Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa
File:                     8ca33817-b7b1-3448-8920-6e02588cebe8.roa (raw, json)
Hash identifier:          QiQP+nR+UvhHqcILxeyQyBK7GYi/xeREQenSljQ87/Q=
Subject key identifier:   0E:DA:61:2E:F7:3E:E0:13:70:A3:3C:6A:D8:D0:B0:ED:75:59:75:F2
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584D83CA9A35AC844A14493C92C0
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        193.149.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9a:35:ac:84:4a:14:49:3c:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=9973cc51-a93c-4424-ba12-7c620368efa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:71:d6:40:d1:51:b8:3e:87:64:19:e7:a5:
                    0e:75:30:28:3b:4c:9b:9e:c2:17:43:e1:be:2b:48:
                    78:d3:e0:a2:a9:5e:81:70:63:1e:99:70:73:f9:a7:
                    bd:92:18:dd:e1:65:cb:14:fd:0e:8e:0e:6f:25:6f:
                    31:2e:52:bc:7c:f0:62:1f:62:27:8e:e7:ac:96:6d:
                    1e:8e:de:88:45:3a:07:3d:aa:c4:fc:b5:1f:ed:95:
                    c2:62:f2:4a:f3:ea:1c:68:7a:db:4e:40:45:a4:16:
                    c0:05:d4:c6:ab:43:75:7e:5d:f3:3b:79:c6:20:86:
                    a9:f5:a3:4f:2f:30:11:74:99:76:41:e3:1c:6c:77:
                    78:16:2e:50:ee:ce:23:b1:44:e9:82:37:78:50:c1:
                    58:51:aa:f3:b2:d6:b1:97:df:c5:4b:b9:33:f0:84:
                    c9:54:93:d6:6e:c7:fd:c9:d6:06:8a:23:d7:3f:17:
                    67:53:16:13:c6:0e:9a:ea:88:89:fd:cd:d7:25:74:
                    f8:c1:4e:a7:91:84:8e:ac:38:31:39:84:1b:7b:1e:
                    e6:f1:43:20:95:95:5c:2c:a2:14:76:75:47:64:75:
                    6d:2c:b5:e3:46:7c:b0:f9:8d:66:38:07:a0:97:2d:
                    21:60:ca:77:f2:6a:01:14:3f:a9:40:8f:d3:3f:0a:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DA:61:2E:F7:3E:E0:13:70:A3:3C:6A:D8:D0:B0:ED:75:59:75:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/8ca33817-b7b1-3448-8920-6e02588cebe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:25:be:69:36:da:2f:ab:e3:5d:5e:50:16:19:73:95:67:28:
         c2:20:29:e1:e1:e4:b0:e6:ba:c4:32:e6:85:de:91:f0:81:0d:
         f7:79:13:6c:55:79:c8:9b:b9:e1:c5:9e:cf:7b:e2:6a:06:fe:
         5e:86:eb:a3:52:63:f5:3d:5a:8a:3c:0d:ec:cd:fb:65:9f:02:
         bd:9b:a4:17:2f:0c:76:c8:6e:bd:93:48:b2:86:5d:f8:b7:db:
         2d:24:be:ca:cf:0d:b3:39:53:25:b6:85:08:48:b1:de:d7:e9:
         46:e4:c5:5c:52:19:32:f7:74:66:e4:46:af:7c:8f:fa:4c:1e:
         67:7f:eb:46:3a:68:4f:7f:c0:39:bb:71:70:8c:80:c0:a3:fa:
         a6:3c:1d:78:d4:52:76:49:52:97:c2:d3:97:6d:28:2a:42:99:
         68:b5:a3:42:c4:9e:74:57:e2:f3:db:02:ad:3d:d5:9a:5b:32:
         7f:8a:19:20:22:6e:a9:00:ea:d6:90:b5:8e:05:da:10:6c:4d:
         ba:6d:19:e6:94:83:3d:d1:77:3e:f6:08:2d:b8:6a:3e:81:a3:
         a9:45:5d:57:65:19:8b:58:fd:74:47:51:72:61:f7:26:5d:90:
         bb:e8:42:a7:83:ab:3d:10:5b:9b:6c:b4:61:3d:29:88:60:4d:
         99:7e:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:29 2026 by rpki-client