Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa
File:                     d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa (raw, json)
Hash identifier:          6ET4egMZTTTnr4WqJA7iCy7n5IYS96Cs3wEgpUgRAhk=
Subject key identifier:   18:F8:A6:95:44:98:C7:4F:2B:BB:5F:AB:B4:5A:EF:DA:F5:8A:06:26
Certificate issuer:       /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial:       010D0C9F4328584D6AAAACED6553460951B5A000
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        199.36.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:ac:ed:65:53:46:09:51:b5:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=20e944e3-f018-448d-806a-112553b133f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:4f:3d:97:2b:be:00:3f:e9:c0:52:3e:d6:
                    3e:e4:7e:6e:dd:95:0b:b8:52:8b:c0:8c:f9:0e:57:
                    a8:b5:1f:64:47:67:18:59:a2:3a:10:77:08:58:96:
                    dd:bf:83:39:8d:73:4b:5d:7d:ff:75:5c:8f:6e:62:
                    78:27:c5:3c:55:93:7a:31:5b:e8:ff:b3:3a:27:fe:
                    0e:28:88:e6:b2:e9:c7:9d:dd:89:ab:3d:36:70:85:
                    c8:33:c9:d4:0d:52:6d:5d:63:a7:03:3e:1f:bd:da:
                    00:fe:c0:ec:7e:91:f8:7c:94:87:85:04:6a:46:ba:
                    16:c8:d3:e7:f4:ec:15:32:a1:7a:d0:11:5b:3c:4d:
                    6f:99:6f:b4:f6:b9:3e:54:e1:2e:a4:1a:da:ee:cf:
                    3b:ad:ba:d6:fd:b1:f8:5b:30:6d:80:60:4e:33:4d:
                    e4:03:fa:2b:2f:fe:10:aa:6a:9c:63:00:54:dc:4b:
                    ee:5a:3a:04:f9:4d:13:eb:1d:6d:f6:1d:45:5b:cc:
                    83:30:7b:65:63:6d:30:48:41:3c:67:73:23:87:0d:
                    e2:15:a0:11:cf:80:18:03:6f:91:51:00:e9:c0:a8:
                    b3:ef:36:0b:64:59:0e:7e:32:67:d2:c2:94:53:d1:
                    a6:bb:ed:6c:d5:20:a8:98:92:f3:91:9d:32:32:a2:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:A6:95:44:98:C7:4F:2B:BB:5F:AB:B4:5A:EF:DA:F5:8A:06:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/d32e5c67-b513-347c-b0bc-ea27dbb2b60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl

            X509v3 Authority Key Identifier:
                keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:0e:65:55:f6:e8:ed:2a:5c:7c:03:95:63:1a:96:5f:bc:
         08:cc:40:c5:c0:d7:0d:aa:57:a9:fb:85:b6:c0:97:05:e9:fd:
         05:35:cc:92:da:ca:5b:e8:cb:68:0a:33:a5:5c:b7:6f:b0:75:
         fa:99:fe:29:05:59:00:d7:f7:67:e5:22:38:6b:61:64:d8:6c:
         3c:cf:3e:37:4f:74:62:5a:28:0f:da:6b:d3:45:a6:f9:b6:dd:
         f7:a9:00:7b:10:df:c7:b1:7a:b9:dd:d8:3f:c2:f0:69:80:00:
         7f:ea:99:f4:f0:6b:99:b4:e4:b5:6e:50:a3:80:9d:27:1e:11:
         6d:15:ce:4c:06:0b:eb:df:b3:89:30:c8:06:6d:bd:68:b0:4a:
         31:ff:e7:19:49:29:c8:db:ad:d5:9d:a3:77:a6:78:62:fc:51:
         86:9a:66:e5:b6:ff:a8:36:53:bd:56:80:b7:78:a0:32:a0:c5:
         a7:87:c5:ff:a4:1f:c7:f7:38:5e:a6:42:b9:c9:6a:44:0d:97:
         d3:e2:5b:c9:2b:2a:43:3b:66:33:58:23:5a:52:5c:09:26:f1:
         c7:51:76:0a:dd:b9:3e:58:17:40:07:0b:b4:17:ab:1e:11:75:
         de:17:7c:e4:46:83:eb:9e:d6:f2:d2:7e:26:45:a4:57:fc:d0:
         d4:9f:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:58 2026 by rpki-client