Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa
File:                     ddb3fe35-de01-37de-97b9-af36a60b3a63.roa (raw, json)
Hash identifier:          1vym9YTSD8jWNZsn9zq0CRtGoKdXoNeJ+SnsBUDx6vo=
Subject key identifier:   A7:78:73:D2:05:BD:34:39:72:BD:F3:D5:B6:2F:F0:1B:36:5B:38:3E
Certificate issuer:       /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial:       010D0C9F4328584C8A0C70EA3783C7E9C6D50840
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        192.122.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:70:ea:37:83:c7:e9:c6:d5:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=41f54417-f54c-4dc8-a1fe-0e7d2b9a7c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:03:f1:67:ab:ba:34:53:b9:17:47:99:16:
                    27:cd:8a:84:5e:00:f5:98:f3:96:50:8b:84:5f:f5:
                    05:9d:76:fd:5c:bb:1c:4e:e4:c3:29:e9:59:8d:97:
                    54:ed:48:14:71:f9:21:9a:09:8c:37:a8:f6:1e:1f:
                    82:1b:3e:e4:ce:e2:b6:db:a7:71:db:20:49:2e:8c:
                    0f:48:89:f5:25:dd:67:92:b4:8a:fd:d2:6a:b9:9c:
                    d2:42:16:29:c8:c7:ab:bf:33:59:48:53:30:4a:bb:
                    d1:94:61:0b:f9:c2:9f:8e:50:63:57:11:c1:16:67:
                    02:ab:54:74:0e:10:1f:6c:00:df:4a:f7:49:89:e4:
                    dc:97:1f:ef:6f:9a:7e:79:13:7b:7a:c0:f9:d4:f2:
                    ac:6d:b1:b1:63:72:e4:14:38:90:d9:f9:59:d2:b1:
                    b6:a3:72:62:9d:f9:85:b7:9b:73:94:48:8f:c3:9a:
                    c4:34:82:51:60:31:f1:35:f3:65:79:b5:35:10:26:
                    66:f3:1d:8a:29:2a:e7:f1:90:78:02:08:0a:e4:27:
                    61:76:3a:1b:32:93:5d:b2:11:6d:fb:4d:3c:1f:ef:
                    05:eb:1f:c0:f9:f9:bf:c1:4c:fd:4e:44:8c:ea:d0:
                    95:5a:b0:03:da:15:60:3b:a0:b7:19:f3:6e:59:8e:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:78:73:D2:05:BD:34:39:72:BD:F3:D5:B6:2F:F0:1B:36:5B:38:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/ddb3fe35-de01-37de-97b9-af36a60b3a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl

            X509v3 Authority Key Identifier:
                keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c5:78:f1:4a:5f:51:17:b2:5c:88:3a:52:a5:57:b8:22:a5:
         a5:2d:c6:63:dc:6e:ed:84:68:aa:e1:88:fe:3b:5d:ec:fb:f8:
         45:6b:23:09:86:a8:d9:dc:eb:0f:bc:04:67:0b:ff:29:33:ca:
         03:09:29:1f:73:8f:21:6a:6c:f9:ce:7d:c8:fd:d3:04:03:e6:
         f6:79:ee:6e:ba:29:b8:56:e0:09:dc:a0:e9:70:89:ca:fa:4b:
         db:2f:2d:54:1e:df:f9:fb:c7:46:96:12:a6:5b:10:a4:51:02:
         26:5f:59:51:02:3d:68:3b:f5:40:77:86:70:11:57:a4:22:cd:
         b1:e6:24:c4:d1:9f:77:d1:10:22:e8:65:86:1b:f6:1f:73:27:
         e7:bc:39:4b:92:7b:c0:a3:63:4b:f3:67:bd:ab:a3:b8:aa:a5:
         e6:3c:db:4b:63:45:c5:b9:15:61:d5:9b:51:40:2c:60:3c:11:
         64:b1:c2:81:cf:09:3e:f8:31:d9:ac:13:0c:02:06:ae:98:6c:
         27:7d:59:73:89:35:c5:01:84:f9:97:50:0d:73:6f:2c:00:aa:
         3a:6a:96:fc:fe:74:64:a8:08:9d:08:7f:b5:e8:65:be:72:f9:
         c4:c4:2c:ae:63:66:17:c0:cf:5d:5f:66:fa:93:07:d1:32:00:
         14:a4:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:16 2026 by rpki-client