Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/24d74c6e-03c2-3c08-9c35-f4b144615c76.roa
File:                     24d74c6e-03c2-3c08-9c35-f4b144615c76.roa (raw, json)
Hash identifier:          nRccK53qdAuI3iAst9o5ZRvmqXamu0EnvUC+PlDBu2Y=
Subject key identifier:   AF:E2:01:3F:58:B3:09:EB:40:41:F6:96:8E:B7:73:FE:5E:7F:44:BD
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D571FAA5B9C0FBE19037FCD00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/24d74c6e-03c2-3c08-9c35-f4b144615c76.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        192.185.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:aa:5b:9c:0f:be:19:03:7f:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=6e800bc3-6f9d-438b-b61a-ac96e00bff20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:63:46:cf:4e:28:2a:ad:87:b8:17:51:60:
                    66:86:53:02:d7:66:88:ec:e3:e5:0f:0c:52:8e:7d:
                    99:47:e4:e9:34:5a:2b:41:a6:e2:8c:ac:88:4e:e1:
                    d3:16:01:f9:52:15:4d:f6:f3:bf:f1:d6:0c:30:8e:
                    a1:c7:90:69:67:77:d5:6b:5c:47:e1:6d:e9:b5:da:
                    e1:ce:76:3d:76:bc:60:32:77:a5:87:4c:28:dd:3b:
                    44:b6:aa:d0:6f:c5:15:a4:dc:a4:5d:76:28:e2:c5:
                    a5:26:63:b0:17:6a:7b:39:2b:29:07:51:3b:c6:93:
                    13:71:cb:db:d7:73:28:2c:20:1e:95:50:bb:01:92:
                    99:17:68:f8:7b:1f:2a:60:a7:82:19:e1:f1:cd:e3:
                    4a:94:1d:e9:4d:a2:38:2e:4a:2e:72:82:05:09:34:
                    fe:ed:24:53:13:ae:a0:79:e4:db:6e:ff:6c:ae:38:
                    4a:a8:c8:aa:f4:36:cd:5c:71:28:b2:b7:39:0e:8d:
                    a8:87:13:b0:0b:c5:6b:80:4c:ba:37:0b:55:2a:b6:
                    ea:4b:e2:98:9e:ea:89:9e:19:f4:06:aa:60:25:84:
                    13:2f:5f:38:f9:85:31:c5:ff:43:b7:28:99:a0:ef:
                    7d:bf:f0:a2:c9:25:19:3f:1b:e5:c2:f0:2a:16:67:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:01:3F:58:B3:09:EB:40:41:F6:96:8E:B7:73:FE:5E:7F:44:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/24d74c6e-03c2-3c08-9c35-f4b144615c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:81:86:d7:69:e0:b2:c9:3d:6d:d5:bf:38:6f:a9:bc:d2:
         12:ad:d8:ec:61:49:13:fa:7d:f9:d1:44:b4:a1:ae:cc:69:c7:
         0f:fa:c1:4b:db:b6:58:ab:a4:23:e5:e2:9a:2f:bd:22:5f:0a:
         73:f6:32:69:e3:60:b5:41:2b:7e:1d:4d:a9:bd:c1:de:cd:f4:
         c8:df:85:75:4c:39:f3:8e:31:f7:a1:16:31:03:80:4b:56:79:
         69:23:4a:cb:45:e6:eb:b7:0a:a5:58:ca:60:73:e3:b7:a6:7a:
         8f:18:e5:61:66:50:18:75:33:3a:6e:ec:67:f6:40:7f:d2:4e:
         d3:0e:d1:a3:46:76:7e:46:75:07:a4:3b:4a:c9:c6:5e:50:94:
         58:0f:07:8f:bb:68:d8:34:05:3b:84:da:bf:08:5c:e5:f2:5f:
         cc:7e:ca:b0:a9:14:ca:39:12:cb:f8:24:57:73:69:31:2d:1d:
         a5:8d:83:9d:18:19:c6:a7:f5:11:db:f6:04:66:89:ed:1e:ad:
         93:11:98:c7:74:c9:0e:ab:09:51:16:94:49:d1:21:11:df:00:
         6d:cd:aa:c0:a4:f0:ea:94:49:37:72:d2:f1:09:d4:c5:c7:f2:
         68:e7:a1:1d:3e:1b:73:59:03:d0:74:79:69:55:a6:69:13:10:
         3d:b3:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:31 2026 by rpki-client