Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/97ae8ef0-6bba-35a5-995d-d540291f29fd.roa
File:                     97ae8ef0-6bba-35a5-995d-d540291f29fd.roa (raw, json)
Hash identifier:          PcirGQAd1/I+C2RdWuTWe8q4OpA/BFPc7dnfm/2TjWU=
Subject key identifier:   2D:C1:26:6A:A5:62:72:31:1C:6C:92:EB:6D:EB:BF:A9:35:60:43:FE
Certificate issuer:       /CN=e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7
Certificate serial:       010D0C9F4328584D8688E90F0CD950C4C4DAFD00
Authority key identifier: 58:97:6B:B9:A9:B6:8C:33:64:00:9F:6D:17:4B:49:66:68:1C:19:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/97ae8ef0-6bba-35a5-995d-d540291f29fd.roa
Signing time:             Thu 16 Apr 2026 12:35:45 +0000
ROA not before:           Thu 16 Apr 2026 12:35:45 +0000
ROA not after:            Wed 15 Jul 2026 12:35:45 +0000
asID:                     16509
IP address blocks:        192.82.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:88:e9:0f:0c:d9:50:c4:c4:da:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7
        Validity
            Not Before: Apr 16 12:35:45 2026 GMT
            Not After : Jul 15 12:35:45 2026 GMT
        Subject: CN=d64dc29d-0739-4b64-97a4-f9260583557e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:ee:3a:f9:d6:2a:26:ec:04:2e:a1:b0:20:
                    05:53:62:50:1a:33:49:f1:b8:8e:f3:b9:c5:04:0f:
                    f9:0e:23:1e:9f:74:a2:20:c3:a1:ca:0c:aa:8b:56:
                    aa:70:65:56:2c:e5:e0:c9:7b:bb:1c:f4:f4:92:8c:
                    2a:db:92:59:15:24:13:87:7a:fc:46:ce:86:d5:b9:
                    7d:5f:f5:37:7e:a1:89:c2:7f:a7:b9:18:7e:15:92:
                    ef:97:21:ea:df:0b:e6:9f:0a:a9:9f:cb:0e:16:5e:
                    09:78:6d:8c:48:f9:24:1e:12:a2:23:ab:bc:ec:0c:
                    b4:72:e2:a2:83:ef:d3:86:ff:e0:a0:ee:bc:07:92:
                    b0:cb:d6:5e:98:07:20:d5:a1:2a:3e:56:98:8a:e6:
                    b1:4b:a3:93:d9:ee:e7:ea:b0:1b:f8:be:f3:eb:68:
                    97:31:b4:ff:dc:22:e7:c3:f1:56:39:b8:4b:d0:69:
                    7e:9a:de:fd:01:24:4a:76:ad:78:ce:1d:77:3a:86:
                    51:f1:35:36:0d:c4:d7:56:2e:c0:91:c4:98:eb:b5:
                    89:22:1f:66:97:6f:38:5f:67:41:44:2b:f1:32:ec:
                    90:ed:86:05:c5:52:13:91:f2:55:8b:f0:4e:59:cc:
                    ad:f0:54:dc:63:e0:87:69:36:1d:40:b7:92:a8:ee:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C1:26:6A:A5:62:72:31:1C:6C:92:EB:6D:EB:BF:A9:35:60:43:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/97ae8ef0-6bba-35a5-995d-d540291f29fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.crl

            X509v3 Authority Key Identifier:
                keyid:58:97:6B:B9:A9:B6:8C:33:64:00:9F:6D:17:4B:49:66:68:1C:19:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:c1:3d:c0:3c:cb:4c:83:b1:ef:59:50:38:57:8a:7e:c5:00:
         11:5b:e4:1c:c1:64:a6:8a:85:bb:36:74:ac:f9:aa:ad:a0:fb:
         b7:9c:64:63:18:a8:17:2a:73:1e:a4:51:9a:f4:cc:b0:52:ef:
         f5:75:1d:ef:76:d9:71:ea:8e:e0:f9:8c:3d:b2:b6:40:66:03:
         63:63:31:e7:b1:b4:5d:b5:fa:b7:e0:39:dc:cf:37:25:eb:61:
         7f:aa:2a:5b:18:b8:da:3c:60:15:2f:8c:8c:ae:6b:98:f3:79:
         53:cd:7a:d5:76:ee:27:6f:95:c8:12:75:45:62:c8:f0:d5:64:
         c6:1f:ac:f0:7c:28:d2:2e:b6:56:45:f3:a8:32:db:82:56:f6:
         f2:6d:4f:8e:1d:8a:4e:4c:cc:d7:c8:0e:4f:6e:cb:45:47:77:
         bf:d4:84:e4:20:4e:f8:b5:d8:29:f9:d9:a5:02:80:a9:4e:fe:
         b3:00:94:20:58:fc:82:60:96:b1:e2:c6:a1:3c:93:c3:71:c8:
         65:1a:ba:db:d8:2a:44:a8:a7:3a:cf:7c:a5:99:72:43:70:c6:
         bc:d1:32:6c:7c:78:58:02:49:9c:5f:92:d8:16:10:1f:ee:df:
         64:07:9f:9b:b7:8a:81:6a:cb:06:d2:73:f8:3b:27:5b:28:3c:
         27:1c:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:10 2026 by rpki-client