Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa
File:                     e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa (raw, json)
Hash identifier:          puVzyp5OgQpazyCIZKaBI63RCXYs46WxKzZAwy99h3Q=
Subject key identifier:   13:07:F3:EE:DA:AE:67:11:22:18:1F:39:CC:92:7C:17:02:33:73:FA
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328584D0217B2001AB25CCC26E177C0
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     32709
IP address blocks:        168.92.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:b2:00:1a:b2:5c:cc:26:e1:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=0b0ca85c-9aa8-4a5f-a7a0-853fa8ed5d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:2a:ad:31:eb:01:f1:11:81:68:41:a4:ac:
                    d0:a0:af:2d:e4:f2:b2:e0:5b:81:4f:18:ff:48:3c:
                    40:47:6e:fb:d4:af:da:4c:61:27:df:05:64:cd:3d:
                    36:2c:bd:56:b4:7d:33:67:b6:f6:61:cf:70:e8:06:
                    bb:bb:02:5b:3c:1a:10:cc:00:65:3f:3e:98:d9:a8:
                    9a:18:d7:2e:cd:4c:18:17:21:4e:ea:38:d9:01:4c:
                    bc:7a:1c:4e:43:9e:95:a5:38:8e:58:36:f0:47:4b:
                    fb:25:6f:0d:a2:0c:b1:85:66:3a:3d:87:f6:e2:5c:
                    8d:f6:4c:bb:88:8f:46:e2:0a:78:2d:b5:8e:4d:47:
                    dc:fb:a6:18:6d:5e:52:ee:33:04:b5:a8:13:52:47:
                    77:3c:62:65:a7:17:d3:4d:34:ea:ab:19:08:65:34:
                    7d:73:e1:f0:91:47:2e:6d:67:73:97:90:7e:09:c7:
                    3c:01:0a:41:33:04:4d:49:bd:d8:6a:a5:00:35:1d:
                    dd:98:3d:85:50:03:28:70:a4:77:7e:35:69:ab:b1:
                    59:31:fc:37:bb:7b:a1:89:b4:bf:a6:ff:e9:5d:a6:
                    07:30:d8:7e:59:53:a7:c7:6e:fb:ac:36:51:86:0a:
                    2a:d6:01:1f:3f:78:0e:2c:31:ea:5a:b2:c6:87:8c:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:07:F3:EE:DA:AE:67:11:22:18:1F:39:CC:92:7C:17:02:33:73:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e045b047-e3c4-38ab-aace-d4c0e412a6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.92.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:cc:ca:41:1a:4b:ae:fa:da:b3:9b:24:b7:1a:4b:8d:bd:c4:
         12:9e:39:4e:ad:17:ef:a9:5a:c4:44:db:60:0c:b4:27:73:d5:
         d9:39:e1:09:dc:2f:3a:e3:55:dc:82:d1:a0:f1:e0:92:f2:fd:
         c6:ce:8e:03:ef:c4:e9:c7:a2:42:28:08:b8:52:48:58:ae:72:
         7c:2a:e3:b5:4a:90:2d:7d:72:87:1c:e6:95:c0:c9:5b:75:c9:
         ca:73:c5:f9:08:5d:f2:1f:48:b0:bc:0c:12:81:ec:b9:54:6e:
         d2:f9:43:56:d8:1f:fb:bd:56:6a:4a:e0:10:60:49:3e:f8:10:
         6c:0a:37:66:8d:57:43:95:cc:5d:23:b5:84:92:2d:16:46:47:
         e9:0d:f5:81:c7:1e:73:92:79:ed:d6:fe:a2:20:99:ad:81:f0:
         3f:10:a1:7c:00:a0:49:6c:86:97:e8:ee:14:f7:c8:dc:69:ba:
         aa:84:9d:5f:3e:ec:95:8c:f7:3d:5f:5d:d7:7c:15:d3:e2:49:
         0f:f5:69:42:b3:7a:9e:e4:25:3d:25:1d:47:32:d8:ca:7f:a0:
         31:3e:e6:3e:ca:a4:67:c6:ed:96:a1:5e:f1:89:ba:ee:cd:8f:
         71:53:fc:45:b5:43:b4:b2:d2:de:c2:38:46:e8:07:21:3f:d6:
         e0:aa:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:41 2026 by rpki-client