Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa
File:                     779a63bf-08f6-3f6f-bed1-9894398f6634.roa (raw, json)
Hash identifier:          TifsTRRsvR+FUeivIGI0W/tS6xyDCD4Q98EwEkKam4A=
Subject key identifier:   55:18:15:F0:96:75:38:9F:01:07:26:7D:35:15:B5:C3:8B:70:AE:22
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584CD2A1F03B495B8B6FB253B480
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21947
IP address blocks:        192.150.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:f0:3b:49:5b:8b:6f:b2:53:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=61b6b619-b3e9-42f7-8ee4-d5088a715233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:99:5d:a9:37:b9:0c:72:c0:20:27:ad:d7:
                    08:ad:37:d5:13:4e:d9:ea:9c:b8:c8:37:dc:ce:72:
                    ca:8e:d8:01:2d:a7:fd:c3:b9:bb:38:61:e4:ad:d5:
                    49:9a:73:f7:be:58:e9:0d:20:00:46:ad:38:ad:63:
                    99:a8:aa:50:83:3b:9a:12:9f:4e:7b:8c:25:0e:4b:
                    3b:93:38:46:5d:fe:e7:d9:b3:48:87:79:d2:62:3f:
                    67:50:fe:d6:f3:c2:af:7e:4b:d9:39:1a:eb:d6:ce:
                    47:a9:a0:c6:17:d6:2c:2c:c3:90:d6:ff:eb:b7:33:
                    09:9a:72:c0:1b:57:84:fa:02:94:8c:17:20:a4:78:
                    24:a9:dd:60:4b:5b:8c:af:38:5c:3e:58:6c:4d:de:
                    94:68:cb:c9:b8:c8:85:fd:d4:47:05:7b:73:9e:44:
                    e5:19:2b:5d:42:7b:a1:ef:64:35:23:ba:39:e6:f7:
                    8c:4c:bf:e4:7a:95:b2:e0:e6:6b:eb:13:d6:57:19:
                    30:25:21:f3:a1:54:ff:f4:04:98:1e:7d:ec:63:94:
                    fe:f1:4c:04:6e:27:0c:f6:f3:94:13:ca:59:7a:22:
                    ad:ee:d8:b9:4f:77:14:5b:00:1b:4a:49:c6:09:de:
                    c7:bb:86:07:b9:ea:6a:b6:a4:07:cf:0f:da:a0:7c:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:18:15:F0:96:75:38:9F:01:07:26:7D:35:15:B5:C3:8B:70:AE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:03:6c:40:a3:95:f5:e9:ea:63:4b:a4:47:d1:e2:0a:ca:b7:
         ae:49:61:c8:be:4d:4e:a4:08:07:27:07:5a:89:d9:e1:f1:dc:
         30:e1:78:75:5d:a2:e3:0c:17:36:08:a9:6b:89:d1:3e:00:ef:
         94:23:de:59:6b:81:10:f1:10:25:3a:17:ed:ab:26:c2:b6:87:
         b1:06:a4:a2:5c:86:de:5d:ad:37:ed:05:df:b2:d6:13:ad:33:
         8e:8f:c7:6f:9f:b3:13:4d:8b:4b:e9:b1:3c:c2:20:2a:eb:9d:
         f2:d4:81:8f:0a:05:7c:65:37:fe:26:ee:14:0c:f2:d5:43:b0:
         f2:e1:64:d6:e9:c3:6b:2b:97:c9:11:b9:4d:7e:12:84:c8:13:
         42:d1:71:fb:f8:16:1e:8d:24:e4:56:64:e4:64:d1:56:2c:bf:
         ce:7f:df:10:13:9e:48:b6:06:0e:d6:88:14:3d:0c:7a:ec:b7:
         66:ad:07:74:42:a5:48:4b:d3:6f:18:b8:bd:33:0f:8d:a2:87:
         90:bb:c0:5f:39:78:1e:d9:42:76:44:f9:96:31:c6:7b:ff:81:
         8f:f8:22:21:10:4b:43:e7:fa:5a:b1:cc:d2:04:51:94:33:33:
         29:fa:cd:34:5e:53:bc:e3:2b:0d:f4:d4:2e:1d:75:d5:eb:8e:
         ac:e9:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:13 2026 by rpki-client