Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa
File:                     d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa (raw, json)
Hash identifier:          lIbkp1y7pNm/mcaj9ZmoOTWJKCxztkznc5tJC+PBRds=
Subject key identifier:   62:97:C1:8B:87:0B:CF:F2:0F:C5:EA:7C:A9:D3:E7:87:E1:52:82:74
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584D730A736397AF4D8322B76080
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     812
IP address blocks:        24.137.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:73:63:97:af:4d:83:22:b7:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=4f3bda5f-1062-4616-a55e-5df5ae0f7567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:b2:12:4b:c0:14:ea:41:f3:46:4f:73:2f:
                    f1:02:d0:08:16:2d:70:ed:0b:5a:c6:b4:f0:c1:2d:
                    7e:d6:5a:a9:83:1d:92:55:c1:24:70:cf:cf:7d:2b:
                    3e:c3:bb:2b:90:bd:89:de:1b:43:07:9b:89:7a:2c:
                    52:e9:f6:68:b5:ed:b7:02:97:23:c7:61:90:37:cf:
                    8e:9c:a9:0c:51:14:80:ca:c6:3f:b6:99:0c:06:c9:
                    80:c4:73:5f:cc:84:9f:c4:dd:b9:9e:95:34:98:5b:
                    da:1d:a2:8a:cc:5d:05:7c:bc:95:f6:5f:ad:e8:07:
                    cd:56:fa:7b:a5:5f:d1:9f:57:76:32:f3:41:1f:7e:
                    ff:fa:8a:2f:f0:96:4c:30:9f:52:a5:44:39:f0:85:
                    ad:81:a1:38:29:4a:81:97:c3:11:38:e5:3d:72:41:
                    c8:ff:b1:3a:fe:94:bc:29:4f:0f:26:c1:b4:1c:36:
                    df:9a:5f:69:0b:66:9c:aa:d9:59:00:bd:a1:19:c8:
                    91:ef:3d:6e:e4:22:58:66:9c:1b:ec:f7:0c:9f:13:
                    fc:24:aa:8c:8f:1b:63:1a:16:30:64:de:07:fa:62:
                    c1:49:c6:e0:b6:e1:e9:be:24:46:3b:da:33:36:74:
                    bf:23:04:a3:62:55:7b:57:d9:f6:1f:9c:11:09:03:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:97:C1:8B:87:0B:CF:F2:0F:C5:EA:7C:A9:D3:E7:87:E1:52:82:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.137.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:af:af:6f:18:f2:6c:63:ac:7d:bd:26:bd:d2:d0:0a:33:77:
         c8:b1:a0:05:94:d6:eb:e5:78:f8:5a:42:63:2c:c2:18:b7:ce:
         7e:82:4b:c0:d4:7e:3f:20:01:3e:47:91:2b:69:55:d5:0a:47:
         52:0d:00:a7:6d:80:09:50:9c:be:bf:3c:6f:9b:ca:62:be:74:
         6e:93:62:86:2c:70:76:4f:8a:2e:a5:c9:19:23:e1:64:11:48:
         7b:78:e0:bd:7a:b3:8f:ba:f1:a1:55:07:6e:71:c3:f4:02:4d:
         f6:08:bd:39:44:f8:49:ac:1a:ac:49:ab:55:6f:79:38:22:a1:
         ae:2d:2b:a3:c3:6b:0e:00:44:73:c4:50:a9:8d:0a:17:2e:8c:
         b1:f4:90:54:ed:69:58:c3:06:13:a6:57:2a:f0:54:4e:94:e0:
         ec:93:e3:8d:82:aa:88:3b:df:f9:71:f1:21:45:21:3b:3c:3a:
         5f:08:80:9f:1d:fa:3b:f1:59:98:a7:07:48:2c:cb:8c:62:6e:
         a6:cd:f6:5e:8f:2e:a0:f3:f7:69:69:e1:2a:8f:0a:63:93:bb:
         1c:b4:0e:37:c2:ef:31:79:79:3b:3a:88:45:c2:07:8a:ef:99:
         06:b4:d9:4d:3b:19:ff:c0:9e:21:ae:80:79:ce:9c:38:28:2e:
         db:7d:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:12:23 2026 by rpki-client