Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
File:                     fde4e71b-e3e8-3394-a523-a42805ae411a.roa (raw, json)
Hash identifier:          oLN7qeLu+Ixd0RqruklJ14QqLwj2urNp7u5N9yly8H4=
Subject key identifier:   34:FD:B9:D6:EE:93:3C:5D:DB:BC:C4:36:FE:FA:57:DB:4B:5E:DF:0C
Certificate issuer:       /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial:       010D0C9F4328584CBDB1DEA772AE087244805858
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     14500
IP address blocks:        192.151.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:de:a7:72:ae:08:72:44:80:58:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=4695dc0d-e4d4-4c58-94b1-b59b67e267dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a0:5c:02:7c:8d:23:bb:2a:da:e2:55:c2:71:
                    32:f0:46:24:b1:11:fd:49:b0:77:36:11:af:4c:e0:
                    a8:a3:2c:f0:e3:b1:5a:67:40:6b:f5:9b:d1:44:e0:
                    8a:ad:0a:3a:eb:2a:27:34:e2:f2:6e:b5:4a:b8:f1:
                    90:ce:b0:d0:bc:2a:5b:98:65:ee:dd:c8:98:b7:a6:
                    26:f6:45:c9:32:6f:8f:67:ab:ff:f0:fe:d7:29:6c:
                    28:bd:51:0b:87:d4:02:cf:d6:75:df:19:d6:fc:d5:
                    b4:bb:7e:1f:ad:96:2c:a1:c0:2f:e7:a0:91:13:9d:
                    49:26:ee:79:f1:27:a4:d4:6d:f0:b7:cd:2b:c5:12:
                    99:39:22:6c:27:ff:9d:30:78:2f:e0:3c:e9:e1:6f:
                    59:3d:24:2a:cd:d4:aa:be:fa:3d:4d:64:ef:ba:5f:
                    1a:6a:f9:0b:71:e1:e8:22:33:10:22:12:ee:fb:01:
                    48:7a:b3:d1:26:39:22:2a:16:d3:32:41:bc:80:3b:
                    76:e5:a9:3c:31:8b:fe:3c:8c:ac:72:8e:ab:c8:7a:
                    9c:3c:03:ed:3b:8a:60:5c:f6:10:a8:5b:95:93:55:
                    ad:c8:77:28:d4:73:3d:5c:90:60:87:6d:f6:80:3b:
                    d6:a2:d8:07:3b:80:7e:ff:b1:84:4a:1d:09:93:c7:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:B9:D6:EE:93:3C:5D:DB:BC:C4:36:FE:FA:57:DB:4B:5E:DF:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl

            X509v3 Authority Key Identifier:
                keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.151.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:78:04:ee:ad:46:c5:a2:ba:25:ea:e1:29:4e:32:59:95:
         14:1d:48:18:b6:e6:93:ee:77:79:ca:77:83:6c:ea:ef:9f:f9:
         bb:99:45:37:f2:0d:dd:46:c3:bc:2d:e2:3a:75:10:6c:a0:3f:
         4e:1e:0d:8c:93:d2:96:5a:9c:c7:32:d8:f3:6a:47:f0:c4:cb:
         32:7a:fe:c6:88:df:c9:c0:c4:0d:e7:df:b3:73:7b:6e:a1:eb:
         91:e0:02:99:f7:cf:10:2e:77:f0:58:47:0c:49:b1:15:39:51:
         b1:2f:85:64:8a:5b:d8:40:96:5b:84:04:a3:83:79:d5:e5:a7:
         f2:eb:b4:a4:99:9a:28:87:99:a7:20:b0:25:14:f1:d3:50:d2:
         6d:5c:aa:20:06:5b:8c:d9:5e:b9:c9:1e:0e:77:50:24:0f:66:
         73:f3:04:62:45:0e:a1:26:1f:ca:df:48:a6:0e:64:ac:de:bb:
         dd:2a:64:92:2e:8d:19:c0:7c:35:31:ea:a8:e0:cf:40:36:6b:
         61:63:9e:37:30:14:af:44:3c:d3:0d:59:65:12:2d:8a:8d:05:
         f3:20:2c:12:ee:ae:89:75:45:b8:8a:2f:41:46:08:c7:17:5e:
         2a:d5:cf:88:44:3d:9a:ea:67:b9:0c:c4:c7:e6:b8:1f:3d:da:
         3e:a6:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:42 2026 by rpki-client