Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa
File:                     519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa (raw, json)
Hash identifier:          7/HNgePemNu3XF9Sg9e4X0sWprgS+wBkURg9ZrMoTiY=
Subject key identifier:   6B:09:63:0F:D3:B9:5C:4A:C4:65:74:29:59:65:B1:DE:08:A8:8D:61
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584CC611FF6D32C8BF70E89CB980
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     397018
IP address blocks:        192.160.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:ff:6d:32:c8:bf:70:e8:9c:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=e553cf7c-3c31-47f0-aa7a-dde986499a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:00:72:28:85:f8:4f:6e:d3:58:0a:5f:f5:
                    37:25:8d:6a:6b:5a:22:73:34:e7:a1:7c:69:9c:38:
                    7a:96:bc:85:17:c3:cf:a0:8c:bb:c0:8b:63:25:44:
                    11:18:bd:a6:41:45:d6:83:69:ac:c9:1b:61:be:5f:
                    77:4e:f5:59:6f:cc:d2:1a:54:d7:93:65:ed:19:c1:
                    b0:3e:51:37:f3:3a:14:3a:71:ff:34:09:9c:0a:1f:
                    5a:d3:e4:c9:39:84:8e:8e:83:fa:83:88:33:65:cc:
                    94:60:6c:e9:e7:b2:e7:61:4b:06:94:fb:61:26:6c:
                    a8:da:64:91:bf:a4:c5:4c:b1:b3:8c:4b:ba:89:5c:
                    a9:f2:7e:56:f4:af:c9:c2:86:64:c7:b1:d2:ae:45:
                    cb:05:b3:f1:07:85:64:3e:32:27:96:f6:07:16:3d:
                    7c:69:25:fd:82:75:63:8a:f4:8d:6c:09:45:ec:23:
                    e8:c6:c4:47:d1:c1:29:8a:e1:15:41:99:89:59:ed:
                    f4:2a:e6:31:ea:8b:c3:d2:ab:e3:f2:bd:48:2e:36:
                    87:17:c7:f3:84:d7:f3:04:3d:5f:8d:51:e8:42:52:
                    d2:60:b5:bd:5b:3d:0f:2d:2e:15:b2:8f:5f:c3:f3:
                    87:5c:5d:f0:00:cc:b1:28:db:0e:98:e5:2b:15:3d:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:09:63:0F:D3:B9:5C:4A:C4:65:74:29:59:65:B1:DE:08:A8:8D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/519b6be7-3e83-31d4-94e5-db9a1fbd4e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d3:5e:93:09:79:fc:c0:d5:5b:e1:73:3c:39:3a:0f:cb:87:
         c7:ed:01:d9:ef:c9:b0:95:8c:ad:9b:6f:3b:7b:bc:55:1d:ad:
         27:79:88:67:3a:5c:e4:d2:7c:de:f4:e2:d6:56:aa:d1:43:15:
         ed:1b:54:b2:0a:a8:bf:69:24:8e:bb:23:72:07:57:73:f0:18:
         9c:99:96:e3:33:ac:1c:79:a2:cf:48:c1:44:e5:71:7b:d0:e8:
         69:9e:5f:bb:97:0c:b7:6f:ec:3b:ca:ae:59:a1:ac:aa:fb:ca:
         a1:9f:28:c7:8f:05:93:73:4c:b7:da:57:03:45:9d:ce:fe:9d:
         98:25:aa:ec:b1:ac:ff:50:88:60:20:e2:c0:93:8c:ea:6e:ce:
         e3:35:af:37:74:14:00:ed:0b:1d:95:19:13:1f:1c:55:af:ed:
         f2:49:c0:bd:53:6e:4c:86:c1:37:03:39:ea:36:8f:4c:e4:f5:
         3d:d8:78:b4:0c:bb:54:89:0d:06:0d:08:38:b3:b3:67:04:84:
         60:82:53:76:42:6e:f4:83:8c:98:c1:d0:f2:ec:64:d8:bb:56:
         fe:70:7e:c9:40:9c:82:0d:75:7c:eb:83:39:09:78:72:1d:b2:
         b4:88:16:db:0c:0d:dd:48:8f:65:96:56:f3:b6:76:13:0b:b7:
         a9:40:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:36 2026 by rpki-client