Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f03e4757-0903-389a-919b-6f5aa952a238.roa
File:                     f03e4757-0903-389a-919b-6f5aa952a238.roa (raw, json)
Hash identifier:          9XTlLdOFq2l1DM8iL1XfKZPTznbcEREOb6noGE3zYMs=
Subject key identifier:   F5:00:23:83:3F:71:6F:2E:0C:2B:21:6E:54:5F:54:CC:3B:7C:5E:B5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584DD35B1A8C8F5BA834F9E9BC68
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f03e4757-0903-389a-919b-6f5aa952a238.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     15169
IP address blocks:        192.178.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:1a:8c:8f:5b:a8:34:f9:e9:bc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=bf558a7f-4762-4f48-b492-5e6395b92a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:5a:6a:2d:1b:f4:b8:85:7c:7d:b8:c7:be:
                    22:40:af:ea:7b:6d:ab:c8:ac:55:5d:bd:fd:ed:a4:
                    88:90:42:41:bb:df:3b:2a:73:3c:13:7e:dc:59:c2:
                    49:1e:df:9c:b4:f9:2d:63:7b:c6:61:f0:40:5a:9d:
                    55:62:42:8e:78:f1:ee:7b:6c:6e:04:2d:56:99:b2:
                    c2:7b:40:87:36:50:9d:a0:0f:72:ff:12:8c:fe:54:
                    6b:e2:a5:81:d8:a7:39:02:50:22:52:b2:9f:4e:ca:
                    ef:7f:16:a3:8e:b2:10:00:10:41:d7:11:5d:2c:17:
                    50:2c:5a:cd:1b:16:b1:33:57:fa:8e:28:e3:94:c2:
                    f6:b1:0a:d8:2f:b2:10:43:02:a6:d5:eb:8b:fd:d1:
                    a6:a8:83:0b:d5:57:43:8c:fe:24:d1:b8:0f:10:f6:
                    dd:8c:2d:b7:a1:1f:4c:a3:36:bb:b5:75:a9:75:fe:
                    ad:97:fb:82:12:3b:16:a4:89:82:c7:fe:50:6c:45:
                    36:0d:c9:8d:e5:4e:1e:fc:49:76:38:5e:7c:a5:b2:
                    55:9d:5c:9a:fd:c0:e5:d6:3a:55:83:6a:ff:65:34:
                    21:2f:0d:01:fe:bc:0b:23:34:73:da:57:88:c1:ce:
                    e2:db:e7:f0:5d:c6:0d:8d:55:d0:4c:59:0a:4b:bc:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:23:83:3F:71:6F:2E:0C:2B:21:6E:54:5F:54:CC:3B:7C:5E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f03e4757-0903-389a-919b-6f5aa952a238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c8:c9:45:87:de:73:42:2f:fe:c8:db:8c:ef:89:14:76:07:
         32:7a:98:0d:3b:7e:6c:45:d9:57:45:ef:6d:e5:74:c6:1a:4b:
         9a:a9:e8:48:72:2b:c4:3e:e8:87:72:7c:73:de:15:a1:73:3b:
         e8:12:57:54:7c:f7:9e:9f:67:c0:11:07:bc:bd:68:61:be:f1:
         22:e9:35:a3:b8:ca:41:bf:02:4e:95:97:7a:e8:c2:08:e5:17:
         c6:cc:cb:9b:45:8c:fb:1c:51:b8:27:30:37:06:c3:eb:6e:ab:
         43:55:e5:2c:61:75:9d:53:11:e7:91:e2:b3:13:0e:9f:8c:a8:
         7f:f2:59:9f:d3:64:99:e6:ca:fb:7a:99:74:ef:2a:6d:d5:54:
         8a:64:79:40:4c:fe:71:c1:5a:b7:63:2f:f8:b2:59:0c:a0:51:
         85:cd:a8:dc:a8:26:f6:10:ef:ce:27:80:9d:ee:ba:94:1a:4d:
         7b:84:89:a0:cf:41:7a:0a:e6:67:97:c8:15:9b:2b:e6:5f:74:
         0e:c2:6f:f2:85:26:81:67:25:1a:92:83:32:4f:d2:08:5c:67:
         51:1c:a4:5a:f7:83:99:87:fb:5b:d4:d4:05:72:3b:d6:09:53:
         7f:0f:02:42:8d:1c:e4:ac:50:99:70:04:1c:cc:d7:05:10:10:
         f2:16:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:31 2026 by rpki-client