Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/645eb0b3-7acc-3623-8925-9d501fddfb53.roa
File:                     645eb0b3-7acc-3623-8925-9d501fddfb53.roa (raw, json)
Hash identifier:          gZO9tbX8OhI95jpq6FS1CLKKbc/9gfgZyP80Yzn8UqE=
Subject key identifier:   75:77:79:92:93:63:B3:2B:92:07:C3:1F:F1:FE:A8:9D:F0:15:C8:77
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F4328584D4D5A745289946F7F40976580
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/645eb0b3-7acc-3623-8925-9d501fddfb53.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14496
IP address blocks:        192.6.143.0/24 maxlen: 24
                          192.25.88.0/22 maxlen: 24
                          192.25.109.0/24 maxlen: 24
                          192.25.114.0/24 maxlen: 24
                          192.25.125.0/24 maxlen: 24
                          192.25.149.0/24 maxlen: 24
                          192.25.169.0/24 maxlen: 24
                          192.25.218.0/24 maxlen: 24
                          192.25.230.0/24 maxlen: 24
                          192.25.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:74:52:89:94:6f:7f:40:97:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ec00af21-2c39-4c27-bcf5-e7ec8088d48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:24:e4:c3:27:4d:97:a9:cf:99:cc:e5:e3:
                    20:39:2b:8b:48:12:f8:6b:70:3b:92:f8:87:a2:d2:
                    3d:c8:00:cd:45:89:10:b0:5a:7d:f2:49:6d:75:cf:
                    13:cc:bf:9c:a4:93:e9:d5:0e:07:75:b5:8d:f0:dd:
                    5c:b3:64:2e:4b:ce:28:01:98:24:c1:ef:3a:53:f5:
                    c6:0e:53:76:b2:a4:cd:2e:fb:82:96:44:10:0d:4a:
                    7f:1e:94:72:c1:f6:0b:4b:fa:64:d3:46:a6:e7:7e:
                    a2:3c:20:ec:c6:bf:d3:20:8b:50:69:49:b3:d3:2e:
                    3f:19:19:5e:46:50:6a:3a:aa:18:5f:10:a3:11:4a:
                    e6:6d:99:00:9f:36:15:7d:3b:09:c8:c3:dc:10:3a:
                    b2:3f:5c:88:0a:7d:6e:80:1b:3b:90:50:5e:1f:b4:
                    11:32:f2:62:fc:26:01:83:71:b4:33:c8:da:03:60:
                    63:3f:3f:d6:00:c1:42:ee:13:80:a0:5a:71:df:ce:
                    70:36:89:cd:fa:11:f1:a5:6d:6b:48:65:69:ff:15:
                    34:c8:f4:19:e3:52:7d:d8:51:70:a9:a8:85:d2:96:
                    e8:35:22:dc:36:59:70:98:3d:39:34:f1:62:1e:8b:
                    29:bf:5d:b7:88:6a:c0:38:57:83:1b:1b:93:57:21:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:79:92:93:63:B3:2B:92:07:C3:1F:F1:FE:A8:9D:F0:15:C8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/645eb0b3-7acc-3623-8925-9d501fddfb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.143.0/24
                  192.25.88.0/22
                  192.25.109.0/24
                  192.25.114.0/24
                  192.25.125.0/24
                  192.25.149.0/24
                  192.25.169.0/24
                  192.25.218.0/24
                  192.25.230.0/24
                  192.25.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:93:36:6e:ed:a5:7e:e1:46:b0:dd:5e:8a:1e:53:fe:57:
         32:1e:bc:7f:af:13:e3:b4:de:6e:4f:0a:d6:d2:ec:39:8f:ad:
         a4:1e:16:b5:53:ce:ee:fd:f3:16:92:a4:4c:4f:b2:74:9f:e5:
         e4:e4:85:25:c4:1c:ef:9e:8a:59:b7:55:82:c8:c6:66:d7:f2:
         31:72:61:95:93:db:77:60:e0:81:0d:23:cd:24:9d:56:3c:c5:
         ba:f0:63:e4:4f:6f:d5:a5:37:d5:32:da:86:9c:aa:6c:be:3e:
         52:98:18:8e:21:d6:af:9f:c2:4f:03:ee:c9:a9:c4:32:68:06:
         75:8a:6f:7a:74:3b:b6:9c:d6:49:03:e7:2d:ef:c5:27:6e:8d:
         97:a6:a6:e2:29:34:aa:cc:e1:8c:cd:ba:c8:2c:ee:ae:28:98:
         f8:79:28:d7:17:1d:d8:c2:4b:0c:85:4c:af:5a:ba:47:4c:d4:
         95:18:44:0f:29:eb:d2:32:dd:e3:a2:59:e8:00:52:97:09:68:
         33:de:03:af:1c:63:68:6f:c0:ba:95:2e:7b:63:44:ae:09:fd:
         ea:86:6c:58:b1:77:c5:33:61:7b:2f:4c:1d:e1:06:7c:2f:30:
         69:de:4a:ab:e8:1a:9c:0f:ae:cd:c9:cc:10:16:ee:c6:99:f8:
         54:f1:b0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:20:23 2026 by rpki-client