Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/24189e0c-0bd9-37c3-b8c9-c9d83f2e201f.roa
File:                     24189e0c-0bd9-37c3-b8c9-c9d83f2e201f.roa (raw, json)
Hash identifier:          RbuWUBN8nzhxmFb3Hq5/uAAZbBIhncFYioQmO8k77FA=
Subject key identifier:   A1:47:84:C4:2C:2B:E1:7F:CB:56:B5:82:D5:95:55:C6:21:3C:76:6A
Certificate issuer:       /CN=80622965-3bef-4e3d-abce-c342f2c7ccff
Certificate serial:       010D0C9F4328584C9EFC8A0F8879D2096BD2BB00
Authority key identifier: 73:3E:2B:6E:52:F4:24:FD:97:07:4C:B0:9C:16:C5:7E:C7:DD:30:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/24189e0c-0bd9-37c3-b8c9-c9d83f2e201f.roa
Signing time:             Fri 23 Jan 2026 14:00:38 +0000
ROA not before:           Fri 23 Jan 2026 14:00:38 +0000
ROA not after:            Thu 23 Apr 2026 13:00:38 +0000
asID:                     31772
IP address blocks:        192.81.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9e:fc:8a:0f:88:79:d2:09:6b:d2:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80622965-3bef-4e3d-abce-c342f2c7ccff
        Validity
            Not Before: Jan 23 14:00:38 2026 GMT
            Not After : Apr 23 13:00:38 2026 GMT
        Subject: CN=64a38eb4-8889-4cff-a006-b23256a289d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9e:91:ba:21:b8:61:b2:7d:8f:23:85:06:c8:
                    7a:db:d9:5f:7c:dd:bc:09:fd:f8:6e:16:ee:46:c0:
                    c8:32:4f:03:07:6e:a9:7f:84:80:85:4f:c2:94:5f:
                    df:0e:9a:16:25:d2:d5:e0:a8:e5:4a:22:77:e8:7f:
                    71:ad:0b:f3:f3:81:e3:60:fd:ca:6c:aa:bf:52:83:
                    15:7c:39:2d:4d:93:73:4b:22:b7:0c:c5:d5:b5:4a:
                    f4:7d:ca:9b:53:33:c0:18:a3:1d:90:98:c2:10:36:
                    b2:ae:04:c5:3a:0e:ed:06:d4:7c:92:4c:03:c9:de:
                    09:ab:02:09:36:ab:53:1f:2d:2f:0f:dc:ab:83:ab:
                    dc:1a:66:c2:bd:82:af:0f:14:10:55:6c:1f:c4:28:
                    5c:f9:e8:60:9e:df:83:64:a2:3f:8f:7e:a2:a1:f9:
                    d8:0b:cd:59:7e:69:76:a9:21:02:9d:5f:8a:29:1f:
                    9e:9f:88:29:4f:e5:67:8a:08:90:37:5e:1b:57:8b:
                    04:10:6c:0b:5b:d4:72:13:65:e4:80:e5:b7:f4:e3:
                    e2:76:20:81:95:f5:91:0d:ba:d5:09:a2:18:36:49:
                    ee:78:fc:7b:37:c1:d8:8c:8b:cd:d0:3b:ab:c9:3b:
                    ed:20:da:02:0d:f7:49:f2:15:71:38:a3:d0:c9:19:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:47:84:C4:2C:2B:E1:7F:CB:56:B5:82:D5:95:55:C6:21:3C:76:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/24189e0c-0bd9-37c3-b8c9-c9d83f2e201f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff/80622965-3bef-4e3d-abce-c342f2c7ccff.crl

            X509v3 Authority Key Identifier:
                keyid:73:3E:2B:6E:52:F4:24:FD:97:07:4C:B0:9C:16:C5:7E:C7:DD:30:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/80622965-3bef-4e3d-abce-c342f2c7ccff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:02:6a:07:d5:5e:8c:8f:82:e5:40:1d:7f:4a:c2:96:f1:f0:
         d6:c0:35:11:69:e8:a8:e8:17:0c:d1:04:fb:d7:5e:ee:b6:b5:
         cb:84:a7:bf:84:69:c8:4a:03:1f:70:f7:af:b3:b0:e3:dc:ae:
         8a:16:8d:fe:f7:29:48:2e:4c:b2:7b:aa:88:bd:0e:e4:d2:62:
         20:6f:be:85:d3:52:d0:e2:f8:51:b9:46:a1:38:fa:0f:85:1f:
         92:fa:b0:b9:fd:5b:2d:14:19:42:64:a1:68:45:ab:ab:7b:65:
         60:8b:eb:03:ea:47:78:7d:c4:12:ee:ad:37:5f:38:d1:9e:20:
         41:89:3f:5c:4a:37:62:94:e5:62:9e:bb:df:08:d0:bd:19:6b:
         e1:1f:b2:83:0a:22:6d:8e:10:e8:0b:28:e0:33:68:f0:96:e0:
         7a:b0:64:e3:09:1f:79:30:8e:ec:24:e9:d2:b0:b9:6b:8e:0c:
         2d:cf:56:eb:b1:8e:8b:1f:33:bb:60:54:86:86:e1:ed:2e:80:
         b1:2c:6d:a2:3a:08:99:9a:f4:12:5c:74:8e:22:86:c3:5e:be:
         80:b5:40:a0:98:8e:88:a5:7c:bc:4a:3b:5e:eb:83:33:7a:63:
         b9:e9:49:98:b9:2c:92:4a:fd:af:71:8f:00:90:3e:d7:16:1a:
         ca:37:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:43 2026 by rpki-client