Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/792a72da-b3d2-346d-a76d-67bf0d739e81.roa
File:                     792a72da-b3d2-346d-a76d-67bf0d739e81.roa (raw, json)
Hash identifier:          NFzWwNMQUnYF9cMyydO9QL9aGfmvBSXZ+8NftzHTJnw=
Subject key identifier:   D9:63:6E:F2:16:2A:B3:25:5E:37:31:05:12:BF:81:0D:45:13:4D:00
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584C602BE543926BCE29950FA400
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/792a72da-b3d2-346d-a76d-67bf0d739e81.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     14436
IP address blocks:        206.225.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:e5:43:92:6b:ce:29:95:0f:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=524ce444-83e5-4bc9-8ac3-d17515de23b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:1f:e6:99:1e:c6:1e:cc:c4:32:94:12:ab:
                    26:39:91:a2:23:d1:ad:ef:e5:5b:fa:07:b9:17:b9:
                    4c:19:58:10:16:90:68:85:42:67:fc:b5:89:9d:59:
                    fd:95:1f:aa:71:52:e0:e3:ea:3b:c4:09:2d:aa:a8:
                    2d:99:df:14:bd:c1:ae:68:79:08:00:ba:6e:91:95:
                    a3:21:ee:58:2d:85:29:71:b1:70:83:77:b0:5a:2b:
                    4d:fa:4c:f5:07:fc:39:87:f1:22:d5:32:a7:e9:9d:
                    37:4b:c7:d1:25:3e:36:99:c4:7d:02:62:de:9a:0b:
                    ad:0b:05:0a:37:12:ca:ad:09:48:62:88:85:3b:e2:
                    7c:ee:9d:e3:c7:55:9d:0a:91:03:c1:28:c0:14:40:
                    80:f0:27:e8:99:89:19:89:aa:42:27:ad:6f:59:0b:
                    d1:57:ac:96:b5:88:36:50:3c:b6:05:b4:7c:36:6f:
                    3a:c2:1f:70:0c:46:a8:3c:f6:a7:68:33:9c:15:4f:
                    dd:f8:87:2f:f2:c7:7b:15:d4:8d:6e:1c:f6:2b:d7:
                    d6:da:97:53:7e:58:10:a7:20:e6:7e:bb:6d:8d:71:
                    3b:c8:21:95:43:46:ce:d2:d9:f4:10:69:d2:34:98:
                    b6:ba:2a:d7:86:c8:14:ca:71:f2:aa:ee:74:d1:53:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:63:6E:F2:16:2A:B3:25:5E:37:31:05:12:BF:81:0D:45:13:4D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/792a72da-b3d2-346d-a76d-67bf0d739e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:3c:10:5d:39:81:7a:55:72:e1:8e:9c:ca:f6:3c:e9:d2:
         78:88:88:aa:c1:5b:b3:07:97:be:5f:5d:5d:cc:2b:de:b2:c7:
         1d:0d:14:36:97:ad:04:cb:90:60:4b:88:d8:f1:96:6c:6b:52:
         09:f7:cd:81:ed:bf:8b:de:2e:dc:2d:4c:78:d6:53:29:ec:40:
         4b:67:69:03:11:7e:9f:19:a7:0f:45:62:22:05:34:48:70:6b:
         29:f8:7a:a8:ba:4a:75:b5:34:9a:5b:4b:67:1b:61:db:25:c8:
         4d:99:4d:be:78:c4:d6:26:02:e9:48:49:5a:bb:00:55:32:4b:
         5b:66:1f:ea:fc:2f:c5:1a:33:b1:1f:79:a2:0e:65:b9:82:88:
         67:4d:05:d1:5b:d8:14:7c:c6:c8:f4:66:be:40:7c:99:47:fe:
         d4:07:80:54:b1:e2:43:37:72:ff:93:45:17:94:c2:b9:aa:6e:
         06:c7:89:ec:7a:93:4a:b4:fe:e9:6a:88:3e:1f:94:4d:28:8e:
         2a:e0:d6:3f:49:c0:a5:13:b7:8a:6a:c8:ae:f6:a6:a9:17:ac:
         5a:f5:93:22:1b:d1:43:42:d0:ce:19:3a:50:b2:a2:74:b9:f2:
         af:fb:3f:b6:b0:ac:7b:95:ea:7a:f4:0f:9f:0f:08:e8:24:93:
         43:08:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:06 2026 by rpki-client