Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa
File:                     81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa (raw, json)
Hash identifier:          FdyZMNFJSXPxjIJLq0VO1MDA4sFxxT+af2fex10f6/U=
Subject key identifier:   3D:AA:E0:CE:72:9C:7B:E2:E7:09:13:A9:70:01:77:B6:B6:99:EB:02
Certificate issuer:       /CN=8594d3e0-32bb-4c5a-93c8-b52239cf17eb
Certificate serial:       010D0C9F4328584D55BA42B16E3B2B5B153535A0
Authority key identifier: 33:4D:5C:95:B0:F1:BE:5A:9E:96:A0:FD:B6:ED:CF:44:4B:22:B8:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     21732
IP address blocks:        192.225.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:42:b1:6e:3b:2b:5b:15:35:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8594d3e0-32bb-4c5a-93c8-b52239cf17eb
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=32e1f04e-8e3e-4bf3-8ab7-c347c8899482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:a3:b4:18:74:d8:5b:3e:23:a7:93:14:90:
                    7c:e9:7d:e8:a7:15:24:76:64:7c:97:13:12:33:c2:
                    e5:ef:6d:09:7b:8e:b9:c6:44:21:81:d2:f1:32:4d:
                    4d:ef:f0:3b:63:a6:9c:0a:36:69:d6:8d:c4:d9:8f:
                    a9:0e:4f:72:88:d5:e4:80:2a:24:60:62:50:66:5a:
                    e4:63:3f:c9:3f:ae:c2:a3:65:73:26:eb:18:30:49:
                    bf:e2:72:44:7b:fa:1a:b5:75:9f:8b:33:dc:cd:a8:
                    c4:37:ec:b5:d0:33:b1:eb:e9:a2:b1:1b:36:8f:6b:
                    64:28:e9:ee:ac:ae:01:4e:c1:82:2b:7a:9c:4e:67:
                    4e:20:45:5b:65:7f:8c:9d:1c:8a:e8:ae:9c:08:ae:
                    38:8f:7e:e0:24:e6:8d:c7:01:35:05:6a:33:e3:4f:
                    6f:7f:03:ce:57:93:0b:99:79:61:23:7a:bd:98:df:
                    b2:54:c5:97:1c:c1:fe:e5:0d:8e:34:77:36:26:b2:
                    00:c5:86:04:2c:6f:5e:8d:86:3e:ec:7d:37:f6:c2:
                    c7:5a:53:6b:4d:b7:22:18:de:eb:83:48:fe:dd:7f:
                    4e:f9:43:d3:78:74:65:82:ff:88:4b:58:57:aa:05:
                    1d:8a:39:f0:fc:e6:df:9e:54:59:af:9a:2b:d5:09:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:E0:CE:72:9C:7B:E2:E7:09:13:A9:70:01:77:B6:B6:99:EB:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/81fb0018-bcb7-3f7c-b9f1-13ea335fc196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.crl

            X509v3 Authority Key Identifier:
                keyid:33:4D:5C:95:B0:F1:BE:5A:9E:96:A0:FD:B6:ED:CF:44:4B:22:B8:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8594d3e0-32bb-4c5a-93c8-b52239cf17eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:6c:e5:b4:af:17:ee:b4:ee:77:a6:53:33:a5:8b:1a:3c:
         99:69:6a:c0:b1:b4:d5:49:9f:49:d6:48:a6:99:41:23:9a:5c:
         72:9d:6a:ca:f6:83:1f:a1:e2:01:d8:bc:d6:72:f8:6f:d1:40:
         d0:19:74:6b:52:b5:e2:8c:3a:3f:c9:bf:8f:ca:c6:63:aa:34:
         18:ef:f7:39:a2:94:14:9c:3c:c5:5f:b6:21:dc:96:80:36:2b:
         65:b3:b3:96:bc:21:c4:ed:c3:d6:c0:45:ab:32:39:13:d7:1a:
         fa:a4:4b:f6:04:02:8a:a0:56:fb:f4:34:46:ab:7b:2d:95:1a:
         6c:d1:6a:87:fa:ba:97:53:6c:6c:fe:cb:35:89:e6:51:4f:b3:
         f4:be:d4:56:a6:b8:7f:1c:23:10:7d:de:4e:e0:f4:7e:e2:c7:
         40:6b:c2:c3:c7:d7:e3:36:43:06:cb:17:96:65:5c:f5:ca:73:
         c7:e8:09:37:df:5d:cc:af:95:95:3e:02:64:71:9b:6f:05:68:
         de:94:4b:34:c2:01:35:2b:1e:9a:16:44:60:13:a0:34:0b:c3:
         67:7e:ba:7b:50:01:14:c2:65:ae:86:3c:ee:42:b3:a7:55:01:
         bc:1f:f5:d1:91:e3:f7:55:21:1d:70:3c:59:fc:a5:3f:b1:58:
         fe:0d:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:04:54 2026 by rpki-client