Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
File:                     82081b1c-a2de-357f-81fd-69a40673670c.roa (raw, json)
Hash identifier:          Qy66grMr3geGdcte/uxRps1M2jawayRlf/5Jk01cNns=
Subject key identifier:   E9:97:7B:48:2A:2C:D5:33:80:07:47:41:5B:7E:1B:66:22:0D:12:F0
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F4328584D6C0FB71D93BDE6202526E0C0
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     160
IP address blocks:        192.5.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b7:1d:93:bd:e6:20:25:26:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=1cef68d1-9b86-4745-b1e1-6ac8545d955c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:b5:94:0a:db:0a:6a:19:8d:82:2a:b9:11:
                    b7:65:60:e8:37:40:c4:11:38:88:2e:02:1e:7f:12:
                    7a:ad:f5:ca:9a:69:5d:be:5a:76:77:bd:8c:14:96:
                    89:f9:e7:de:ca:fc:91:1d:36:8f:f9:fd:09:49:c9:
                    42:12:ba:cc:9b:0a:13:e9:51:ad:64:b3:f0:d2:8d:
                    78:74:9e:dd:67:55:5b:d0:9b:17:e0:2b:2e:ce:6e:
                    da:25:4a:9b:1c:56:18:cd:29:59:6c:fd:13:3b:ab:
                    7d:57:cd:85:26:37:44:d6:67:ff:3b:6c:88:c2:9b:
                    75:32:a2:d4:be:da:ba:e8:5f:d8:9b:fa:d2:a1:76:
                    70:1f:f3:62:33:64:c8:fe:53:36:69:14:f7:12:df:
                    ea:6c:e6:1f:b4:ae:b2:a0:07:b1:59:7a:0d:50:39:
                    2e:7f:17:bb:b7:f6:c3:0b:7a:2c:1c:b6:60:a3:0c:
                    5f:68:25:b0:d3:a4:ed:12:73:6f:40:96:b1:ad:85:
                    ad:59:c3:da:61:0f:b3:00:6a:80:01:f6:52:3c:69:
                    25:18:1b:cd:24:92:83:92:08:b6:77:67:e2:1d:2f:
                    70:8e:4a:42:3a:f9:27:4a:ea:c0:3f:55:dc:2a:b8:
                    13:5e:f2:ab:d1:02:41:e5:74:94:f9:f1:31:c3:cf:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:7B:48:2A:2C:D5:33:80:07:47:41:5B:7E:1B:66:22:0D:12:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/82081b1c-a2de-357f-81fd-69a40673670c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:89:c4:3a:4d:45:cf:45:fe:8d:00:c1:26:4c:d5:7d:db:f4:
         01:4a:b5:ad:ae:8f:23:91:bd:8d:46:3b:19:da:24:af:c8:c7:
         ae:17:65:72:0b:db:0a:67:16:5e:29:33:8b:0a:cd:a6:53:32:
         0d:bc:45:18:1c:40:93:9f:55:e3:43:9d:9f:27:20:75:66:34:
         55:ea:d3:9b:6d:3d:1b:d7:21:04:7e:f6:64:9f:47:c8:fe:6b:
         e6:80:92:c2:00:5d:99:1a:1b:1f:8e:f4:b0:dd:cc:f4:0a:a9:
         88:42:de:d0:57:a3:f3:b3:91:0c:02:04:2b:08:78:3f:d9:7f:
         dd:03:a1:c1:ea:4b:b9:b2:f2:18:ba:07:24:90:69:35:f2:87:
         19:bb:55:b7:ee:26:3d:3b:e5:fe:16:46:bd:f9:1a:01:a4:2d:
         e5:67:27:8d:c6:8b:0a:37:77:cd:e4:38:d3:ef:ed:0c:5a:88:
         ec:6e:69:3d:77:ae:43:47:62:15:5c:cb:0a:9e:8b:fc:29:59:
         0b:31:bb:4a:fa:94:41:b1:0a:e7:d1:43:6c:6c:5b:74:dd:8b:
         9d:f0:47:f7:a6:82:d8:4a:6c:7b:02:68:69:26:29:cc:e7:65:
         69:65:85:60:8e:fd:20:fe:44:26:96:61:dd:24:80:2b:29:48:
         ae:c2:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:13 2026 by rpki-client