Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/4118a174-435e-3c5c-b30d-01d0d7bf42aa.roa
File:                     4118a174-435e-3c5c-b30d-01d0d7bf42aa.roa (raw, json)
Hash identifier:          pvNG3HCID/mwhaf5RvDZjrWsdiHj2luzdgv191eBz1g=
Subject key identifier:   A5:1D:EF:8E:35:85:3B:D3:23:73:E1:8B:98:81:A5:E9:00:71:00:0F
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584DEC7B26847229EBE9CA301080
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/4118a174-435e-3c5c-b30d-01d0d7bf42aa.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        150.9.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:26:84:72:29:eb:e9:ca:30:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=a38caa61-3ad9-4fa3-8e42-fbc2c99fa177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:f0:57:ac:be:71:25:98:e9:8d:15:ec:54:
                    36:1e:32:95:c8:57:a8:18:37:b7:e1:72:29:5d:3f:
                    8e:48:e5:9d:97:61:66:d3:58:d1:a7:aa:67:3f:1a:
                    c1:43:08:2b:56:4e:6b:54:5a:0d:35:be:86:ef:fc:
                    e0:56:25:28:29:dc:40:0f:c6:d7:2f:ad:6f:06:9a:
                    e4:c2:4a:76:d7:4b:94:06:a6:77:42:7c:c1:87:92:
                    99:0b:79:f8:05:75:56:a0:fb:7a:5e:5d:4a:66:66:
                    25:7e:a4:ee:88:65:e6:88:35:06:fb:2c:94:80:f8:
                    bb:09:3d:b4:4f:53:e9:a3:e1:d4:93:1e:f3:cf:36:
                    65:bc:d6:99:c3:97:8a:0a:fa:73:71:4a:3e:df:6f:
                    72:96:c3:f4:61:df:d1:0d:da:7f:1b:44:b6:70:95:
                    b5:4f:e5:00:c7:d8:1d:e8:8b:45:9f:c3:37:80:f7:
                    3f:9c:8c:e8:55:b9:bf:5e:44:ba:0a:07:2d:1b:19:
                    af:39:66:2c:e3:76:e6:0b:cb:92:9f:a0:da:bc:76:
                    29:91:ae:c8:9e:25:0d:61:f7:9d:5e:b7:89:2e:9d:
                    a0:35:07:e8:f4:96:cc:8c:46:44:b9:e7:2a:b2:b2:
                    0e:3f:47:65:9f:4e:e3:05:24:63:f7:7d:5e:94:65:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1D:EF:8E:35:85:3B:D3:23:73:E1:8B:98:81:A5:E9:00:71:00:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/4118a174-435e-3c5c-b30d-01d0d7bf42aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:15:96:aa:84:7d:6f:2b:b3:f7:c7:11:92:d6:53:89:f6:
         72:1e:be:53:fe:63:a4:0c:a5:1a:c1:9b:ff:a0:ad:fc:6c:db:
         27:a9:4b:c7:52:39:e8:5f:6d:3f:08:dc:5b:7f:e3:99:ea:bd:
         74:43:cb:b3:52:f3:f0:2f:48:b7:ce:d4:f6:c0:7a:c4:16:52:
         b6:50:15:ff:1f:69:77:ff:9f:58:2b:6a:5a:b9:3f:aa:02:dd:
         4e:a5:19:f0:b9:39:92:e1:c9:b4:92:fa:fc:59:05:32:06:96:
         47:d6:1a:3d:e7:d5:a3:9c:07:c9:60:91:08:9b:2d:bc:9c:b3:
         7f:f9:76:8f:2b:46:40:6f:b5:44:42:7f:2f:29:37:7e:b7:ce:
         1f:24:aa:4a:a2:80:d9:81:20:29:24:5c:81:7d:1a:96:04:85:
         9c:10:fb:80:f5:32:3d:60:af:32:f0:7e:26:4d:3f:01:93:98:
         af:50:e0:1c:66:5a:ea:af:80:26:10:54:46:f6:ec:6b:ac:6a:
         d6:bb:7d:75:cb:3d:fa:39:30:ea:5d:14:f9:6f:3d:00:51:43:
         44:41:b3:5f:92:79:ff:35:e0:66:69:89:47:16:14:59:65:92:
         a7:26:dd:b0:34:e4:a7:87:f4:db:b5:ee:96:52:f5:63:13:2c:
         f8:69:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:58:40 2026 by rpki-client