Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/fda8011d-5953-38de-b1ba-00f9bface3d5.roa
File:                     fda8011d-5953-38de-b1ba-00f9bface3d5.roa (raw, json)
Hash identifier:          WLH5dukHZndP4TTFdgMjUFsR4s/UgeyflTSnhKFVH5M=
Subject key identifier:   96:84:B9:C9:BF:75:39:9C:98:F4:98:7C:37:83:CA:97:B1:AC:2B:EA
Certificate issuer:       /CN=c03bc5c2-262c-4743-971b-dfdc92defb06
Certificate serial:       010D0C9F4328584CC07C9BD820CA9318EBAA0F00
Authority key identifier: 34:D9:46:01:3A:A1:97:25:D5:34:4C:85:5F:82:63:D4:AC:28:06:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/fda8011d-5953-38de-b1ba-00f9bface3d5.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     32347
IP address blocks:        192.197.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:9b:d8:20:ca:93:18:eb:aa:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03bc5c2-262c-4743-971b-dfdc92defb06
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=ed7faf99-2f3b-43ff-ac18-f72d989c46c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:fe:9b:f5:bf:c1:10:35:3e:10:c7:4e:41:
                    0e:0c:5a:a7:6d:59:2a:0d:7b:a7:bd:42:13:04:ff:
                    e2:40:41:35:86:22:8c:cb:77:b8:27:d1:a1:2e:e6:
                    fd:da:30:d1:ee:2f:cb:80:93:4d:b7:1a:d0:f7:8e:
                    90:e1:a9:a3:18:f3:64:a7:40:09:13:e8:b3:55:89:
                    d0:26:e7:be:9d:1f:fa:c4:d6:59:af:0f:25:39:c1:
                    40:30:1b:71:c1:6f:2d:c2:ae:3f:bf:32:4d:d2:44:
                    dd:c0:e3:96:1f:0f:44:d6:b3:8a:a7:e9:e3:d6:3e:
                    6c:8e:09:7e:7f:3c:95:c1:af:f6:70:6c:33:0f:c1:
                    9e:2a:02:b7:61:5d:68:99:cd:62:d0:90:42:68:dc:
                    6e:de:14:23:bd:6b:42:ed:ab:9a:00:c2:fc:e5:95:
                    95:1d:0f:b0:af:3f:73:2f:96:90:61:42:d2:53:7a:
                    9a:d0:cd:fb:86:42:10:6b:44:32:e3:fa:e9:e6:4a:
                    79:a5:93:a5:fd:eb:59:13:c9:49:a4:1c:9f:9b:48:
                    68:9d:98:82:c7:4e:4e:8f:8d:7b:a7:e5:96:9a:34:
                    9a:05:c1:3a:0d:52:28:d4:77:0f:53:38:e0:13:4f:
                    be:2d:23:a9:a3:a0:bd:07:4b:cd:06:1b:6d:53:2c:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:84:B9:C9:BF:75:39:9C:98:F4:98:7C:37:83:CA:97:B1:AC:2B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/fda8011d-5953-38de-b1ba-00f9bface3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.crl

            X509v3 Authority Key Identifier:
                keyid:34:D9:46:01:3A:A1:97:25:D5:34:4C:85:5F:82:63:D4:AC:28:06:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:f5:6f:62:b3:d3:9d:ba:1f:1e:e3:b5:18:07:18:79:61:
         24:b5:48:39:59:2a:1a:ec:0f:c2:14:f9:ea:9e:94:df:6c:2b:
         e4:8a:67:5b:5d:96:07:67:42:6f:39:66:7e:b7:4c:4b:04:48:
         4c:4a:e0:29:93:5f:69:84:e3:d8:bd:39:1b:d6:ba:e5:ad:59:
         19:2a:ac:f1:f9:e3:d1:7d:a3:58:39:6e:75:27:1c:bc:52:43:
         ff:15:cb:2e:58:fc:1d:69:f4:28:8b:50:82:04:1a:f4:f0:c9:
         24:b3:55:39:6f:f3:c4:21:17:6c:06:ea:bc:6d:98:1c:a3:a5:
         47:83:69:68:5a:74:d0:fa:6f:49:6b:32:7c:49:01:85:f6:fa:
         09:b3:5c:18:1f:fa:66:c5:a7:bd:dd:88:8e:1e:ef:1c:8b:24:
         80:a8:d8:ae:b5:1f:2a:2c:d7:2b:ff:fe:f6:a3:3f:9f:47:53:
         16:28:d2:90:c9:32:4c:83:43:07:cf:a1:81:20:48:d3:53:61:
         ed:2b:e5:3f:57:ab:8e:47:8b:37:1c:62:e7:74:c1:4e:cc:4e:
         82:9a:b8:bf:73:ba:99:61:41:dc:32:cb:c5:d7:88:f4:4b:ba:
         7c:c4:59:84:46:cb:3b:e3:db:b3:d2:44:5b:21:60:c7:4d:73:
         82:be:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:26 2026 by rpki-client