Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/556256f3-71f8-39ae-b5c5-3261af0bb871.roa
File:                     556256f3-71f8-39ae-b5c5-3261af0bb871.roa (raw, json)
Hash identifier:          7VQAYMWDrV8VGWbCKTr+3hKPj35eYTEln6wfdECEUdg=
Subject key identifier:   64:DF:60:57:C0:45:23:F8:DB:CA:4C:32:CC:9C:37:AB:74:7A:47:0A
Certificate issuer:       /CN=80713a6d-ea31-48fc-a530-e2898cffb87a
Certificate serial:       010D0C9F4328584D4D5A5D8A9ED8708868B6F000
Authority key identifier: BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/556256f3-71f8-39ae-b5c5-3261af0bb871.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        192.132.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5d:8a:9e:d8:70:88:68:b6:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80713a6d-ea31-48fc-a530-e2898cffb87a
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=e038bdde-3362-4732-8638-a1c0de30ab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:58:77:bb:f0:83:58:a9:6e:ec:3b:18:fe:
                    0b:cb:ff:5a:e3:fd:2e:37:f2:91:0b:a9:3b:81:6f:
                    74:0b:9c:6f:5a:9d:b4:e6:f4:59:cf:36:69:7b:87:
                    2c:ed:2d:c5:aa:e3:56:76:36:c8:0b:03:da:46:1e:
                    2b:a3:65:63:e1:be:cf:4a:5c:b2:32:67:93:38:ce:
                    10:e8:49:c0:c4:a4:9f:5e:3e:0a:dd:9e:0a:10:1a:
                    7e:27:a0:be:db:c7:fe:21:33:19:6a:07:e1:05:bc:
                    43:f7:48:a7:59:1d:53:df:90:cd:90:42:b3:be:d6:
                    4f:11:eb:cc:29:25:11:3c:fc:80:8f:51:dc:e0:7a:
                    d4:10:d6:d4:8f:f9:1d:05:2c:ef:00:99:b3:27:58:
                    d1:7d:4d:da:5e:51:c3:dd:67:15:d9:a6:73:6b:10:
                    2d:a8:b9:81:e7:71:52:b5:f8:ec:c0:b1:4c:89:f1:
                    6f:f9:8e:de:1e:83:e3:bf:9d:8a:f5:47:eb:fd:1b:
                    2f:fe:b7:da:86:4f:54:32:9d:0d:c5:6b:bd:e0:c4:
                    a1:99:5f:43:eb:ad:ba:30:d4:01:f1:86:50:8a:a3:
                    df:1b:56:2e:a3:1d:83:09:1d:6a:9e:6a:97:17:e0:
                    8e:6b:69:7b:d1:b2:64:e0:bc:07:9f:e9:c3:42:a3:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:60:57:C0:45:23:F8:DB:CA:4C:32:CC:9C:37:AB:74:7A:47:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/556256f3-71f8-39ae-b5c5-3261af0bb871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.crl

            X509v3 Authority Key Identifier:
                keyid:BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:28:bd:86:36:0e:71:39:60:c7:13:47:e8:0d:32:89:a7:
         43:f3:8a:a1:2a:3b:d3:07:5a:65:01:8e:df:e5:80:6e:4d:52:
         87:1e:6d:3a:1f:b2:de:57:b9:a4:92:ab:62:84:53:42:7a:74:
         48:ef:8b:a6:12:d0:9f:10:b7:32:5b:92:b2:86:4d:b3:76:d3:
         e9:ae:d7:72:d6:44:dc:e8:86:da:1a:25:1b:41:c0:f1:4e:44:
         28:6a:b2:0a:9b:ea:0e:a2:3f:f6:72:97:f9:58:9f:8f:80:cd:
         1c:0b:2d:f9:40:99:e0:28:c5:8b:c1:12:bb:85:c8:a3:9e:f2:
         89:28:10:54:98:00:80:67:fe:b0:df:28:0e:da:a5:9f:72:7c:
         9f:15:ef:21:e0:9c:0b:de:60:9e:ae:4e:39:95:ad:2b:33:27:
         df:a0:33:07:b0:25:70:7c:a9:2d:04:63:1c:af:1e:f5:e7:4c:
         14:e2:13:89:d9:e6:0a:f9:16:5a:cc:d5:a8:61:59:47:37:b3:
         a7:f0:91:ed:79:4b:9d:53:ad:41:9f:bd:82:9e:31:2c:d3:79:
         3d:18:94:2a:d3:bf:ae:fc:fd:9d:ce:07:b5:0b:d0:f4:d2:31:
         9c:56:be:3a:0d:fa:ed:de:34:e5:6d:6e:a7:b0:9a:57:04:31:
         22:9c:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:05 2026 by rpki-client