Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/8031f74d-ff98-393b-85af-ad983b763784.roa
File:                     8031f74d-ff98-393b-85af-ad983b763784.roa (raw, json)
Hash identifier:          0P8MRSZTxUmZ/ccxr8HEmP4DzueZv8gNYGnk5pX0ZVM=
Subject key identifier:   FC:76:22:18:54:76:7A:7E:FD:E8:6E:AF:BD:25:7E:1E:9E:DE:74:89
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584D67DFB70260B4CE68E2129520
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/8031f74d-ff98-393b-85af-ad983b763784.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     22709
IP address blocks:        184.75.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:b7:02:60:b4:ce:68:e2:12:95:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=c191c766-79a5-4b86-a24d-737bbe832f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:fa:8d:8c:9a:27:a5:da:72:1d:2d:05:22:
                    a6:dd:c0:c7:df:f5:00:af:9f:69:58:f5:8d:f9:1f:
                    57:15:b1:4f:b8:c0:cd:31:cf:d7:20:32:79:ad:f5:
                    bf:3f:9c:52:33:8f:38:64:43:12:eb:f6:9e:bc:c3:
                    b4:e9:e3:6d:c1:0a:9b:4f:6e:63:ee:3d:e0:87:80:
                    c2:8e:8c:24:8c:d9:28:50:33:d8:0a:50:2d:1f:e1:
                    5f:fe:0b:dc:c3:0a:ca:24:9e:2a:c2:47:b7:03:50:
                    b1:66:fa:56:c8:a8:53:00:9b:13:03:d5:ab:50:af:
                    c3:2c:a5:5b:34:19:59:aa:cc:64:dd:5e:e5:37:20:
                    e2:a4:6a:7a:7c:bf:31:f3:54:64:81:81:31:af:1d:
                    b2:23:b0:63:76:a0:f3:a2:f7:e3:51:52:fd:c8:fb:
                    38:c7:09:3a:b4:c5:84:59:5c:94:c7:21:68:d0:26:
                    52:cc:54:87:80:06:f7:f7:cb:21:eb:8e:1f:90:2f:
                    08:b3:e4:f6:1f:c6:53:65:13:e8:79:3d:90:32:7e:
                    a7:a8:01:d0:08:50:9e:84:f6:d7:2d:4f:39:3f:0e:
                    7f:f2:01:b2:fe:47:1f:0e:a0:61:b8:6e:60:2a:c9:
                    4f:ef:95:08:cb:1b:f4:1c:a3:87:13:c5:67:e5:c3:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:76:22:18:54:76:7A:7E:FD:E8:6E:AF:BD:25:7E:1E:9E:DE:74:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/8031f74d-ff98-393b-85af-ad983b763784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.75.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:38:eb:88:b8:65:8a:ce:51:f2:28:a1:a3:05:fe:a9:5d:c8:
         e7:b9:fb:36:37:e2:3b:c9:2f:2d:54:cc:9b:ff:47:cb:83:4b:
         c8:be:a1:ab:a3:af:99:0b:df:64:85:96:bf:79:11:73:1b:a6:
         06:8c:33:eb:1b:e0:82:d8:24:57:72:e7:d3:01:10:7c:f2:b3:
         ec:0b:d5:10:29:f1:a1:97:4b:5d:17:3e:f6:4e:8c:33:75:d5:
         f2:56:19:88:84:3a:32:c1:84:4c:58:53:40:33:42:13:1a:70:
         29:bb:13:d2:9e:53:08:4e:8c:81:0f:3b:9f:24:a1:89:63:23:
         4e:62:77:bc:ca:2e:0e:cc:35:b8:d4:61:24:c3:77:77:15:13:
         0a:d4:b4:56:a9:a7:ad:99:48:27:a3:63:7b:07:cd:bf:3a:f8:
         3d:7e:12:2d:01:0a:b1:49:c3:83:1f:bd:a6:7f:d2:b9:db:ce:
         ee:58:68:2f:4e:c1:d9:d6:1a:37:6f:a1:e3:c6:4e:83:f3:1b:
         fc:55:d5:2b:8f:ba:cc:c0:c6:2a:6a:db:8a:f1:9c:82:a7:65:
         94:34:45:31:71:21:6e:bf:05:8f:3d:07:91:23:c3:0a:bd:8a:
         c5:cd:b8:ff:c7:e3:2c:f1:18:e1:fe:9f:cb:78:75:5c:37:f3:
         6f:c1:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:43 2026 by rpki-client