Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa
File:                     aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa (raw, json)
Hash identifier:          GMBSmF0l1VQ3WNOEkXkKhYvZ2pC9DMA1sinczwc0HVU=
Subject key identifier:   A8:62:0C:27:13:06:37:CB:9F:5D:AF:BC:55:8E:EB:92:FC:86:07:22
Certificate issuer:       /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
Certificate serial:       010D0C9F4328584D703FD178152D78EB0C978010
Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     92
IP address blocks:        128.153.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d1:78:15:2d:78:eb:0c:97:80:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=303b92ed-a8b3-46d4-b1b4-956cf52bd93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:6e:63:63:a6:29:f5:0e:32:c2:66:cc:31:
                    18:38:44:8d:5a:6c:60:18:47:46:77:45:d8:15:9f:
                    b5:24:c4:93:30:56:5f:89:f4:5d:fd:31:9d:e9:06:
                    18:73:75:37:bf:05:fd:14:96:13:39:83:5f:c9:80:
                    42:65:91:ce:80:4e:02:0c:76:ad:49:e1:da:98:4e:
                    05:8b:6f:a6:c4:e7:11:36:3c:06:af:71:04:1a:32:
                    3c:61:5a:5e:d2:df:94:ac:41:61:a2:1b:e0:4f:41:
                    0e:d1:32:c7:dd:b2:04:e0:10:da:1e:10:c5:2e:b9:
                    03:7b:f4:55:2d:29:12:de:cc:29:89:50:9f:b0:cf:
                    9e:8d:06:31:9c:6c:e6:3f:6e:c8:28:bc:15:88:e9:
                    ea:33:08:74:85:bc:31:33:e7:8f:56:60:73:92:3f:
                    b5:93:a7:82:bd:40:c0:46:19:ab:10:61:d8:8f:02:
                    63:eb:77:4b:f0:2d:1a:a8:96:af:81:de:f1:d7:d2:
                    d4:58:8b:9b:7e:eb:2f:45:6c:da:e3:35:68:ac:f6:
                    81:91:5e:a0:52:87:8e:9d:9a:c2:c3:97:55:a5:a3:
                    fd:ab:50:d9:f8:fd:d4:90:6e:05:cd:b7:01:b7:14:
                    55:5f:98:da:93:15:02:1b:e8:2c:66:8c:1a:4a:4c:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:0C:27:13:06:37:CB:9F:5D:AF:BC:55:8E:EB:92:FC:86:07:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl

            X509v3 Authority Key Identifier:
                keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.153.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a1:6e:31:47:ba:1b:2c:02:89:6a:e1:70:fd:f9:0f:72:5b:
         c9:80:36:72:21:d7:74:a0:19:fe:92:be:43:b6:57:85:8a:b1:
         1e:ec:21:72:03:06:d4:35:9a:1f:ee:f5:9d:96:ce:19:17:10:
         42:7b:ff:14:b0:8d:fb:52:dc:78:87:bc:d3:73:0f:a4:88:7e:
         7f:7d:23:59:49:a3:bc:72:77:6b:8e:94:47:a0:4e:64:e4:99:
         3a:99:bf:05:74:79:83:7a:b4:bb:78:a6:ba:52:4e:81:45:2c:
         36:8f:82:6c:8a:bc:38:c9:ce:46:cb:73:92:0f:bc:c6:99:11:
         48:b2:cd:8c:74:32:d2:9b:ba:ca:f9:ca:53:0e:ff:4d:18:35:
         9f:13:0f:ff:48:eb:75:22:d5:73:09:f2:dd:c7:d4:3a:bc:74:
         51:ae:7e:83:31:ad:23:14:6f:5d:8d:54:08:a1:dd:6c:c1:cd:
         df:59:2b:d1:c0:df:54:40:a5:30:4d:7d:be:05:a5:e1:48:60:
         0b:58:12:f0:53:b1:85:e0:89:c9:de:00:9f:16:de:87:3e:4a:
         76:25:c5:cc:a0:c8:b0:82:fe:83:da:6c:73:f3:5d:65:5c:05:
         5d:d6:e3:1e:fa:c5:29:09:7b:b6:e3:36:24:ed:84:05:4f:54:
         c5:9f:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:39 2026 by rpki-client