Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/70748068-af76-3155-bc9e-23d606ad14cc.roa
File:                     70748068-af76-3155-bc9e-23d606ad14cc.roa (raw, json)
Hash identifier:          RW0L3d0Qwqe+H6+GP4+JimvT3JbGF0IL8Pa44ceAtkg=
Subject key identifier:   A5:B4:C6:31:ED:5C:FD:E3:66:20:DE:6C:46:18:BE:C0:BB:3E:44:BF
Certificate issuer:       /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
Certificate serial:       010D0C9F4328584E0005E8048FA3A3BB1C3B5760
Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/70748068-af76-3155-bc9e-23d606ad14cc.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     29848
IP address blocks:        192.190.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e8:04:8f:a3:a3:bb:1c:3b:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=84010fa7-949c-436e-bad6-258c0fce8989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:99:8f:db:fe:32:a2:f9:2e:21:36:0a:95:
                    b7:0b:e5:55:4f:d5:2b:84:8f:cb:20:77:46:02:cc:
                    f3:f2:09:c8:41:a8:02:69:7d:ea:8d:1b:d9:2a:9e:
                    37:cb:89:77:fe:00:f0:64:82:b1:cc:c9:92:16:37:
                    18:73:d1:56:a7:fd:c0:19:61:0a:26:0f:62:a0:66:
                    0b:66:59:a0:63:be:51:9f:4f:6d:76:16:e4:ad:ce:
                    e3:b5:b0:e5:8b:76:0a:78:99:c8:8b:29:af:c3:0b:
                    4d:85:31:c7:40:e8:28:08:16:2f:cf:41:1c:0b:07:
                    9c:84:5f:51:33:9e:b3:0e:76:d3:9c:13:e8:26:7c:
                    8d:99:b3:13:6e:98:ce:5f:9b:2d:e7:a5:b1:93:13:
                    fa:d4:c1:70:95:ab:63:b2:c7:4b:dc:f0:b2:6e:1b:
                    4e:4f:33:9a:f2:f4:41:b0:6c:a1:51:4e:ff:5f:d5:
                    ac:a7:db:62:e4:58:35:bf:38:38:54:cc:c3:a2:1a:
                    e0:00:0d:54:ef:6a:5a:da:e4:f7:e4:83:df:e2:91:
                    ce:fa:50:89:cc:fe:a2:bd:d6:d1:fe:08:f6:59:da:
                    34:4d:77:fa:9d:2e:56:c0:e7:a9:0d:49:aa:ae:fa:
                    23:af:cf:70:7a:8d:d8:d8:01:e8:ac:59:07:59:eb:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B4:C6:31:ED:5C:FD:E3:66:20:DE:6C:46:18:BE:C0:BB:3E:44:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/70748068-af76-3155-bc9e-23d606ad14cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl

            X509v3 Authority Key Identifier:
                keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:9c:b0:18:69:cc:d4:93:27:92:54:1c:98:b8:c9:3c:aa:
         da:92:83:38:de:ec:21:0f:96:81:97:a6:07:ca:e4:fe:24:d7:
         c6:dd:e7:10:98:af:5a:69:14:36:b3:36:b3:63:d1:9b:68:82:
         fe:11:d0:0e:f5:25:96:cd:e4:ea:d2:2e:b7:48:a9:6a:b9:1b:
         2a:ba:ec:22:7f:d5:78:ae:70:12:00:ed:13:fb:db:54:30:9d:
         6c:6c:91:4e:48:3f:40:4c:70:6e:8f:03:39:7a:8d:43:c8:9d:
         59:db:42:0e:ba:33:80:2e:c7:7e:11:f6:cc:99:1f:7f:a2:15:
         42:fd:59:af:a1:7e:5b:67:11:a8:96:b8:69:20:a7:94:61:53:
         d3:9e:e4:84:36:6a:20:cd:0d:88:9d:ad:d6:7e:71:61:14:c3:
         3b:e5:4a:d1:b1:7f:19:1a:a4:80:08:d7:72:b5:fd:e9:d2:b5:
         ef:9a:f4:99:35:0a:03:eb:e0:59:3d:b0:8a:e4:6b:92:95:99:
         e7:03:46:b2:8a:24:cf:05:9b:1a:40:d1:2f:69:6b:1f:2a:6d:
         87:af:32:a7:43:a3:ab:65:17:60:65:7f:c2:ae:2c:bf:3d:a2:
         ad:0e:de:42:cc:9f:8f:e4:2e:8a:46:58:ea:1a:11:ba:de:9b:
         88:78:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:57:38 2026 by rpki-client