Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa
File:                     d0ba8e4a-1e28-3248-bc86-097345421556.roa (raw, json)
Hash identifier:          xS00XbP+5MU6l7kS7pL9YRrmzqElZ98QPvm2IGzVOks=
Subject key identifier:   93:F6:7E:B5:38:53:1F:71:CC:DD:69:8B:E4:28:4F:00:37:EF:1D:D7
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584E0A700AA5CAD1BD4903A4EF7C
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     683
IP address blocks:        192.5.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0a:a5:ca:d1:bd:49:03:a4:ef:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=48f235bd-da33-42fe-a171-73371b439e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:b3:9a:c4:ee:2d:c2:92:58:79:70:2b:06:
                    8e:9b:5a:f7:60:87:7a:4f:03:a7:85:d7:c6:bf:b3:
                    e6:61:7c:42:38:b4:7c:73:d8:52:62:e6:da:e3:24:
                    17:b1:9c:60:af:1b:7e:eb:d3:55:ef:d1:1d:66:90:
                    c3:ec:4f:55:8a:65:55:99:00:66:09:99:9f:c3:64:
                    d4:2e:90:e9:76:2b:05:6b:cf:6a:09:8c:45:de:cd:
                    9d:38:4a:5f:55:7c:59:f5:fd:61:bd:59:2b:08:17:
                    f9:ab:f5:3f:b3:1e:d1:14:06:98:69:8d:31:5f:b6:
                    6a:e5:93:ba:54:96:7b:e3:0c:bf:01:24:90:6b:88:
                    31:af:6c:6f:6e:aa:ce:7d:24:e6:96:28:2e:f8:ac:
                    ac:0b:3d:86:59:22:bb:9b:70:46:f0:c1:30:94:39:
                    38:0d:fe:da:32:25:56:24:0d:7f:6e:3c:84:90:a9:
                    ec:e8:0a:3f:4b:e6:ce:e6:f7:63:03:4b:7d:03:74:
                    a3:09:7e:48:df:ff:fd:f9:fb:1a:29:1d:88:a5:52:
                    22:88:d9:55:f6:39:bb:0e:88:78:d4:57:c4:4d:91:
                    c1:a9:3f:d7:7c:14:3f:39:bb:f8:3b:fa:9d:32:d2:
                    bc:08:88:9c:4c:ba:79:8d:a1:b5:cf:c2:5e:0b:3b:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F6:7E:B5:38:53:1F:71:CC:DD:69:8B:E4:28:4F:00:37:EF:1D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/d0ba8e4a-1e28-3248-bc86-097345421556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d3:a5:37:8c:19:bd:68:1d:8a:70:0c:79:d2:c1:b3:7f:b8:
         a9:70:ba:f6:3e:3c:52:46:67:eb:8b:1d:ea:f3:46:b2:7d:f8:
         6e:92:e9:51:e0:dd:03:40:40:2d:9c:40:36:7b:fa:0a:e4:4e:
         5b:e6:18:6b:25:9b:7f:d0:fb:b3:74:f1:74:4b:7f:bd:95:81:
         cb:8b:1f:c9:2d:5b:5b:95:5e:a5:57:35:63:db:83:bd:70:64:
         23:3e:1a:5c:b5:b4:77:94:eb:0a:ff:9c:a4:64:2e:ed:b3:e3:
         be:95:05:bf:6f:58:87:76:df:a5:3b:b6:8b:dd:b4:d8:35:fc:
         66:20:05:c2:5e:f7:29:b4:3e:b3:f9:df:b5:e8:eb:cc:c3:bc:
         1f:ef:ac:09:b7:90:ce:b7:9b:38:01:75:6c:10:fd:d2:d6:c0:
         9e:7e:81:f3:05:31:c3:f1:e1:0a:8f:d3:82:b9:93:5a:6e:24:
         47:f1:36:c6:b1:a4:ba:77:35:59:1d:f1:7c:1e:a5:be:ba:12:
         e4:94:3d:2c:47:b8:79:5e:38:75:68:3d:c6:79:0c:ee:93:0b:
         58:1c:5c:86:87:d5:8c:06:38:57:ba:e1:72:b5:2f:7c:0c:82:
         f5:02:a7:4f:d9:95:80:41:c9:1e:27:59:82:15:7b:a3:eb:cd:
         5d:b3:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:04 2026 by rpki-client