Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/512c0541-b9b3-3942-b208-437204f15d31.roa
File:                     512c0541-b9b3-3942-b208-437204f15d31.roa (raw, json)
Hash identifier:          pfiSt13bY726tfxXToWsIDzTKPkgLa+Gdnu4c/6DVZ8=
Subject key identifier:   99:29:37:DF:67:9F:D9:02:FA:91:D7:A3:B3:5B:DC:05:63:EF:A5:42
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D773A7703B844498776600E20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/512c0541-b9b3-3942-b208-437204f15d31.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     24319
IP address blocks:        184.87.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:77:03:b8:44:49:87:76:60:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=5c0e596a-57b9-41e7-9ef0-3cea7502526e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:d4:39:2d:c0:85:54:c8:90:96:83:b0:29:
                    87:2e:36:c4:77:07:11:55:d1:cc:c5:f0:63:a0:74:
                    62:fa:ef:6e:a0:17:cd:cf:fa:cf:9f:fa:df:41:51:
                    27:83:72:5b:85:ad:dd:0d:13:01:2c:71:1b:28:9a:
                    a4:5f:6a:02:7e:97:02:c6:81:b1:ba:a9:40:5a:32:
                    d4:2c:b3:83:c8:7a:77:44:c7:04:11:7a:65:b0:df:
                    d1:cd:b1:7d:05:c2:23:06:6f:06:7f:5c:61:c7:c4:
                    ff:40:dd:ca:4e:a6:00:b1:6b:4e:d7:2f:44:b9:ad:
                    76:3c:00:e1:df:3b:67:40:f7:05:a3:8c:75:77:15:
                    a9:a5:e1:75:84:6f:81:63:a3:83:d1:4d:74:1a:c4:
                    6d:c9:a1:8f:79:2a:d4:56:fa:90:a0:09:e6:a4:78:
                    b1:5d:55:6a:3a:b6:d7:67:0a:f1:7e:08:66:19:ba:
                    2c:c9:fe:ed:8a:06:7b:fd:ca:07:18:31:88:46:91:
                    07:30:89:04:3a:24:f9:4f:08:d1:8f:e3:4d:91:80:
                    c9:aa:01:df:55:40:8f:4e:47:d2:99:95:d3:4e:fe:
                    14:e9:77:54:ea:ed:98:30:f5:bb:3c:b7:14:66:18:
                    8c:dd:48:7d:27:79:9d:1a:1d:c2:40:9b:cf:57:9b:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:29:37:DF:67:9F:D9:02:FA:91:D7:A3:B3:5B:DC:05:63:EF:A5:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/512c0541-b9b3-3942-b208-437204f15d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3c:48:75:41:8c:62:da:05:f6:42:b1:57:67:e1:b3:77:72:
         f8:41:b9:53:0e:b0:4f:1c:91:62:a0:79:19:79:85:b3:6c:80:
         a9:d8:a1:16:21:0b:a2:2b:dd:38:9c:44:33:84:41:3e:c3:68:
         b9:d2:ca:a3:60:89:6f:a2:a1:cd:bd:cf:4f:12:dd:60:13:eb:
         90:b7:e5:f6:1c:83:00:e5:35:6d:ef:e4:20:46:22:fa:70:5a:
         9b:d1:3b:19:19:6e:70:22:3c:a7:1e:d5:a0:ec:89:99:bf:b3:
         b0:f7:d4:15:6a:b6:9d:7d:f0:9d:45:29:9d:11:4d:73:7b:15:
         fe:1d:39:06:94:55:55:47:35:76:c6:6f:03:3a:7f:24:30:42:
         06:68:a3:f6:74:74:d9:05:41:69:7f:fc:20:a4:e0:14:9e:fc:
         11:19:33:93:dc:f0:ff:33:86:e2:e9:47:6f:91:ba:c0:f2:19:
         fa:89:ee:39:2e:21:02:0e:bc:ce:7a:7b:00:67:ac:dd:e2:81:
         55:b9:cb:9c:f3:c3:cf:49:06:e4:7b:31:67:02:1f:3e:cf:f7:
         e4:cd:c5:42:bd:36:36:b8:67:aa:e8:61:e7:80:52:7b:2d:ac:
         dc:a5:d6:c3:05:51:20:35:04:f6:c4:26:89:93:7f:74:d9:5d:
         e2:71:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:49 2026 by rpki-client