Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/522c862f-9fcd-3df6-b8da-dfc4d521d237.roa
File:                     522c862f-9fcd-3df6-b8da-dfc4d521d237.roa (raw, json)
Hash identifier:          of3/qKOY/4hjdyx2Qe27AynljKsvWlVYDTBLyHuLUFc=
Subject key identifier:   EF:5B:07:D6:76:05:62:A7:16:EE:EB:80:1A:B3:0A:67:FB:A4:8E:46
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584D703FE5887F0EFD04841C7FA0
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/522c862f-9fcd-3df6-b8da-dfc4d521d237.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     54363
IP address blocks:        199.193.16.0/24 maxlen: 24
                          199.193.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e5:88:7f:0e:fd:04:84:1c:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=b36f3711-3b40-44f9-b87c-9146af65005c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:5c:ec:4c:de:f7:56:f1:6c:69:bf:c5:84:
                    d1:98:9b:91:15:df:00:9e:cc:11:24:05:7c:8c:f6:
                    65:a8:f6:7f:d4:4e:51:a7:89:19:5a:b2:1a:69:ff:
                    9b:c0:b6:4f:f5:ae:f4:a4:8c:1d:17:f8:51:a8:d3:
                    9e:1b:8d:34:0e:96:e8:d7:49:7f:0f:98:a0:2e:86:
                    9f:7d:0e:91:16:3a:25:69:36:08:4a:32:83:57:87:
                    7b:24:86:44:97:9b:f3:19:1d:49:02:b5:aa:a8:f6:
                    24:04:ca:3b:0f:ce:d6:c4:af:72:54:ba:c5:4d:b0:
                    4d:63:2f:06:76:cf:8a:d4:96:0d:23:df:3f:d6:bf:
                    bb:15:fe:53:28:1a:8e:55:78:c5:b4:6a:4a:85:42:
                    f4:c6:ca:78:5c:2a:99:f8:9c:3d:c5:88:a8:b3:c8:
                    e4:5c:20:8f:18:90:0b:0a:92:74:76:d3:1c:ac:a6:
                    0d:27:01:34:06:ce:95:de:2a:2d:c8:e2:f6:cf:82:
                    c0:76:b4:25:8f:08:dc:a1:7d:ac:6d:31:91:31:4f:
                    c5:76:37:03:86:be:b6:b8:32:df:53:81:51:25:67:
                    99:e2:a8:9b:99:56:e7:9a:62:d0:a2:53:f6:78:0c:
                    b4:99:a5:fe:16:56:a6:8d:3b:ad:75:40:0a:e8:c3:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:07:D6:76:05:62:A7:16:EE:EB:80:1A:B3:0A:67:FB:A4:8E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/522c862f-9fcd-3df6-b8da-dfc4d521d237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:ce:fa:12:63:21:ed:ac:6f:d5:35:26:d8:85:c5:08:d7:
         35:a5:8f:9e:ad:3b:ac:33:13:f1:13:2f:00:48:9b:65:46:c8:
         59:7a:57:5b:17:5d:d9:9c:7d:49:1d:c1:43:5e:f4:87:74:52:
         07:0f:ed:05:cb:41:b0:7b:51:c0:6c:e8:37:67:85:41:a8:fa:
         4f:06:a8:5f:c9:ba:9f:b8:48:76:68:7f:7e:63:c2:26:de:6d:
         7d:ee:82:c5:bd:70:84:47:bb:ea:89:8d:8b:16:51:a8:56:88:
         43:1c:f5:f5:39:c5:b8:79:51:a0:d3:10:66:3e:53:8b:ad:09:
         2a:ad:a3:52:05:a5:c5:66:4f:f6:a1:61:60:45:c7:2e:1f:ab:
         08:65:07:a0:43:35:d6:1b:4d:e5:ef:56:4d:69:7d:c5:34:18:
         ce:ac:d9:e1:fc:df:61:5e:c6:e7:92:13:6b:1b:5d:29:d3:6b:
         16:12:60:56:f8:d5:13:1c:11:64:97:d4:1a:e7:d0:d1:ac:50:
         82:f3:ba:e5:b5:cc:bf:0e:db:17:d6:e6:b1:d2:b8:e8:a8:cb:
         df:78:83:55:d6:87:1d:26:ed:72:75:cc:f5:2b:92:d0:f1:c4:
         b0:1d:5d:10:19:96:3f:3e:06:9a:43:33:6e:aa:60:e3:60:53:
         db:d9:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:08 2026 by rpki-client