Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa
File:                     cb493c23-9729-390d-a805-e1a7f3db8e26.roa (raw, json)
Hash identifier:          S8wnBaBtR9O1+GOA/lmelcedSCwihGTrKaggYq09eBY=
Subject key identifier:   8B:27:00:5C:B5:D8:24:A8:17:E3:3A:0D:F2:B8:5B:1E:CB:E2:E5:08
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584CDB01FFA706FA5FD8CE51B680
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     397546
IP address blocks:        192.122.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:ff:a7:06:fa:5f:d8:ce:51:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=7653a8d1-0e55-45de-9e27-4ff17408f4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:56:ab:2c:c2:ff:2d:56:1f:b3:51:1a:d7:65:
                    41:cc:a6:35:87:0d:cc:d5:40:94:8a:e9:ba:8b:c1:
                    25:bd:9c:f4:f4:de:ef:26:0b:30:fd:05:e5:5e:41:
                    cc:50:c3:99:c7:ee:43:7f:0e:ec:e9:ae:d7:9b:dc:
                    6f:14:9d:c6:8e:2f:ce:10:c9:e6:be:e9:2e:29:90:
                    0b:10:09:ad:89:0f:49:ec:b1:df:f7:94:8c:fa:8a:
                    4e:09:46:de:ff:18:e6:7e:9f:39:2a:b7:46:bd:f6:
                    4b:28:6d:e1:76:30:5e:15:c4:b6:4a:7d:7c:24:2f:
                    aa:a4:b5:e5:d5:e0:a4:73:f7:99:a1:9a:dc:7d:31:
                    2d:e6:f0:8d:93:77:6e:e4:c0:78:09:3c:bb:db:66:
                    c9:6c:bb:15:9e:51:cc:a2:95:28:9a:78:bd:4b:47:
                    2c:24:b3:7e:b1:c6:38:d4:ec:19:ff:9e:19:42:27:
                    45:cd:38:9d:bb:e7:17:ba:ca:8c:4c:82:9f:7c:c2:
                    ac:29:48:a3:14:ad:10:5e:f4:bb:84:6f:6c:2f:ac:
                    b9:54:3f:c7:65:e2:d1:74:65:53:15:18:ab:59:39:
                    35:88:3c:71:e7:0c:db:2d:78:3f:a1:e8:19:02:03:
                    9c:61:ee:47:a0:fa:17:86:f2:93:39:ed:e1:72:7b:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:27:00:5C:B5:D8:24:A8:17:E3:3A:0D:F2:B8:5B:1E:CB:E2:E5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:19:b9:48:8b:86:05:7b:eb:5a:53:29:ca:e2:15:15:67:
         f0:af:bc:46:02:22:c6:13:bc:4f:f0:78:86:e7:86:d2:0c:df:
         72:ec:68:ba:07:af:04:b1:c5:63:52:31:a3:e3:a4:6a:6b:a8:
         46:59:70:b4:2c:72:ed:22:22:9d:00:05:86:cb:7c:2e:d3:9e:
         69:a9:c1:6b:ea:6f:dc:e3:ab:63:85:0f:0c:b8:ff:43:72:96:
         ff:e3:b1:5b:63:8b:45:fd:6c:0e:40:e4:2a:66:4a:bb:de:85:
         ec:af:84:c8:29:b3:ba:dc:c7:59:a9:5c:db:84:c6:86:df:2e:
         a3:2f:c0:4d:21:9a:e1:e7:a2:12:10:37:76:d5:6c:2d:95:4c:
         04:ce:fc:92:8d:93:38:0e:9f:0a:64:3e:de:0b:b3:58:96:a1:
         c3:d3:a4:9f:45:02:6c:01:57:ae:46:02:4b:0c:2a:5f:a9:10:
         fa:f0:38:f8:a7:c5:83:6a:6c:ad:71:3a:c5:9b:04:57:03:75:
         86:a0:42:b1:05:83:91:0b:5e:4d:ff:38:0c:24:31:92:82:cc:
         cc:cf:2e:48:43:5f:48:08:69:4e:88:63:6e:f2:15:9f:e4:9b:
         8c:32:aa:85:aa:3d:5b:99:f1:d8:8a:0f:86:6b:1a:09:06:18:
         2f:3d:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:50 2026 by rpki-client