Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/9f493cb9-f4c6-3478-be57-6fe1740d469a.roa
File:                     9f493cb9-f4c6-3478-be57-6fe1740d469a.roa (raw, json)
Hash identifier:          cZNJhRYG93X8EekIbHircOANk6JJNwWC6JgwKBMLRH0=
Subject key identifier:   36:90:9D:16:12:27:8B:F4:4C:23:47:51:4C:57:66:9F:9B:14:94:A7
Certificate issuer:       /CN=fb545837-dc13-4101-916f-b5207537624f
Certificate serial:       010D0C9F4328584D70D7981F33B3A278AEAD10C0
Authority key identifier: 1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/9f493cb9-f4c6-3478-be57-6fe1740d469a.roa
Signing time:             Wed 08 Apr 2026 18:06:30 +0000
ROA not before:           Wed 08 Apr 2026 18:06:30 +0000
ROA not after:            Tue 07 Jul 2026 18:06:30 +0000
asID:                     53586
IP address blocks:        141.193.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:d7:98:1f:33:b3:a2:78:ae:ad:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb545837-dc13-4101-916f-b5207537624f
        Validity
            Not Before: Apr  8 18:06:30 2026 GMT
            Not After : Jul  7 18:06:30 2026 GMT
        Subject: CN=c4d63742-c505-4197-b156-cbb62319a3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:5f:5c:be:53:d4:a1:92:bf:9d:50:f8:f1:
                    82:2d:03:93:72:99:6c:36:ef:99:70:dd:e6:ac:49:
                    6a:8d:30:76:b1:15:98:f5:c5:7a:91:76:dd:fb:5d:
                    67:44:3c:43:cb:f1:66:60:ba:74:ac:e6:cb:50:22:
                    1d:fb:3a:81:7e:9f:a3:e0:37:a8:c6:ed:79:e1:7d:
                    ea:4b:4e:1e:db:3b:08:fe:e1:ad:42:e7:7c:04:85:
                    62:d6:18:21:2d:b3:e9:57:fd:9a:c9:36:b1:7d:5d:
                    3d:4d:e9:81:88:0f:91:33:a5:fe:3e:02:77:af:5a:
                    86:b0:1a:15:2d:89:e8:fb:10:21:48:c3:e0:ab:3e:
                    be:e9:e4:82:0b:16:0d:ce:58:47:0a:da:e1:9b:52:
                    0d:de:da:60:33:84:1f:7c:49:1d:51:8b:58:d5:b0:
                    7f:d4:e6:e0:e2:dc:a4:51:b3:03:b1:ce:3f:93:cc:
                    1c:10:ae:58:1a:c6:b5:e9:70:c2:1d:a9:03:87:76:
                    bb:59:b2:47:d7:5f:e7:0f:28:35:6c:8f:a9:96:77:
                    a4:55:c5:1c:52:a3:ba:0f:77:35:09:11:3f:4d:c5:
                    a7:55:37:44:c9:10:fe:dc:b4:58:3c:0b:e6:2b:23:
                    d6:9c:d0:a3:16:6b:c0:d8:be:47:18:40:1f:1c:19:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:9D:16:12:27:8B:F4:4C:23:47:51:4C:57:66:9F:9B:14:94:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/9f493cb9-f4c6-3478-be57-6fe1740d469a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:ca:d2:98:d1:3d:9b:b5:88:e3:c8:ea:f2:1a:a8:51:eb:
         db:56:d6:a2:55:78:65:93:83:7f:14:43:9a:1b:30:8d:29:82:
         fa:62:2f:38:86:e9:36:02:4e:f5:48:21:07:6e:55:1b:86:1f:
         43:03:ae:9f:e5:e0:0f:e2:9d:a4:66:59:35:78:f2:07:02:80:
         ec:73:24:ad:5e:a9:f8:19:0d:a6:d3:01:be:c8:c7:c1:19:7c:
         70:f0:f9:f8:b7:dc:71:11:b8:a0:5f:68:1f:f1:52:79:16:48:
         79:24:98:b0:45:10:c0:25:4c:15:1b:5d:ed:bc:8c:30:d1:b0:
         b3:8d:70:a5:a7:94:b0:0d:cd:14:7e:44:1b:1c:6c:e8:54:44:
         63:48:ee:c1:b1:df:6d:ee:20:71:0d:e6:f2:95:3f:98:07:ba:
         cd:6e:a5:6e:d4:65:5f:7a:31:7e:03:16:8b:a6:85:c8:36:25:
         3b:68:cb:8f:60:18:35:a9:43:5e:a5:6f:43:8a:96:7e:5b:d6:
         eb:67:5e:44:1a:94:6a:f1:52:2d:a8:07:7c:cb:f7:1b:92:04:
         dc:69:a6:48:a4:72:6a:1e:11:f2:1a:2b:b1:6e:6a:80:1c:46:
         3f:68:54:33:11:0f:21:dd:d7:a1:b5:c0:7d:8b:fb:a5:10:7c:
         6d:2d:ce:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:25 2026 by rpki-client