Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/012484a9-0279-3886-a0b2-d1d4b6271aa7.roa
File:                     012484a9-0279-3886-a0b2-d1d4b6271aa7.roa (raw, json)
Hash identifier:          /shROgVb9ddKK14YsBKKiSTu5lvj6esM8Ylu94hv840=
Subject key identifier:   86:1C:A2:7F:96:47:48:B6:6A:E3:1F:D2:4B:2C:80:6B:0A:3C:BC:F2
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584D55BA4B0D1875844371A63110
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/012484a9-0279-3886-a0b2-d1d4b6271aa7.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        160.153.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:4b:0d:18:75:84:43:71:a6:31:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=7e627235-bdc1-4b80-a5f5-e40e1afff995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:58:5f:88:81:6f:ba:8f:30:fa:df:cc:68:a5:
                    8d:77:ca:16:54:98:a7:b5:b3:64:e9:86:f6:e2:d3:
                    7e:a7:a2:e5:93:12:f3:60:f2:73:e0:b1:c1:1a:dd:
                    56:5b:b3:6f:0c:5b:c7:57:83:58:c7:23:ef:0a:56:
                    6c:e8:b5:6e:4a:5c:a3:4a:e9:9a:d8:dd:56:64:3f:
                    6a:6f:5d:33:21:c3:9d:a7:76:db:39:0a:24:ab:5d:
                    58:10:28:d3:31:b8:39:66:4c:30:30:ee:d0:e5:77:
                    09:32:1e:97:28:d3:8a:c6:43:58:60:31:e6:27:18:
                    29:0a:e0:ac:85:32:cc:15:d1:6c:13:9a:a2:9f:6e:
                    f5:39:56:fc:78:48:5d:5e:65:64:0e:b8:68:a4:9f:
                    5a:29:0a:16:7e:15:1a:45:db:a5:97:60:f6:43:a0:
                    3c:3e:e5:42:4b:40:cc:56:30:68:f0:b9:2a:d0:bc:
                    53:be:b5:8b:46:2a:ca:f3:67:34:98:21:7c:5c:d4:
                    6c:c6:38:c3:37:6b:dd:c6:99:77:50:68:f2:43:a2:
                    6c:4a:c2:d8:bd:8d:0f:c8:9c:72:38:87:b5:96:8a:
                    68:44:4a:c3:76:66:6a:78:ed:1c:83:a1:d5:db:9e:
                    10:c8:ad:43:e3:1a:6f:07:2e:f4:4c:b3:81:4b:32:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1C:A2:7F:96:47:48:B6:6A:E3:1F:D2:4B:2C:80:6B:0A:3C:BC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/012484a9-0279-3886-a0b2-d1d4b6271aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0b:56:6e:1a:af:cd:4c:ba:d4:29:88:c7:ef:86:7d:4b:7b:
         01:22:fb:5a:c4:14:3e:98:86:5a:11:be:20:62:7b:ef:c7:41:
         d8:19:b8:21:dd:d3:6e:ef:88:9d:8f:02:e8:36:dc:ff:50:4c:
         f5:27:eb:91:aa:06:25:42:7a:b6:75:56:51:fd:48:a7:c2:0c:
         9f:49:68:7c:df:fb:fc:f7:ed:43:f2:2e:96:f0:0e:5e:17:8d:
         9b:7c:a9:d9:29:8a:ac:2c:94:f1:62:0d:33:d6:8a:f3:6f:3e:
         56:c3:7c:36:16:0b:bb:84:63:31:04:12:e9:5e:72:90:8c:22:
         c3:57:8f:da:01:54:e9:4a:e2:93:a5:25:4a:19:a2:96:68:2e:
         6b:51:e2:04:40:b9:94:37:8f:4f:99:08:03:64:b2:f2:5e:9d:
         9d:a2:69:51:a1:31:ad:cf:6d:50:fc:ba:04:ee:95:1a:a2:b9:
         de:80:43:b8:ef:f4:e5:ef:6c:60:2c:a0:41:3d:62:36:c7:35:
         53:d9:d7:86:d6:ca:38:d0:c9:07:31:ec:07:ec:34:32:e3:b0:
         f8:60:55:9d:48:ed:64:01:dd:f8:9a:09:81:b5:24:19:77:dd:
         aa:0f:de:4a:c6:56:52:63:b2:7f:ba:3a:dc:9e:aa:c9:cf:fc:
         10:7c:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:50 2026 by rpki-client