Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/5f285cd8-e994-3e7d-999c-9d39a5e5b7ff.roa
File:                     5f285cd8-e994-3e7d-999c-9d39a5e5b7ff.roa (raw, json)
Hash identifier:          g5J35V2ubVtJ7AfjKYmkS1kCywqp/ylycqCP3oKB6gI=
Subject key identifier:   A2:BA:26:1E:85:52:1D:97:B0:B5:BD:6B:A3:19:E1:A3:9C:F5:89:30
Certificate issuer:       /CN=9b51b96b-674e-4350-82f7-7b884151238a
Certificate serial:       010D0C9F4328584C6E214650F19251CBB13BA080
Authority key identifier: 93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/5f285cd8-e994-3e7d-999c-9d39a5e5b7ff.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     394151
IP address blocks:        192.131.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:46:50:f1:92:51:cb:b1:3b:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b51b96b-674e-4350-82f7-7b884151238a
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=bafb38f2-f2ae-4f09-872e-13a63f80c4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:5d:69:b5:ce:91:25:1a:38:c7:ca:c7:3e:
                    8d:45:57:e7:3e:24:1e:b6:36:29:c9:de:39:54:36:
                    c5:c1:86:99:62:6b:99:7b:ca:b6:52:8b:26:e3:c0:
                    b7:a6:ed:d3:9b:06:cf:fd:63:5e:13:59:2f:37:41:
                    67:7a:07:08:d1:ef:c4:7c:a7:16:49:51:7a:34:80:
                    92:d2:92:32:5a:07:e1:dc:ce:5e:68:0d:e3:e2:da:
                    c9:b7:5f:c3:11:74:53:92:7f:46:85:3c:70:77:4a:
                    d9:cc:6a:12:59:1f:ca:8f:85:f5:04:04:04:0e:6b:
                    be:03:4a:96:69:cb:7c:b0:16:29:00:ec:45:82:e6:
                    2f:24:c9:1e:f7:3e:5a:24:57:5e:5e:16:4b:f7:09:
                    07:3a:98:d1:cd:8a:d5:6f:53:8c:0c:23:30:b0:47:
                    aa:1d:01:71:12:d5:98:9d:00:06:76:a2:41:59:98:
                    39:0d:b9:dd:57:38:23:9b:eb:b3:c0:c9:88:45:54:
                    7f:e7:ea:51:cd:5e:60:0d:c9:94:a3:b8:bd:64:32:
                    ff:d3:19:dd:57:c1:85:11:0e:13:03:fe:13:8f:dc:
                    06:72:9b:b8:58:07:24:4b:85:36:04:d3:95:9f:6b:
                    68:48:54:43:36:89:9b:57:98:43:52:a7:d0:38:3a:
                    ff:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BA:26:1E:85:52:1D:97:B0:B5:BD:6B:A3:19:E1:A3:9C:F5:89:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/5f285cd8-e994-3e7d-999c-9d39a5e5b7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl

            X509v3 Authority Key Identifier:
                keyid:93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:39:ad:f5:21:48:3a:3b:b5:36:6e:89:91:ea:45:58:1b:
         57:26:0c:0e:f1:cc:84:f4:92:d1:03:6d:0e:39:00:25:00:9c:
         8a:9b:f0:29:36:5d:69:9e:3f:04:4c:65:d3:23:ec:f9:4f:9a:
         cc:19:13:57:a7:50:12:6c:a3:fd:9a:d1:0f:2f:8b:91:d9:a8:
         0f:4f:f5:ea:17:16:f7:5b:73:e0:72:2f:ec:14:3a:7c:53:4b:
         65:71:95:f3:79:b9:17:de:f2:bd:c4:cc:1a:ed:a6:9c:3f:9c:
         53:23:13:45:37:10:27:78:0f:73:12:e3:21:d2:5e:b1:0b:5f:
         21:f2:b8:1f:c0:82:19:da:8c:2d:07:dc:57:2b:21:2f:58:b5:
         2f:3d:93:f4:6f:b0:33:53:86:d8:a8:f8:88:02:4c:33:c9:a0:
         a2:d4:3d:13:31:c4:c1:1f:dd:4a:08:2b:52:c8:65:89:3d:eb:
         e6:57:0e:f1:b9:ab:5b:59:f1:5d:8c:3e:05:73:79:b7:0b:25:
         37:69:ff:4d:1f:81:58:d1:1b:3b:2d:67:d1:f5:4c:b4:e0:5c:
         b8:b8:07:55:13:4e:34:a4:ab:01:d9:cf:87:2f:4d:8b:96:39:
         92:57:32:c5:26:66:b6:9f:23:f3:a0:63:eb:81:9d:3d:c5:b0:
         9a:08:71:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:36 2026 by rpki-client