Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
File:                     2f0b7f49-a633-3566-aa0c-7f199a78611a.roa (raw, json)
Hash identifier:          VrJgJsILwAndM3MsRG/8+Y14y4EnhO2zLjhc/LNF8tA=
Subject key identifier:   9E:76:A8:DA:64:3B:1D:70:93:28:71:62:AD:F9:A2:F2:7A:D0:E7:B4
Certificate issuer:       /CN=9c841696-0857-4d7c-8db5-21941a77450c
Certificate serial:       010D0C9F4328584DEC7B2B9048A17A249FCFE380
Authority key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     237
IP address blocks:        192.138.137.0/24 maxlen: 24
                          192.160.192.0/24 maxlen: 24
                          192.160.204.0/24 maxlen: 24
                          192.245.252.0/24 maxlen: 24
                          192.245.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2b:90:48:a1:7a:24:9f:cf:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c841696-0857-4d7c-8db5-21941a77450c
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=e8281abb-8c22-4d17-b3a4-f8562eb62c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:33:ad:41:07:7f:51:cb:68:bf:c4:7b:5b:
                    5b:38:0c:23:68:df:8b:29:54:14:58:b7:c2:58:35:
                    c9:4f:19:ce:cb:41:5c:63:ad:f3:09:c6:17:53:6b:
                    56:2a:17:27:e3:b1:b9:8f:d1:b1:92:53:00:fb:80:
                    41:f1:66:0e:0c:41:23:9f:cb:78:d8:7e:87:89:49:
                    61:48:66:2c:66:e3:a3:16:cb:d2:db:72:94:e1:99:
                    9e:d7:8e:e3:27:ae:b1:c4:0d:d9:e1:02:56:ab:97:
                    ae:ed:ff:31:68:44:72:9f:7d:c1:13:1c:76:f2:ba:
                    94:e7:54:52:27:6b:cd:7e:93:d7:24:5b:b1:4f:3f:
                    ad:d2:cf:17:65:43:a1:ae:f0:e7:23:c7:22:f3:4a:
                    55:02:7d:a5:9b:95:21:86:65:2e:51:36:4f:e5:cb:
                    aa:d0:25:6c:81:1b:cb:89:10:03:52:b4:3d:65:b0:
                    ec:2b:6b:f2:16:48:7e:f3:8b:c2:57:19:43:cc:2a:
                    ce:a3:31:26:b4:11:0d:bc:02:31:90:45:cd:d0:69:
                    61:ca:86:88:6d:1d:0d:e3:1c:5c:fd:92:4b:d2:e7:
                    b9:ef:95:0c:21:4e:c0:e0:c7:30:f3:8f:3b:06:fb:
                    cc:5f:e8:f2:0c:1b:33:df:cb:e3:d5:e7:d4:aa:31:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:A8:DA:64:3B:1D:70:93:28:71:62:AD:F9:A2:F2:7A:D0:E7:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl

            X509v3 Authority Key Identifier:
                keyid:62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.137.0/24
                  192.160.192.0/24
                  192.160.204.0/24
                  192.245.252.0/24
                  192.245.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:f5:d5:ac:49:68:85:f8:c4:37:40:9c:de:c2:ad:f6:75:
         f6:30:8f:0e:fd:27:3c:a1:88:5e:ab:aa:db:ba:eb:0e:9c:8f:
         fa:eb:f3:3c:83:0e:9f:0b:d8:70:80:a7:91:74:d2:1f:98:54:
         78:c4:ac:05:29:79:ab:57:3d:64:80:09:e9:27:00:b9:5b:23:
         44:e1:14:fe:f7:b2:51:02:9b:a5:31:79:e0:ed:a6:de:0c:c1:
         e7:fd:3a:b2:c3:ea:3f:4b:30:43:5b:74:44:36:29:59:a4:a4:
         5d:7d:7d:45:f9:92:26:52:51:96:ef:6d:64:6f:26:2f:3c:e5:
         7f:d7:70:91:2e:91:e4:62:6c:06:e9:47:d7:09:f8:a7:88:ec:
         98:46:d0:c3:13:b5:4d:85:af:fa:cb:7c:0c:57:a1:21:33:c3:
         72:45:81:63:3c:02:08:5a:d4:10:8b:3a:90:3c:69:63:5d:9d:
         59:ee:e7:1c:b9:14:10:e1:d2:56:d3:d6:7a:49:d6:32:c2:8b:
         e6:89:9b:62:f6:75:80:29:29:6a:0c:4d:ee:6d:0b:62:7c:2b:
         15:26:76:e2:db:b6:bb:d8:1c:7c:7f:bb:cc:c8:3e:0d:8d:32:
         d6:51:bf:c0:2f:ac:28:db:3a:bf:4b:d6:68:48:b3:2b:f9:ef:
         7b:4d:20:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:08 2026 by rpki-client