Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
File:                     c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa (raw, json)
Hash identifier:          Eq9T39pRLgroL5RH/nL7g8i1GX8/T5KeXkefh9tbNkk=
Subject key identifier:   1A:05:39:B4:26:35:25:D6:FD:4B:98:18:3A:3A:B1:A8:75:91:8A:44
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584C6E2171727114275446A77840
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     15344
IP address blocks:        24.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:71:72:71:14:27:54:46:a7:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=f3b1c7a3-b7e2-4370-bd7f-4da79392e9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:f1:6f:c0:99:6b:87:a7:24:f3:1b:de:46:
                    7b:fd:82:8e:ea:bc:59:57:59:1b:dd:7b:70:a5:63:
                    01:3d:3d:d6:ee:ba:ca:e8:1f:a6:23:a6:9b:ef:f4:
                    91:a5:d7:23:3f:19:f4:f4:08:d5:ab:7a:f4:11:63:
                    1c:91:73:68:f7:65:c5:dd:70:b2:84:6d:e4:e9:16:
                    50:c6:d5:e3:55:69:27:56:b0:f4:75:5d:65:5a:f8:
                    c7:5c:23:ad:2f:51:a4:14:07:b0:9a:af:f0:d9:c8:
                    03:66:65:ac:52:b2:e1:ae:a6:37:af:63:60:fe:fb:
                    50:9f:65:3f:4d:19:0d:8c:15:d6:07:26:2c:c1:19:
                    e9:04:26:99:7a:bf:92:fb:04:90:8a:95:42:93:f7:
                    b0:52:8c:9b:39:58:d4:8c:94:32:bf:ce:a5:2f:05:
                    fc:11:ae:61:6c:d9:97:9c:ad:a7:53:6d:ec:62:05:
                    62:8c:89:d0:32:39:f3:e6:67:61:b7:51:80:bd:eb:
                    7f:3d:2a:ea:ed:e9:b3:f0:4d:ba:15:50:9b:ee:6a:
                    62:2b:dc:98:af:e6:f4:f0:ef:8b:9b:b1:f6:11:36:
                    bb:6f:8d:53:40:62:d0:31:f5:48:5c:c4:b5:c9:92:
                    5b:67:ab:c0:2c:56:9c:6f:f2:58:6c:f1:92:3e:e0:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:39:B4:26:35:25:D6:FD:4B:98:18:3A:3A:B1:A8:75:91:8A:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.92.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:de:dc:c3:51:97:c2:ee:d5:33:4a:be:4c:04:48:10:d4:54:
         45:5f:00:69:36:7d:3f:d0:3f:95:bc:b9:57:e6:d1:95:53:5a:
         1e:18:23:5a:81:21:0d:d3:60:77:2e:1b:db:72:56:ba:8d:e6:
         00:e7:11:b0:37:7a:94:bf:21:47:56:47:17:d3:55:7c:25:ba:
         05:64:44:66:44:76:b4:c0:6d:83:d2:63:8d:03:f7:76:67:1c:
         55:3b:d9:fc:7f:c8:4e:65:17:52:1e:42:b0:66:78:de:47:2c:
         8e:b1:e4:dc:8b:c8:14:a5:be:73:14:f3:00:61:84:c8:ca:54:
         1a:13:bf:39:a2:5e:d8:44:85:5c:00:6d:97:8b:c9:c9:d0:35:
         65:99:c1:5f:c5:6e:74:59:87:87:73:67:2c:97:de:60:2b:8d:
         cc:08:69:49:48:c0:18:32:48:a9:41:1a:3a:26:4e:75:d1:bd:
         f8:d2:4d:fa:09:5c:cc:ea:93:11:10:fd:3e:87:93:fa:bb:da:
         e1:02:06:9b:bd:2c:e3:27:b0:b6:36:2a:ce:ce:25:63:b2:1c:
         a1:be:c2:24:6e:67:43:44:b8:ff:3f:1b:b8:5b:cd:01:65:4d:
         64:bc:4c:5d:cf:6d:bc:70:8c:d1:dd:c9:41:91:1a:e0:e3:28:
         cc:14:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:26 2026 by rpki-client