Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
File:                     3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa (raw, json)
Hash identifier:          yWjFQNLrV53HZCyUlO3W3XkH9m0JyLkUA6vZ01wOVsg=
Subject key identifier:   AE:4A:DB:56:93:28:E3:19:EE:CB:B5:94:BC:84:6B:D4:F8:87:7D:73
Certificate issuer:       /CN=53482e94-c66d-458c-842b-1143e3693e88
Certificate serial:       010D0C9F4328584E1E4451B4896E04BCD28D26C0
Authority key identifier: 88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     54393
IP address blocks:        192.70.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:51:b4:89:6e:04:bc:d2:8d:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53482e94-c66d-458c-842b-1143e3693e88
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=3fdde677-8643-4982-b01b-90f350cda374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:64:7a:b4:14:13:0b:df:b3:dd:0b:93:4c:
                    e2:7f:a2:b8:60:7c:0d:b1:10:fb:4f:fb:1d:ae:0a:
                    0e:50:e3:ed:da:16:9b:82:01:94:71:9d:6f:a4:81:
                    83:d9:a4:31:f5:c9:57:64:64:bd:ee:1b:4f:82:79:
                    fe:66:d2:37:e9:b3:59:70:85:66:0a:c7:25:a7:19:
                    d0:a4:6b:47:a8:9e:3b:04:74:c5:31:e3:56:ce:83:
                    71:31:6b:9a:85:37:2e:a3:92:bb:44:a7:47:1e:12:
                    ed:d7:8d:86:d5:c7:8e:46:36:82:2c:39:0d:c5:18:
                    cd:8c:69:8a:f7:7f:b2:38:b4:51:39:f9:83:a0:2a:
                    80:86:3d:58:cd:40:13:fb:dd:cf:28:8b:51:69:48:
                    9f:c8:6d:0a:09:33:d1:77:b9:b9:15:ee:99:68:00:
                    60:57:49:e5:b1:8f:54:2d:6e:7f:ac:13:51:71:4c:
                    25:0f:06:f2:c0:c3:59:cc:70:5a:f9:14:77:6a:55:
                    b6:07:1c:a7:3f:82:cb:c4:f9:75:ae:65:88:34:6c:
                    14:5c:b7:e3:36:82:d4:79:04:cc:87:70:18:7c:93:
                    0e:26:69:91:1f:23:b0:7a:c8:d5:b9:b7:4a:3c:dc:
                    ce:96:e7:6c:4c:1d:21:b2:76:bf:55:f3:e8:e4:1c:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:DB:56:93:28:E3:19:EE:CB:B5:94:BC:84:6B:D4:F8:87:7D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/3667ced7-962c-3f0e-9b77-cf1ed13ee987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88/53482e94-c66d-458c-842b-1143e3693e88.crl

            X509v3 Authority Key Identifier:
                keyid:88:FC:3C:8E:C5:B2:BE:24:04:8E:5C:4F:14:21:39:3C:BB:51:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53482e94-c66d-458c-842b-1143e3693e88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:22:c7:cb:af:4b:d6:6c:71:f9:78:09:99:f9:09:64:d3:1d:
         7a:e2:70:35:b9:6a:43:4d:86:f7:95:0b:31:82:3c:67:54:20:
         13:43:1a:4a:2f:f1:26:af:40:62:88:50:83:93:5c:7a:6c:e1:
         77:cb:68:39:f0:6d:b8:c0:f3:c9:4f:cd:4d:91:a1:91:5f:dc:
         5d:b0:7e:12:44:2a:96:e6:62:62:8d:6a:52:f9:41:bb:38:71:
         2a:b0:0d:9d:72:5c:b8:0d:0d:e8:7e:b7:ae:1c:17:e2:fc:af:
         2e:b1:20:3e:5b:25:b4:7a:fb:f4:58:5b:d1:26:f2:cd:0e:60:
         23:5e:b6:fb:ca:66:2d:1a:11:94:7b:10:76:88:f5:c7:46:95:
         44:bc:bc:52:c8:2e:bb:c0:3b:d4:b1:58:66:cf:d2:63:ce:8f:
         36:2a:00:62:93:cb:d1:dc:19:c7:d7:63:cd:7c:8e:14:bf:cb:
         8c:1d:fc:df:68:df:76:af:d5:9b:82:99:31:ef:f7:d3:ca:80:
         33:c0:22:9d:e9:63:c0:99:ec:9a:3f:c4:bd:8f:3a:92:eb:69:
         01:fc:f4:d6:15:30:2d:1f:ce:fe:91:98:70:51:51:d9:35:d6:
         9c:3d:79:69:70:f7:a2:e6:95:be:4d:3a:6a:60:1c:4f:5c:33:
         fc:24:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:34 2026 by rpki-client