Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/153bf49a-783c-3f15-9c52-0455c1137612.roa
File:                     153bf49a-783c-3f15-9c52-0455c1137612.roa (raw, json)
Hash identifier:          dgWgmIolfYsbdUt+RL4pQdGVY65Bk898O6356qF7aog=
Subject key identifier:   C3:93:25:4A:23:C5:09:EC:A8:49:5B:B8:3B:17:76:B7:8F:F9:B3:F5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C8046C7EB98B544D7D5C4B980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/153bf49a-783c-3f15-9c52-0455c1137612.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        192.119.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:c7:eb:98:b5:44:d7:d5:c4:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=20c7bc2e-bec8-4339-aa5e-76c29227fd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:00:ce:89:a1:0b:0e:97:e0:0a:27:31:58:
                    bd:3c:4c:b6:96:be:40:9b:7c:74:17:7b:a8:06:8a:
                    68:25:5a:ac:31:69:65:33:06:11:b7:99:ca:71:17:
                    51:12:71:9e:e4:92:ad:a4:9b:2a:e0:fb:39:19:14:
                    1c:3b:e7:0b:9f:bd:7c:4b:f1:3d:21:b9:c7:86:1f:
                    3a:eb:fb:c2:2a:31:3e:7f:dc:40:8e:38:d1:65:a2:
                    df:93:56:85:4c:c1:85:25:11:d0:9e:3b:f1:80:1d:
                    82:09:8e:16:8c:6a:f3:76:37:ed:c8:8a:92:06:5d:
                    71:8b:88:64:80:df:e7:0b:77:3c:46:3c:cc:c8:8b:
                    89:ef:0a:50:eb:d2:b9:69:67:1a:c0:9d:4a:03:7e:
                    62:1d:23:25:9c:20:a5:8f:b4:bc:0b:56:45:0b:b3:
                    f8:f9:82:c6:4d:63:f4:a3:7b:dd:05:28:62:70:74:
                    42:ab:41:a9:bb:12:37:64:27:24:23:4c:a8:82:cd:
                    34:3d:c7:76:07:af:0b:1e:6e:13:ec:26:94:84:45:
                    06:7d:fe:4c:ae:61:16:2c:cb:28:0a:d9:c7:c9:80:
                    4c:a9:00:64:7b:82:3a:cd:4b:3d:fc:15:ec:46:96:
                    00:39:71:58:e6:7b:ab:ce:68:42:09:b8:9c:40:11:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:25:4A:23:C5:09:EC:A8:49:5B:B8:3B:17:76:B7:8F:F9:B3:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/153bf49a-783c-3f15-9c52-0455c1137612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:31:40:82:68:f3:0e:a2:12:6f:42:65:b8:9c:10:c8:c9:d5:
         ba:67:60:5e:d9:59:21:a8:bc:2f:8a:72:01:f0:0d:03:c0:1b:
         4b:68:3a:de:e8:86:f5:fb:41:9f:0b:04:f4:a0:e1:14:f3:60:
         cd:03:56:90:61:24:10:f8:7f:d5:f0:0a:f6:a5:7e:f9:78:b8:
         0f:ee:39:a8:76:f9:ee:fd:97:dd:dd:c5:e3:76:02:17:ee:a5:
         d1:25:27:e1:73:f4:43:8f:94:6c:0e:69:65:0f:8e:0e:58:51:
         18:dc:c4:92:c8:dd:1f:9e:bd:a6:22:34:b0:7c:4b:c2:25:f1:
         be:ef:3e:26:61:36:25:bb:c2:a9:f8:a7:b0:e1:c9:7a:4d:5f:
         b7:dd:17:ed:79:5f:f3:48:c8:b2:48:ce:3e:5a:20:c8:d2:82:
         c0:ba:4a:f2:f5:da:68:87:2d:c1:fd:2c:a1:b1:b6:4a:48:2c:
         5a:46:f9:3f:00:cf:8e:bd:6c:55:4e:39:ca:ea:4a:47:67:a6:
         7b:3b:af:af:c8:0f:f5:1e:d6:5b:29:33:3e:6e:0e:e4:54:e8:
         06:1f:40:93:2d:37:d8:15:3d:12:b0:06:2f:12:88:06:e2:b4:
         8b:f6:6a:86:6e:ed:ee:58:1b:90:f8:dc:27:eb:94:13:68:98:
         d9:8d:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:29 2026 by rpki-client