Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/93d5c845-6382-3da3-ba5b-a89b4547f349.roa
File:                     93d5c845-6382-3da3-ba5b-a89b4547f349.roa (raw, json)
Hash identifier:          +72/iSwku7/GS5Z0jA9YU0kIAGwGB8AUMLyVC+wDwDk=
Subject key identifier:   B1:19:DD:73:E7:7D:74:59:BF:83:87:67:3A:FD:02:1C:2C:B5:36:BD
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584D5E1A6CB3C56AEF28E1F1F7F0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/93d5c845-6382-3da3-ba5b-a89b4547f349.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     5466
IP address blocks:        192.56.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6c:b3:c5:6a:ef:28:e1:f1:f7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=531bafcb-6428-44cb-9a0a-3801b586ee92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:c8:a0:1e:48:27:38:32:06:98:c2:46:75:
                    75:18:3b:60:f3:bb:07:76:d1:a4:7e:96:72:89:c0:
                    c2:71:42:26:7c:4a:ea:f0:e0:42:c1:3c:ed:84:25:
                    b5:00:20:bc:e9:de:2a:35:4d:08:fe:15:97:eb:a6:
                    3d:3d:03:29:7a:de:72:4d:a0:cb:69:be:06:d7:dd:
                    f9:2b:50:aa:85:43:18:2f:51:4e:81:af:23:fe:44:
                    d5:3c:60:be:d5:65:b1:06:8e:34:82:3f:69:94:f0:
                    31:db:9e:f1:98:18:d1:1a:91:62:f0:ed:07:26:57:
                    0b:ad:60:a0:67:8d:7f:95:53:4e:9d:4a:37:ff:58:
                    fa:2c:01:6c:2a:e0:e7:60:3d:cd:be:47:7d:cb:fc:
                    ba:cd:cd:5e:0c:de:32:cf:d7:82:55:e9:ba:a4:0c:
                    16:f2:9c:d1:65:db:1f:16:9a:f7:ec:ef:6a:2a:6f:
                    a7:d8:b3:eb:0b:cb:6f:61:e1:bc:e5:44:74:66:30:
                    0a:22:31:66:65:db:bc:1f:f7:8f:11:32:61:0d:d9:
                    7b:02:e7:50:99:d2:a1:d8:95:32:36:4d:9c:91:d2:
                    aa:b5:14:84:d0:9c:5a:04:40:ef:a1:28:70:64:7a:
                    c4:c4:ee:2d:3e:15:9d:b9:78:7e:4a:f5:eb:19:03:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:19:DD:73:E7:7D:74:59:BF:83:87:67:3A:FD:02:1C:2C:B5:36:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/93d5c845-6382-3da3-ba5b-a89b4547f349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.56.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:bc:2c:04:0c:a3:eb:aa:c5:8f:6f:df:7e:b4:81:49:24:
         f6:57:dc:d5:14:87:af:23:a6:a9:00:9f:18:11:70:37:e2:0f:
         0e:a4:71:cd:b0:b1:e7:d4:bf:96:ea:43:d4:7d:e8:49:1a:cc:
         14:0d:fb:28:df:6b:a8:c2:c6:25:11:aa:93:47:9e:34:b2:97:
         97:bd:4e:c1:1b:43:fb:c6:12:83:cc:df:79:25:ca:03:9e:cd:
         07:f4:2c:79:6e:10:d9:be:25:b0:3f:0a:a5:ff:9c:68:76:83:
         ea:98:9a:28:ea:bb:9d:24:d9:24:4b:4a:ad:a0:15:1b:8c:10:
         f0:1e:94:5f:ac:b4:84:67:bc:17:f8:60:e7:e1:73:7e:ba:db:
         d8:f7:a0:5c:4c:e1:e7:de:00:f9:f7:e8:d1:a8:20:92:1f:0b:
         d0:53:fa:91:2e:e3:2f:f9:f5:19:db:1a:8d:e7:a5:1f:42:c1:
         22:36:7e:2f:c5:42:df:dd:28:78:c5:74:df:8c:c4:de:31:84:
         68:f3:5d:ce:6f:29:f5:6f:87:88:7b:98:4d:66:ba:c0:85:5b:
         a5:3e:74:b8:e6:f0:f6:b2:03:ad:52:43:af:19:7f:58:2f:00:
         d2:63:9d:c5:b7:10:de:7e:98:83:22:ec:dd:73:a4:b6:ff:73:
         9d:80:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:59 2026 by rpki-client