Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d18c299e-8383-30ac-8c46-74f6fc4f8cb2.roa
File:                     d18c299e-8383-30ac-8c46-74f6fc4f8cb2.roa (raw, json)
Hash identifier:          sW9Y1mcPPiUEgXIU4C3FkWzFWQeMuI7KsRhySd6DFgg=
Subject key identifier:   94:AE:5E:B8:4D:4B:76:E1:BF:FC:3A:7D:DD:4F:78:EB:C6:77:DC:6F
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D7A05533E87E7CE13F9E24780
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d18c299e-8383-30ac-8c46-74f6fc4f8cb2.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        216.172.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:53:3e:87:e7:ce:13:f9:e2:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=9bb3c929-b664-4516-97ef-bb7a63637315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:5a:ff:39:77:31:33:29:25:66:57:fe:47:
                    f5:da:13:c0:77:88:3e:49:fd:d2:5a:ac:79:38:69:
                    28:18:c2:f0:96:30:75:ea:2d:6a:df:41:c7:fa:42:
                    7b:7a:2f:c5:5e:55:dc:7a:5c:ba:99:f0:d0:c1:7a:
                    8d:c6:26:3a:8a:dc:e4:54:e9:df:9c:66:84:32:74:
                    19:09:c7:25:8a:5d:bc:b5:4f:15:08:51:9f:b7:de:
                    43:d9:39:04:d0:71:f0:8d:59:cb:cb:01:aa:43:3c:
                    7a:9f:63:ab:9d:c5:66:71:2a:2e:db:c7:02:45:dc:
                    eb:15:33:58:7c:62:fa:20:f9:30:d9:ba:fa:88:81:
                    6c:f8:57:a8:0a:26:43:e7:13:a1:46:4a:60:0d:79:
                    cf:0f:b4:c6:b1:7e:37:e5:dc:1c:51:32:6f:8f:ce:
                    7e:21:90:4b:81:91:38:4a:ad:3d:7e:56:69:ca:d2:
                    7d:ae:36:23:33:b2:2d:eb:48:ff:37:f0:43:50:21:
                    bf:53:c8:f8:09:4c:2c:60:73:0e:7d:ec:b6:74:56:
                    1b:d3:ea:42:90:7f:8d:ff:0d:97:41:1a:a6:e8:cd:
                    41:8e:4d:57:d7:0e:7e:37:6d:92:c5:91:fc:64:bd:
                    30:f5:ef:43:7a:d7:e4:19:c2:47:81:75:e3:e3:36:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AE:5E:B8:4D:4B:76:E1:BF:FC:3A:7D:DD:4F:78:EB:C6:77:DC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d18c299e-8383-30ac-8c46-74f6fc4f8cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:90:61:76:07:b4:ad:04:db:16:7e:02:03:62:9e:2f:f8:72:
         bb:ba:91:12:58:88:9c:bd:be:54:05:92:c8:df:70:fc:2c:f4:
         3f:81:d6:25:cb:c8:aa:7f:3d:29:d8:35:5d:e0:65:d4:bf:b7:
         48:8a:08:55:10:e7:ef:1e:1e:3f:06:48:1b:c0:8e:58:8f:85:
         fe:16:aa:d9:05:d4:76:05:30:ac:ff:12:bb:b9:64:f7:81:f3:
         29:16:d0:2b:ac:e0:ed:f6:92:42:92:10:90:b5:6e:0d:af:e0:
         9f:80:d7:c7:e4:99:87:63:f7:2b:e0:16:33:38:30:a1:74:f2:
         c3:f2:d5:24:dc:c9:f2:86:5f:c6:6a:26:d6:f8:d8:10:d7:fd:
         49:e7:fa:ef:8b:cc:5a:c6:5e:25:8b:b8:ea:79:8f:ce:df:20:
         61:65:90:8b:02:3f:d0:d3:c4:a8:90:00:af:1a:06:c9:dd:d3:
         68:68:05:53:96:c0:94:49:98:3e:1d:74:5d:4c:3e:4e:0b:3a:
         14:d9:42:3a:1a:6e:85:5c:51:5c:32:dd:fa:d0:f4:08:cc:7e:
         1c:88:0e:26:76:41:fc:05:65:b0:4b:d5:3a:8a:69:00:4b:59:
         eb:54:6b:27:6a:a8:ff:f5:27:25:ca:c9:57:6d:75:43:bb:d5:
         00:3a:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:25 2026 by rpki-client