Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/b547a18a-0bdb-3f99-8715-962912d53d1c.roa
File:                     b547a18a-0bdb-3f99-8715-962912d53d1c.roa (raw, json)
Hash identifier:          ogaPp6cTPcAQHMd4xLThiQo0WhFG8Ly3WXtoX98R0Gc=
Subject key identifier:   5C:1B:7E:C2:07:01:A7:B1:36:17:E9:84:36:CC:3F:A1:79:39:62:85
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584DEC7B271E676B04307D8E5F00
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/b547a18a-0bdb-3f99-8715-962912d53d1c.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        150.9.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:27:1e:67:6b:04:30:7d:8e:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=e602838e-a6ba-49c3-9e6b-8d5c30209fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:6b:a2:fb:ee:bc:d1:ff:ab:3e:c7:fe:4a:
                    2e:d0:07:3f:a0:d6:ad:ce:79:da:b5:e2:7e:63:c5:
                    12:9b:cb:f9:52:04:40:8a:87:a7:cf:dc:99:7b:87:
                    06:eb:83:cf:c4:1f:0f:e2:ab:8d:91:1c:b0:a3:63:
                    94:3b:71:9d:83:e4:9b:49:0f:3d:1a:fb:86:53:5e:
                    47:a7:88:91:2c:af:9e:d0:9a:3b:5a:24:45:18:24:
                    45:7a:84:71:bb:7d:4c:3c:07:f5:9a:58:7b:2d:5f:
                    42:10:29:00:ae:4f:99:f1:02:63:72:35:5a:99:48:
                    20:d0:5b:87:c9:39:a4:22:f9:6b:66:b9:5a:ed:69:
                    a6:0e:17:20:e2:5e:b7:42:3b:36:94:44:46:8c:e6:
                    e7:d4:67:ab:b1:de:6b:51:39:6e:73:49:df:72:b1:
                    57:c8:c0:da:60:74:f7:58:8c:c0:db:83:ab:c8:53:
                    e8:ae:53:07:a3:92:b1:93:67:09:95:05:96:1f:52:
                    08:f8:75:64:6e:15:23:41:69:6d:66:57:69:ec:15:
                    da:26:ce:91:49:22:f2:f7:73:25:a6:9d:c8:bd:ac:
                    c2:a4:3e:84:e0:fe:0e:8d:d8:15:91:23:8f:56:8f:
                    ce:eb:91:12:4b:8c:4d:61:29:0b:79:08:8e:2a:7b:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:7E:C2:07:01:A7:B1:36:17:E9:84:36:CC:3F:A1:79:39:62:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/b547a18a-0bdb-3f99-8715-962912d53d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:be:48:1c:09:af:27:9e:64:19:b7:ba:c0:74:7b:30:6b:3a:
         24:d5:5c:d3:94:0d:81:4e:bd:3d:a5:98:d1:4d:cf:e9:53:16:
         1e:11:e9:5b:58:bb:23:a8:58:8a:c7:96:b5:a4:de:e9:01:1f:
         ea:aa:14:03:1f:ca:58:23:ef:07:7f:c0:78:f1:da:d5:0a:25:
         20:1f:5f:59:04:b0:80:b6:87:93:b3:b7:13:36:c3:9c:01:15:
         8a:53:40:03:17:a2:a5:48:01:2a:7e:0a:18:54:ee:2f:73:01:
         51:01:35:f2:43:35:88:9b:9f:e0:e1:74:b1:a0:a1:93:e0:c4:
         11:a8:54:b9:da:6a:7d:55:62:0f:19:f8:a3:a2:47:81:61:38:
         c2:4c:4d:76:59:06:50:3b:fe:2e:d2:e9:5c:54:f1:ee:56:4a:
         0a:72:82:40:cc:27:d3:be:a2:93:ca:a1:81:1d:ea:4b:28:6f:
         f2:cb:91:aa:7c:79:f8:57:13:e1:db:0a:79:d6:bd:a9:b4:61:
         5a:18:d4:33:8d:e5:d1:de:87:94:ee:89:61:2c:51:9b:0b:ee:
         d0:dc:61:00:f9:e9:de:f1:c4:f3:3f:3e:0f:8b:68:5e:ea:79:
         89:07:70:a5:aa:4d:dd:08:3a:29:59:c3:4b:be:12:53:51:0f:
         52:dd:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:48 2026 by rpki-client