Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d5bbf29b-f71e-38fd-b6ff-6bdca27bab92.roa
File:                     d5bbf29b-f71e-38fd-b6ff-6bdca27bab92.roa (raw, json)
Hash identifier:          bKJ+rBUCuncv4f4LIO1ciaXJweGuCtMR6JnFWDHU9aI=
Subject key identifier:   41:EB:E6:9C:DC:42:91:54:72:5D:8E:40:7A:FB:71:23:F1:B5:C0:8C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAE2F4028B5D0F5EB2B80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d5bbf29b-f71e-38fd-b6ff-6bdca27bab92.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     53813
IP address blocks:        209.55.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ae:2f:40:28:b5:d0:f5:eb:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=ac334e38-6d0d-4f7a-a62d-2bd13fb8061f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:30:2d:31:16:7f:99:94:5e:23:bc:b1:99:
                    52:76:4e:25:eb:af:35:e0:f7:48:3a:9c:54:ba:76:
                    eb:1e:06:d4:fe:37:20:81:98:32:ce:d9:72:5c:5d:
                    67:8b:18:96:69:d9:af:e2:49:81:a5:b7:92:40:5c:
                    a9:11:04:0b:7f:5f:41:09:7c:bf:9b:52:e8:42:2c:
                    35:d9:a7:24:2c:bc:89:90:83:34:bc:3f:1a:90:d2:
                    28:0a:4f:d4:f1:a8:37:3a:4a:f0:b4:de:1a:ee:3e:
                    79:d1:7b:dc:46:1f:25:42:72:04:ed:fa:d6:10:38:
                    49:e0:83:5a:79:e4:37:e2:de:f5:be:02:19:ad:65:
                    33:44:17:4a:2e:4f:ac:79:1c:c9:f6:c9:b2:c0:2f:
                    f6:b1:a5:be:c6:e1:91:cd:af:83:24:5c:70:a7:3d:
                    32:18:ba:31:d8:89:6c:63:e4:7c:12:fb:79:bc:31:
                    d5:4a:51:75:de:95:08:8c:95:a8:c2:38:1b:7c:8c:
                    65:f7:12:59:37:97:ce:80:d2:44:d1:db:8a:5d:2a:
                    0e:a6:ef:d7:2f:8f:41:34:45:49:95:70:dd:ee:5b:
                    b2:db:f2:de:74:41:35:1f:c3:15:b3:a3:4d:3d:32:
                    ea:1c:e3:24:44:f7:f9:0f:26:fb:60:ef:c6:2f:87:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EB:E6:9C:DC:42:91:54:72:5D:8E:40:7A:FB:71:23:F1:B5:C0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d5bbf29b-f71e-38fd-b6ff-6bdca27bab92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:f3:68:21:d2:ff:31:2a:87:98:72:f9:78:fe:7c:c4:45:
         bc:3b:07:97:b2:4b:b7:16:ea:f5:a2:4c:88:cf:36:0c:b1:41:
         9a:04:dd:43:9c:cc:a1:2b:73:03:e1:b0:f7:7a:6b:a5:0b:c1:
         1b:56:52:8f:21:4b:06:b3:8a:4b:77:92:bc:49:68:05:6d:2e:
         36:bc:5d:46:2e:be:23:a2:9c:02:67:c3:5c:6a:c1:e2:ae:89:
         c4:a7:7a:e1:fc:ab:26:5e:cc:51:73:17:aa:39:74:e1:dd:fe:
         3b:cc:c8:5a:4a:2c:fd:72:48:0f:0a:a8:3c:00:2b:6a:95:92:
         dc:6b:1b:a9:5c:c1:37:a3:90:63:b5:ea:61:d9:ad:36:df:ee:
         9a:7a:dc:b4:16:55:fd:d1:02:73:2b:62:01:85:55:9f:34:a6:
         58:6f:2f:ff:fd:6b:0d:df:6e:c5:6d:e9:11:88:1e:57:4a:cc:
         c1:d5:58:c0:d9:c1:b3:69:0a:43:fc:05:e2:fe:4e:ba:7a:92:
         64:47:75:f7:69:0e:44:dc:1c:32:62:ba:e3:b8:5a:af:fb:80:
         e4:ff:95:d5:12:b8:bf:9f:e7:2b:88:9a:66:dc:b2:04:95:a2:
         7d:8b:e6:7b:15:78:cd:55:70:cc:8c:aa:be:5e:95:52:3e:8e:
         89:0c:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:50 2026 by rpki-client