Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
File:                     db7be19b-e29a-3fed-8de7-c83ce5094676.roa (raw, json)
Hash identifier:          dQNiKwMjVM4Beb4VRef5Y800Vow5q8bLTmE8+QUz33k=
Subject key identifier:   B6:7C:4E:9F:57:2B:53:C6:4B:C9:F3:FB:23:CA:1D:26:EB:85:50:88
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F4328584D582E3ECEF6A6AE704C58D100
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
Signing time:             Mon 30 Mar 2026 22:05:53 +0000
ROA not before:           Mon 30 Mar 2026 22:05:53 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     54098
IP address blocks:        23.92.32.0/24 maxlen: 24
                          23.92.33.0/24 maxlen: 24
                          23.92.34.0/24 maxlen: 24
                          23.92.35.0/24 maxlen: 24
                          23.92.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:2e:3e:ce:f6:a6:ae:70:4c:58:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: Mar 30 22:05:53 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=bb421367-2558-437f-bfae-f4064855f4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e3:2a:f9:7e:55:b4:f5:bd:a4:09:cc:21:13:
                    36:70:2f:cd:c7:c4:fd:52:f7:17:ae:fc:97:23:5e:
                    ae:76:42:34:6c:af:c3:41:ea:61:61:ea:84:9d:2e:
                    38:64:c1:c4:28:50:2d:b9:68:6c:31:31:ee:35:07:
                    bb:b4:c6:f6:40:6f:2f:d7:62:74:96:1b:a4:22:78:
                    85:a5:6f:d8:6b:f9:19:3a:48:7d:6d:14:eb:8d:45:
                    71:bd:4b:76:20:90:bb:73:27:46:f9:3e:4a:43:08:
                    bf:e6:cb:15:58:33:f7:95:b6:df:29:89:14:e9:f3:
                    89:83:72:36:91:64:13:25:7e:49:af:92:b6:ad:76:
                    43:cb:e3:4e:6b:01:a6:98:13:cf:3c:7f:25:8c:9e:
                    d3:24:40:9f:e5:f1:2b:ad:80:73:90:fd:5d:63:6e:
                    f0:28:f3:d4:cc:59:1c:09:60:f9:ec:ef:a8:ad:58:
                    1f:fc:e0:7f:6d:00:74:8d:a7:3f:22:ae:7a:9a:1a:
                    9d:0c:c9:aa:7f:48:f5:a3:21:24:ea:2b:47:7c:01:
                    4d:14:b1:b8:08:d9:86:71:1c:c3:ae:cc:79:a9:00:
                    e9:aa:cc:20:93:eb:17:de:f1:93:b6:a8:ff:b7:32:
                    36:b1:fc:56:fb:d1:0e:cf:b8:69:0b:7c:15:38:6d:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:4E:9F:57:2B:53:C6:4B:C9:F3:FB:23:CA:1D:26:EB:85:50:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.32.0-23.92.36.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:58:9d:0b:c2:e7:2e:3f:19:fb:14:d9:fd:60:6e:0f:a3:63:
         7b:49:cd:50:b2:12:96:83:47:77:4a:5b:63:b5:1f:24:a0:34:
         3b:ef:c6:55:09:6c:3a:dc:9e:ee:3c:44:a6:26:3d:33:88:3f:
         6b:2c:9b:de:b1:7a:0f:4f:b3:b6:ea:dc:13:b9:e9:70:33:71:
         49:29:71:c5:98:f0:51:5f:1d:83:e4:7e:eb:00:87:0d:48:26:
         94:58:d7:76:b0:b8:ec:1b:b0:8f:a1:85:bd:27:87:26:79:c0:
         c0:86:ed:3b:6b:df:37:a4:21:09:7d:b9:58:03:28:ad:0e:49:
         fa:ee:31:46:ef:75:b9:6a:78:67:3c:53:dc:28:1e:75:f0:c3:
         4a:f3:c2:24:39:bd:5a:b5:38:e9:28:6d:1f:43:0d:0f:b4:c5:
         5e:8f:71:d0:bf:2d:b0:63:91:6f:06:b9:6b:e1:1d:d3:55:2e:
         44:bc:40:e6:d2:e9:4c:c2:24:52:0a:f6:2c:3d:99:df:6c:36:
         e8:9b:32:dd:27:e6:21:6a:17:f4:d5:c7:ff:ab:43:3a:ab:4c:
         70:b6:ae:d4:c7:da:30:b6:98:ed:b9:64:41:d1:48:a9:a5:00:
         42:30:77:bc:11:f6:6f:81:bc:aa:7c:84:75:d0:67:c7:2b:6b:
         c2:e1:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:14 2026 by rpki-client