Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa
File:                     f6cecee3-04a3-3f44-9077-09ff10710455.roa (raw, json)
Hash identifier:          AvpoSUbsCWoFC9uOV0I9DonOZ5jt0xCMtEFigdj22+g=
Subject key identifier:   50:C8:A5:2E:43:65:2D:A5:87:F7:C5:1C:CD:75:F2:55:99:B3:7F:A2
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584D703FE5A0E3CC9AC8003EE280
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     54363
IP address blocks:        199.193.20.0/24 maxlen: 24
                          199.193.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e5:a0:e3:cc:9a:c8:00:3e:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=982078a8-ef7f-463e-99fa-a87d739de5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:9e:9b:f6:53:be:72:76:50:21:1c:46:e9:
                    59:58:39:e2:7f:61:ab:ac:46:a0:84:67:a5:c4:4b:
                    e2:81:4c:f4:01:56:84:e9:42:01:9d:a3:b4:90:ad:
                    5d:1f:c7:e5:e1:8c:21:c6:bd:f1:f3:59:93:b5:a5:
                    48:b6:e7:74:5e:d7:a4:05:cd:ae:1a:83:41:db:ef:
                    4b:83:1d:32:64:2d:e7:90:d0:17:e2:bf:eb:c8:69:
                    61:4c:4c:4c:37:58:ff:eb:68:c7:c0:82:c6:47:97:
                    96:a6:dc:cf:f3:48:39:69:18:7e:e2:86:13:93:1b:
                    2c:b7:a2:e2:06:97:71:a5:b5:34:bc:10:5e:df:2f:
                    6f:9e:7e:b1:f0:b6:f1:14:be:82:2e:5b:4a:3a:61:
                    8d:ad:05:c5:08:b8:0d:e0:db:3d:42:75:00:54:b1:
                    d3:30:00:27:14:23:09:cf:8f:ff:a4:9c:8a:1f:1f:
                    cd:89:4b:66:3e:a9:12:f8:ca:69:3b:0a:5d:14:44:
                    b9:1b:89:b7:71:9f:f9:53:b7:35:ed:00:4f:cb:2f:
                    2d:9a:e4:0e:87:d3:ae:62:d4:77:84:32:f3:47:27:
                    c1:c3:d0:b0:c1:fb:d5:88:40:00:f1:62:1e:e4:5a:
                    2e:9e:56:b9:44:6a:94:36:c8:a3:f9:21:48:39:78:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:A5:2E:43:65:2D:A5:87:F7:C5:1C:CD:75:F2:55:99:B3:7F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/f6cecee3-04a3-3f44-9077-09ff10710455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:db:13:eb:b6:a0:6c:96:ef:ff:34:d2:99:86:eb:95:5d:
         2d:7b:7f:27:95:4a:07:f6:6c:5d:dc:3f:f7:f2:56:4d:f5:d0:
         fb:35:ca:49:8d:9e:ac:d9:36:0e:ad:98:c6:64:54:86:b6:83:
         5e:d6:c7:63:e8:a6:6d:eb:18:6b:bc:6e:26:9d:92:9d:44:ff:
         b3:23:9e:8f:09:6d:2a:85:aa:74:65:2f:c6:86:b6:4a:a6:7e:
         d4:16:bc:55:85:97:0b:08:94:5c:fd:e9:eb:0b:9c:21:ad:af:
         64:69:00:7c:fd:a2:1c:52:f8:ad:2e:ef:ea:bc:67:58:e5:cd:
         73:5d:70:73:55:7b:88:35:59:9f:7f:9e:b8:d0:ad:54:15:2a:
         a6:7f:c1:7c:02:cc:57:2e:98:85:d1:c9:4d:c1:8c:b9:15:e4:
         0b:d7:36:70:fc:db:08:6f:60:67:c0:30:37:56:02:b2:e8:5d:
         10:29:2b:5b:1e:38:0b:60:f5:39:0c:7e:94:c1:5d:11:cc:ab:
         19:26:ba:11:cf:83:20:8c:7a:ad:70:c2:8d:ab:a4:6a:5f:6b:
         6b:1a:e5:37:08:81:ad:84:ff:17:6a:b1:d0:08:bb:48:a8:1c:
         32:aa:0a:af:72:95:e3:c8:ff:a1:6d:da:d8:f3:9a:19:9a:a0:
         b4:57:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:17 2026 by rpki-client