-9029-3bb0-b770-6419cd621358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0f:c3:6b:86:ef:15:dc:35:a1:cb:41:be:7c:1e:66:f8:f1:
         71:23:08:b0:11:a0:b0:59:b5:62:5b:36:5c:f7:98:60:98:e3:
         fb:16:c8:eb:c8:e6:83:f4:12:02:b9:f9:fb:b8:27:27:86:0b:
         89:7d:98:8a:d1:38:ad:5d:09:03:9a:a7:5d:95:e5:a3:09:37:
         af:24:5e:cd:5f:dc:62:1f:d9:21:90:2d:26:f2:d1:88:1f:08:
         70:c2:b3:37:25:68:3c:25:23:6c:85:45:62:0f:8a:89:0c:be:
         ef:bf:5c:83:ad:81:78:e4:02:f1:ba:63:98:63:0c:9c:73:86:
         84:32:bb:57:22:38:fe:c7:c8:90:d6:ff:3e:96:06:f9:bb:c8:
         0c:98:eb:fe:72:dd:53:a6:bf:1a:fc:03:79:08:9e:16:5a:ce:
         34:3a:94:36:a1:c2:e6:35:63:74:a8:bc:57:28:be:00:42:f5:
         1f:41:50:86:62:da:21:49:0d:e9:bf:72:8a:50:e9:e1:6a:13:
         ff:38:30:99:1c:91:1f:65:cc:80:97:6e:b4:9f:2b:71:44:58:
         8f:7c:44:76:5a:62:fc:dc:e0:e9:c1:ca:36:43:20:0c:9a:0f:
         fb:a6:1f:4c:71:a9:b4:92:35:d1:cf:c0:0c:ea:d8:4e:db:35:
         c0:6a:f2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:37 2026 by rpki-client