Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07196c38-141a-3380-b4e9-860f4809fb8c.roa
File:                     07196c38-141a-3380-b4e9-860f4809fb8c.roa (raw, json)
Hash identifier:          /ulr5dJY0sR9GJJ+rMouCc3Wv6w49H3IhqU/W9FDZFA=
Subject key identifier:   BB:F0:52:16:9D:26:48:61:C8:16:7F:35:49:12:94:B7:53:AA:37:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87CF56C5E8C48E5A9F5F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07196c38-141a-3380-b4e9-860f4809fb8c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33491
IP address blocks:        162.151.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:cf:56:c5:e8:c4:8e:5a:9f:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=87015dc1-1263-4eb7-b8f8-749532fd2fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2c:c2:21:35:2c:7c:7d:f4:39:79:fd:ea:89:
                    a4:7f:88:20:56:c3:36:0f:eb:4c:6d:59:7e:1e:00:
                    c5:8a:38:9d:a5:cb:46:6b:86:63:a6:28:8e:58:df:
                    71:5f:d2:38:80:2e:e2:85:e1:5f:d2:1c:73:b2:49:
                    0e:f4:95:0f:e2:ae:d1:dc:b0:da:c3:a0:da:04:67:
                    4a:9f:f1:7b:a1:61:76:5c:b2:d6:1a:c3:4b:36:3d:
                    1d:0a:7c:33:7d:81:db:98:fd:8c:b9:dd:6d:bd:52:
                    29:4d:eb:5f:a9:e0:f7:80:23:21:f7:b1:dc:95:4c:
                    15:d7:20:2a:df:92:73:3c:c1:c5:83:f1:f0:2c:45:
                    78:08:72:05:50:61:39:c6:29:67:26:59:4f:62:65:
                    97:ef:17:ab:31:1b:c7:6e:f8:f1:2c:10:a3:e4:3d:
                    0d:2a:28:61:78:0d:82:f4:17:94:33:52:fb:d0:9b:
                    27:98:31:34:1a:c2:d1:d4:6f:45:d9:3c:79:08:97:
                    0c:d0:8c:4e:61:67:e4:46:7b:bd:f9:0c:fe:8c:a0:
                    bf:cc:bf:de:9f:b8:41:51:ee:fa:c2:ba:c2:19:7c:
                    33:19:00:89:42:08:fd:37:e4:52:12:ef:da:a1:e0:
                    37:07:d6:7b:a2:88:44:72:62:c2:78:60:19:8a:62:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:52:16:9D:26:48:61:C8:16:7F:35:49:12:94:B7:53:AA:37:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07196c38-141a-3380-b4e9-860f4809fb8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:f8:62:96:ed:6e:33:b6:ce:7d:41:d1:fa:c4:ef:86:b7:
         8b:86:a6:3f:42:e6:83:b6:f4:c4:14:b8:92:03:c5:0b:d4:f9:
         c7:7f:9c:fe:92:58:a6:e9:da:d2:0b:5d:f5:e9:fb:36:14:a1:
         1d:4d:89:a4:b7:2d:ee:5e:fd:95:0e:9d:a1:bc:7e:51:65:3c:
         a9:ce:78:71:3c:da:80:27:60:6e:dd:41:6f:f7:6d:39:cf:26:
         46:db:a4:c0:72:05:05:d7:46:f3:3d:4f:5a:aa:76:a1:a6:23:
         8d:8e:e6:1f:63:3c:f5:17:25:5c:2b:e4:7d:2a:17:5d:7f:75:
         01:aa:a2:c2:5e:b7:57:ef:f1:e8:4f:cc:44:aa:f9:04:a5:2c:
         ba:0d:1f:91:76:f9:ad:cf:20:e0:c4:23:16:c1:34:a7:d5:c6:
         48:5a:7a:f3:77:e5:f9:7b:5e:41:c1:e9:bb:13:23:39:a2:d8:
         5a:5d:70:56:49:56:4d:8d:a7:e5:0f:ea:b4:ca:06:0f:18:42:
         52:9b:4f:df:a9:f0:9c:25:a9:61:7a:a9:12:3e:47:f9:9b:f4:
         21:93:8f:20:d0:83:1d:1d:09:43:5f:f1:43:cf:0c:f1:eb:5a:
         ea:7e:ed:bb:72:51:1c:c8:70:ae:fc:b7:88:8b:ad:3b:8c:d6:
         33:1b:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:25:38 2026 by rpki-client