Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
File:                     191cfb57-9384-3c94-905f-f6fb390f6a38.roa (raw, json)
Hash identifier:          AVA/AE4unDSqpO0Q0Z7wpIJYlwXGhUhfOCKqQyPjXzM=
Subject key identifier:   1E:9C:FC:4A:24:D0:52:E3:43:E8:7B:0E:44:D2:DD:42:1C:FA:32:BB
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F4328584D60E50A57B6CEA2F699261500
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     5719
IP address blocks:        192.12.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0a:57:b6:ce:a2:f6:99:26:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=517a06de-8b63-4c4c-b6ec-1b40e60f8e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:65:7e:a2:ce:bb:91:bd:7c:8f:43:a9:e9:
                    11:97:17:58:b2:d6:79:d4:64:6c:0f:24:94:ce:3d:
                    eb:43:7d:2c:24:48:55:35:93:48:fd:e5:34:c8:14:
                    e8:ad:dc:ef:82:7c:91:50:f9:ec:9d:01:69:f8:ed:
                    85:4b:99:0d:f1:d6:8c:3c:90:d8:dc:c6:af:b5:63:
                    7f:96:26:87:b7:a7:e2:d2:12:33:db:fd:9b:a0:48:
                    fd:a1:5c:62:c6:d5:cf:e6:0b:40:dd:52:16:47:19:
                    85:21:ae:aa:d6:b9:e2:a3:c6:6c:55:64:1e:e3:fc:
                    71:e7:fe:42:d0:8f:4e:3c:71:f5:c1:4f:d2:38:75:
                    0d:5b:b2:42:85:a8:79:5f:fd:e1:72:8c:e1:1e:d8:
                    94:26:d2:40:b0:a4:bc:e3:6b:da:15:cb:4f:17:1f:
                    8e:92:5f:7a:29:e5:e2:c8:a9:1d:90:fe:cc:d3:be:
                    ca:9d:59:b6:38:e2:c7:e5:af:48:03:ab:6d:a0:23:
                    7e:ff:97:bb:a5:e1:ef:df:07:c5:5c:ea:ac:39:0e:
                    64:3d:8d:f5:94:fc:2f:4e:d5:71:52:1f:67:b8:83:
                    38:ab:50:f2:e5:c1:fa:36:42:76:25:cc:be:8a:6d:
                    c7:4a:6e:e3:9e:ad:4a:84:bb:ca:01:8b:16:16:a4:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:FC:4A:24:D0:52:E3:43:E8:7B:0E:44:D2:DD:42:1C:FA:32:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:33:69:34:47:52:42:a0:22:9b:4b:0d:69:05:b9:40:2d:
         4b:cf:7a:b5:93:45:a4:7f:cb:2c:b2:e3:21:5c:71:89:6b:45:
         a3:84:92:74:0c:4b:06:14:5b:b3:c7:31:b4:b3:25:c6:b6:7d:
         cb:99:22:a8:14:e7:e9:63:e6:01:3c:c4:94:9a:a9:3c:5b:71:
         4f:fe:a5:bd:4b:48:33:bb:4e:b7:7f:ee:f7:df:de:c7:fc:3c:
         af:ea:3c:e0:60:73:91:c4:97:b3:97:48:30:c8:11:4d:ac:cd:
         a9:1b:38:df:c4:90:5e:51:7a:fb:66:19:67:87:34:63:41:1e:
         d4:12:b0:ba:7d:fa:3d:57:6f:94:25:e5:ec:77:88:15:2f:f6:
         c5:d5:1c:84:0f:17:c6:3b:65:b0:70:09:94:c5:74:d6:c8:a9:
         93:ff:eb:05:cc:a1:02:f6:f9:b1:44:6f:f1:1c:bf:c0:ca:c5:
         66:a4:a3:b5:c6:34:b2:10:12:4b:36:18:55:ce:76:f9:ff:fb:
         80:92:72:c8:38:30:b7:7e:d3:9c:31:71:cb:e9:df:ed:fe:61:
         e0:ec:d6:78:92:9c:d1:98:65:ca:ef:47:95:a2:11:64:ab:3e:
         dd:95:63:2c:41:55:75:4d:72:27:4d:7e:bf:10:b5:1f:8f:05:
         aa:94:96:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QpXts6i9pkmFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc5NjBhNDEtMzU5Ny00YjlhLThlNzktODBhZTYzNWNl
OGZmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
NTE3YTA2ZGUtOGI2My00YzRjLWI2ZWMtMWI0MGU2MGY4ZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUJlfqLOu5G9fI9DqekRlxdYstZ51GRsDySU
zj3rQ30sJEhVNZNI/eU0yBTordzvgnyRUPnsnQFp+O2FS5kN8daMPJDY3MavtWN/
liaHt6fi0hIz2/2boEj9oVxixtXP5gtA3VIWRxmFIa6q1rnio8ZsVWQe4/xx5/5C
0I9OPHH1wU/SOHUNW7JChah5X/3hcozhHtiUJtJAsKS842vaFctPFx+Okl96KeXi
yKkdkP7M077KnVm2OOLH5a9IA6ttoCN+/5e7peHv3wfFXOqsOQ5kPY31lPwvTtVx
Uh9nuIM4q1Dy5cH6NkJ2Jcy+im3HSm7jnq1KhLvKAYsWFqSmgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6c/Eok0FLjQ+h7DkTS3UIc+jK7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2
MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFlNjM1Y2U4ZmYvMTkxY2ZiNTctOTM4NC0z
Yzk0LTkwNWYtZjZmYjM5MGY2YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjc5NjBhNDEtMzU5Ny00YjlhLThl
NzktODBhZTYzNWNlOGZmLzI3OTYwYTQxLTM1OTctNGI5YS04ZTc5LTgwYWU2MzVj
ZThmZi5jcmwwHwYDVR0jBBgwFoAUKAx+lTalpqo5qdUE5Y0qI6zJIXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFl
NjM1Y2U4ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDPM2k0R1JCoCKbSw1pBblALUvPerWTRaR/yyyy4yFccYlrRaOEknQM
SwYUW7PHMbSzJca2fcuZIqgU5+lj5gE8xJSaqTxbcU/+pb1LSDO7Trd/7vff3sf8
PK/qPOBgc5HEl7OXSDDIEU2szakbON/EkF5RevtmGWeHNGNBHtQSsLp9+j1Xb5Ql
5ex3iBUv9sXVHIQPF8Y7ZbBwCZTFdNbIqZP/6wXMoQL2+bFEb/Ecv8DKxWako7XG
NLIQEks2GFXOdvn/+4CScsg4MLd+05wxccvp3+3+YeDs1niSnNGYZcrvR5WiEWSr
Pt2VYyxBVXVNcidNfr8QtR+PBaqUlkc=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:48:30 2026 by rpki-client