Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/74931a3f-5109-30bc-9f0a-108edcd61858.roa
File:                     74931a3f-5109-30bc-9f0a-108edcd61858.roa (raw, json)
Hash identifier:          V7musUaeb7I/2UXn81XYOp+vZ1xG3r3MePlVQp0Py3A=
Subject key identifier:   0F:E4:45:0C:56:2D:E6:C3:77:8E:D0:E4:F1:5C:58:3D:39:7C:25:81
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C8046F4D1C3D3A9CC9B69A380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/74931a3f-5109-30bc-9f0a-108edcd61858.roa
Signing time:             Mon 12 Jan 2026 14:00:40 +0000
ROA not before:           Mon 12 Jan 2026 14:00:40 +0000
ROA not after:            Sun 12 Apr 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        192.119.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:80:46:f4:d1:c3:d3:a9:cc:9b:69:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 12 14:00:40 2026 GMT
            Not After : Apr 12 13:00:40 2026 GMT
        Subject: CN=5b3647b5-f372-4b29-b142-d22f8579bef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:08:98:65:1f:a3:ee:08:8c:b5:30:50:b0:
                    fc:a0:37:a0:f9:13:2a:d7:f1:d7:e4:d1:7e:93:f7:
                    47:03:1a:32:ca:cf:ee:30:41:d1:3f:8d:46:34:46:
                    cd:25:11:09:cd:80:6e:03:a7:f3:9e:ba:6e:d9:7a:
                    09:46:f9:46:4c:c2:a5:1a:11:99:b8:e4:8f:01:bf:
                    43:24:cf:47:6b:6b:83:56:ef:1a:67:9e:4b:04:3b:
                    09:7a:88:72:66:3b:60:1c:9b:2f:64:bf:52:24:de:
                    d4:56:3e:dd:c9:ae:55:8c:fb:0a:2d:6d:b8:a6:3c:
                    ef:3a:1e:51:1b:da:8c:1b:98:e1:14:2e:68:95:a6:
                    10:74:7e:fe:35:dd:f0:50:bc:27:c0:36:d8:87:7a:
                    1b:d0:d7:e7:f7:eb:4e:6a:79:f8:15:e3:42:59:00:
                    39:70:7f:02:33:57:f3:33:d6:f5:77:80:fd:35:1b:
                    ef:56:f4:62:8c:fd:3e:7d:cb:46:c1:8e:f9:c4:d0:
                    94:03:d4:8c:fd:0d:9f:32:5a:94:91:d3:d1:29:33:
                    5f:ae:f5:a0:0d:ea:73:1d:84:dd:0e:0f:7f:a1:3e:
                    f1:81:ad:7b:7c:57:e2:b8:79:22:bb:14:56:bf:68:
                    21:be:e8:b2:ef:1b:18:86:72:7e:a8:c6:c1:e0:76:
                    8a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:45:0C:56:2D:E6:C3:77:8E:D0:E4:F1:5C:58:3D:39:7C:25:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/74931a3f-5109-30bc-9f0a-108edcd61858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:15:25:e5:0a:ad:cf:ab:9a:ce:c7:c7:69:45:72:69:2b:
         69:80:4b:d6:ef:a9:17:db:f1:0e:63:85:96:d4:3a:2d:3a:95:
         33:18:eb:90:b4:f5:fe:f6:c3:3e:8a:0f:7d:92:08:59:66:f8:
         98:f5:88:91:22:72:16:3a:cc:62:ef:ff:1c:90:9a:56:68:ed:
         0b:4e:24:d3:c7:ac:24:51:32:21:b6:d2:66:f6:a5:13:67:d4:
         e0:6d:aa:b2:4c:14:42:9e:5c:e4:2d:9b:0a:96:57:37:7c:71:
         13:6b:fb:b9:ae:33:7e:12:2b:16:3a:e0:96:f0:ba:6e:64:9c:
         7a:14:0a:7c:c4:0b:d6:de:f7:2d:da:e2:f5:64:e7:60:47:99:
         e6:3a:6f:12:20:62:78:93:f9:fc:da:ce:ba:2f:48:e9:06:6e:
         0d:d7:7c:32:37:d6:4b:4a:4c:3d:97:46:8b:b4:42:f3:22:f1:
         a2:57:e1:14:21:0f:80:ea:d6:cf:c1:d3:d7:f8:1a:61:9b:08:
         48:05:96:de:9e:11:c8:8f:69:8d:a8:31:9c:95:7d:4f:5a:e9:
         32:29:d4:dc:f2:04:a7:aa:e9:c4:9e:34:ff:86:6c:8e:dc:46:
         6c:ef:a0:94:bb:7a:db:67:6f:27:bf:98:4e:6a:9c:34:29:8e:
         20:8b:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:08 2026 by rpki-client