Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa
File:                     72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa (raw, json)
Hash identifier:          tILSxdsu5bYjfDbS4rF2YKYhnF3KK7SpngFbSsj4mJs=
Subject key identifier:   93:07:77:BB:E9:91:3D:75:70:52:7E:0F:B2:BE:8B:B2:99:81:EB:5C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D4D5A59CA892EF87700DE6680
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        198.251.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:59:ca:89:2e:f8:77:00:de:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ac3b7528-35cd-433d-8422-816d32c51ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:59:6b:a4:18:c2:fd:7a:49:5d:33:eb:0a:
                    9a:a0:1c:c4:b8:3e:00:20:8f:b7:2b:48:e0:f6:aa:
                    c1:80:85:73:2e:67:13:0f:b7:b5:62:8c:fc:6f:03:
                    cb:ff:28:e8:b9:60:b2:ee:3f:b0:0f:ef:b5:0e:c1:
                    93:51:ba:c4:41:16:c0:65:56:45:be:76:d6:cc:52:
                    5d:d8:0a:48:6f:89:ec:eb:f1:8d:78:62:f4:e8:ae:
                    1e:83:eb:8a:e3:f3:65:1a:f2:69:fc:e8:4a:36:8d:
                    30:2d:01:32:a4:82:7c:a8:b7:9a:d0:23:86:83:45:
                    8f:71:66:02:fb:41:a3:4b:a3:d1:b0:32:d8:4e:d4:
                    81:53:64:8a:81:68:8e:de:27:2d:79:d2:c9:cc:31:
                    f9:ed:8d:77:a9:9c:e0:1d:df:c6:e5:30:5a:08:c8:
                    1c:f2:4d:c8:39:7d:64:20:54:63:d2:a1:d2:ea:4d:
                    c4:31:11:82:5a:c6:e0:4f:ef:8c:31:4c:be:9b:ac:
                    4a:ba:21:79:1f:0a:3f:cf:36:29:73:fa:c7:ec:e7:
                    a4:85:a5:2d:c3:9c:f7:eb:0c:f5:cb:68:64:0b:32:
                    47:88:c4:f1:18:d3:75:79:11:82:ef:63:3a:77:d8:
                    e9:7d:f0:66:22:6e:7e:28:63:6e:cd:42:f4:c7:c4:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:07:77:BB:E9:91:3D:75:70:52:7E:0F:B2:BE:8B:B2:99:81:EB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/72a29cb3-95f2-3af3-b9d2-b4e66eda3338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:8d:66:86:c3:e2:49:bb:75:fe:f1:1a:be:ae:49:cb:c9:
         c7:72:29:36:88:37:9c:f4:07:7e:ff:10:fd:19:da:63:09:22:
         f7:c6:f6:c2:43:10:6f:60:90:d2:6b:e7:c8:be:28:32:8d:aa:
         f6:59:ee:08:57:2e:7d:60:40:18:cf:69:54:4c:2b:00:c6:43:
         90:3d:69:d3:8e:ee:d3:61:29:8f:84:22:9f:46:5c:33:ef:6f:
         0f:7c:d4:b6:94:fc:9e:d2:4a:b6:b8:ff:65:7b:f4:6d:bf:29:
         f8:ea:3c:5a:cf:06:0e:4d:0b:9d:d4:87:c3:c3:ab:2e:bf:59:
         00:a3:e8:f3:86:a2:98:84:70:07:21:25:16:5a:85:15:93:8d:
         b8:4b:a7:7e:c7:b8:1d:fc:5e:61:c3:f4:a3:b4:2f:7f:73:66:
         ee:02:a2:ce:99:94:48:a4:c0:db:93:83:04:23:45:99:96:33:
         5d:69:9a:c2:a6:38:ab:b6:b3:63:90:cf:85:c0:de:60:5a:ac:
         1d:17:c0:ca:f1:96:a6:dc:4a:da:7a:0e:6d:7d:06:ba:94:ba:
         e7:fd:69:72:7f:76:dd:f5:23:78:19:6b:3d:06:f6:8d:36:03:
         a3:d8:ba:2e:98:d6:17:3a:66:16:d1:09:7c:a8:90:25:0d:80:
         5a:7c:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:58 2026 by rpki-client