Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa
File:                     58c33897-e305-33fe-b338-248e0ebe23a5.roa (raw, json)
Hash identifier:          EEUgYfh3++F2iZhda69mCXRyysRP8i9Wj386Bpmfjmg=
Subject key identifier:   F7:CA:EF:83:B0:BE:C4:CB:55:79:CD:C3:5D:4E:0C:4E:9A:CE:BD:43
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D60E512A4280AEAD5AF8C45C4
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        192.119.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:12:a4:28:0a:ea:d5:af:8c:45:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=a93d2367-c165-42b2-9442-9dc589c58226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8e:f0:69:a2:29:14:27:45:43:71:e9:22:36:
                    0f:37:a8:67:8c:18:fd:60:da:c7:b9:4c:04:35:79:
                    c2:3b:b1:45:17:30:b5:c9:a5:36:e0:d0:32:9f:fc:
                    9a:14:e1:7f:0d:eb:7d:22:7e:6a:d3:06:4f:79:e6:
                    5d:ac:a0:8a:7e:59:92:52:f7:cb:9c:d3:0f:fe:d8:
                    3f:f8:26:26:7c:71:72:b1:af:51:73:97:9b:27:ff:
                    86:01:76:94:21:7a:74:74:96:de:ec:c1:60:8c:eb:
                    13:af:9e:c5:47:1d:48:ba:70:2f:fe:85:2f:e5:76:
                    96:32:bb:06:53:bb:ad:ab:7a:24:af:92:e0:0a:76:
                    7a:f1:6e:65:ec:39:27:f7:f1:de:a5:c5:df:85:1e:
                    dc:93:10:2e:dd:ec:bd:f0:6c:e3:89:c3:b2:aa:45:
                    f4:22:14:e5:1b:10:b5:d7:4b:c7:f1:25:67:f9:84:
                    c0:9e:ab:6c:87:62:38:e5:3c:92:ed:be:ff:b7:91:
                    b4:92:74:b7:4c:ca:09:fa:a7:34:3b:47:a8:eb:06:
                    2b:71:d1:89:53:8f:15:dc:03:f8:5c:07:02:bf:47:
                    cb:9d:e1:86:1d:58:4d:f9:11:66:af:ab:6e:36:af:
                    40:4b:12:4a:7e:eb:92:d0:39:ec:6d:8e:1c:87:49:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:EF:83:B0:BE:C4:CB:55:79:CD:C3:5D:4E:0C:4E:9A:CE:BD:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c33897-e305-33fe-b338-248e0ebe23a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:76:f5:cc:93:83:87:7d:9a:34:cd:fa:ca:3b:c9:20:57:
         7b:fe:ed:cd:49:e3:5d:51:d1:2d:b3:9b:e6:73:c2:05:f2:d7:
         28:ce:c0:7c:00:8a:dc:e8:01:1f:52:04:a5:94:b9:36:63:24:
         f5:ac:9c:d9:06:21:a4:ac:3d:d3:fb:3f:80:c2:a6:50:e3:86:
         75:89:af:6b:20:0c:00:94:d7:2f:0a:de:e6:a5:6d:a8:0d:f6:
         f6:fb:81:05:9d:76:5d:06:ac:9e:74:fa:c0:4c:d5:ea:47:d0:
         99:58:d1:0d:91:a9:0a:b1:7c:b2:cb:12:23:bd:8a:4a:b1:6f:
         a9:62:c2:49:19:e0:b7:03:89:fa:39:71:f2:d0:fc:38:43:72:
         93:b2:7f:e5:79:81:4d:fb:b4:46:13:79:c1:2b:34:19:8c:27:
         2e:06:a4:18:9b:f5:93:c9:14:c0:ad:01:a6:53:26:b6:58:9a:
         67:8f:e8:a9:ba:ec:64:44:db:36:31:aa:4c:91:42:09:e6:65:
         17:55:d9:64:92:f4:35:8d:94:32:62:97:f4:3b:37:0a:32:b9:
         08:64:32:31:53:27:5f:c6:88:80:18:62:e9:e9:71:b5:f1:4e:
         7d:fa:02:05:60:99:d6:e7:f7:34:1b:0a:f2:86:ee:a4:e6:c8:
         1e:18:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:01 2026 by rpki-client