Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa
File:                     2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa (raw, json)
Hash identifier:          wyENAOzrrbkyW3vwEUOOm4RGg6SaBJnb+9bWl3+xa94=
Subject key identifier:   35:ED:E5:46:CE:AE:6A:7B:CF:AA:56:9E:40:13:0F:21:F8:F2:20:FB
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584D703FE594FC310292802C5C80
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     54363
IP address blocks:        199.193.22.0/24 maxlen: 24
                          199.193.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e5:94:fc:31:02:92:80:2c:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=323644f0-38d8-4f32-9b43-4b52b43714e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:f2:ef:cf:b2:a3:9a:c9:59:2d:e2:02:32:
                    6e:23:74:9a:ec:64:d6:77:51:f4:9a:78:05:fe:37:
                    51:1c:c5:83:c4:d7:0d:93:cc:6e:05:99:be:31:a7:
                    a5:ca:84:b3:87:8a:50:10:cb:65:9b:76:3e:30:7c:
                    ee:c7:fc:9b:ed:b5:39:0d:0f:77:55:9e:ef:7e:a8:
                    76:2c:ac:31:23:a7:58:f2:00:c5:1f:f8:5e:c3:e3:
                    74:3d:4e:15:75:d1:77:66:62:79:37:fe:48:62:49:
                    67:e8:80:3d:43:5e:00:1a:bd:42:78:e3:a5:00:e0:
                    84:b3:2b:ad:6d:d9:d3:11:2e:30:70:9d:44:22:dc:
                    6f:9d:70:60:18:1b:05:88:5f:03:f8:26:7e:e8:56:
                    29:4c:46:79:73:0c:4e:db:0c:b3:d0:c2:ec:31:f5:
                    2d:da:62:a3:c8:5d:0c:a9:dd:56:03:a3:1b:f4:eb:
                    16:bc:28:d4:4e:89:42:c5:16:3b:3f:e6:f6:9b:d8:
                    b0:45:7d:2a:fb:07:d8:94:09:c8:b6:88:fd:26:b2:
                    b4:f1:85:a6:08:6d:35:e1:02:15:02:4f:88:25:fa:
                    c6:76:a4:a9:69:b2:9a:b5:eb:72:b0:9a:aa:9c:20:
                    cc:76:bd:d7:f7:f3:d5:08:11:27:ca:5c:5e:44:c7:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:ED:E5:46:CE:AE:6A:7B:CF:AA:56:9E:40:13:0F:21:F8:F2:20:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:17:43:40:c2:06:aa:20:fd:a2:b6:82:20:c5:01:0d:83:75:
         ff:87:65:47:1d:65:5d:76:50:84:7c:51:e9:dd:e4:dc:a1:06:
         dd:32:2a:36:0a:9b:7c:c1:78:82:20:f9:75:fa:79:b5:8f:d4:
         99:6c:5f:06:44:6e:c8:3e:30:14:c1:41:7f:36:7d:c2:d8:f1:
         f8:76:af:b2:17:2b:fc:5c:12:ab:ad:0f:6b:53:58:10:f6:1f:
         b5:4f:84:8f:2b:50:21:28:58:0a:65:2b:8a:ec:60:37:13:9e:
         d1:22:48:95:47:f5:bc:b6:4c:ac:7c:af:d5:55:f0:a9:4c:5d:
         94:87:75:12:ec:4c:45:2a:0e:f3:28:cf:9c:dc:da:43:d8:51:
         b9:71:c1:3a:db:aa:43:70:38:47:46:f2:c3:7b:c4:06:c1:69:
         bf:c6:72:6d:1c:3a:6f:8d:50:90:d9:fe:28:93:0f:37:4c:d6:
         8d:97:49:52:8e:9d:30:b4:7a:89:da:74:77:5e:5d:4c:5f:fd:
         bb:dc:36:f5:fb:e8:d4:78:2d:29:a1:f6:f8:03:df:7a:1a:d4:
         81:07:a9:44:1e:ac:31:be:8a:aa:ad:ec:a2:f3:4b:5b:fd:f4:
         b2:e7:1f:15:65:c4:7a:a6:e3:a0:41:3d:b0:5a:82:f1:e0:89:
         58:08:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:46 2026 by rpki-client