Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa
File:                     83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa (raw, json)
Hash identifier:          7s9auIAynb0WcxPC1xMlHNzurBXT5ppujR+bhSNdQ7k=
Subject key identifier:   03:7C:C1:FD:9F:BE:3F:01:5B:D7:41:E1:AD:77:E2:3E:CC:D7:1F:06
Certificate issuer:       /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Certificate serial:       010D0C9F4328584D6AAA8204D3320FF71FA5CF80
Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     63456
IP address blocks:        192.122.149.0/24 maxlen: 24
                          209.209.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:82:04:d3:32:0f:f7:1f:a5:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=c5628286-5436-4b21-904d-dac180469b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:60:46:1f:de:31:73:71:67:51:e2:14:b8:91:
                    48:ff:8e:4e:c8:21:6d:65:5a:1e:d8:6a:55:17:31:
                    21:8a:bf:5a:eb:5a:31:2b:fc:84:ff:fb:2c:ac:21:
                    de:8d:7d:ad:c5:ff:42:3c:e3:20:49:04:84:15:3c:
                    fd:9c:09:e6:89:33:c0:47:bf:37:3b:0b:36:e9:e0:
                    8b:68:b3:da:97:2c:1a:5c:c5:e5:38:0b:48:78:7d:
                    31:79:c5:73:e9:3f:25:96:18:43:3a:91:4b:bb:5b:
                    70:e3:f3:c7:65:32:62:6a:0e:10:16:5a:6f:a3:40:
                    12:e7:4e:82:e6:f5:59:d4:1b:32:03:bc:bd:d1:a9:
                    94:9d:94:81:e9:82:20:d7:e3:bd:99:26:9e:72:7b:
                    45:eb:4b:de:24:4f:66:fa:59:88:45:31:2b:a7:9e:
                    f6:1d:eb:6b:35:53:a9:10:47:2e:6e:1d:75:f4:4c:
                    5a:e8:36:eb:10:01:3e:36:3a:59:fc:37:04:63:19:
                    18:95:dd:b7:f3:be:eb:27:b2:ee:f1:b0:aa:70:67:
                    2d:36:96:79:7d:e7:8b:c7:8f:d4:e6:3c:65:f0:d5:
                    89:10:3c:4b:79:7b:1f:41:55:44:ce:31:4f:cb:19:
                    3d:48:a5:af:4c:18:19:03:45:e0:18:6f:43:dc:89:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7C:C1:FD:9F:BE:3F:01:5B:D7:41:E1:AD:77:E2:3E:CC:D7:1F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl

            X509v3 Authority Key Identifier:
                keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.149.0/24
                  209.209.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:b3:ac:97:d1:0e:3e:91:7f:99:4c:ae:52:18:06:d1:8e:
         ae:72:71:7b:4d:88:ab:e8:77:ff:91:8c:43:7d:9e:48:b4:53:
         ef:d8:3d:d4:6a:50:60:28:8f:54:10:fc:05:da:fa:45:4a:58:
         2e:9c:4a:e6:29:be:40:83:5e:37:56:81:f5:c3:d0:8a:90:8a:
         2c:7c:1a:52:46:16:2a:66:d0:6d:ea:0e:cc:fc:10:3e:1d:0c:
         c6:14:4d:75:d2:5f:0e:f0:95:94:bd:97:f7:df:c8:20:78:6d:
         be:42:20:b1:25:00:39:74:c6:b7:90:be:c1:84:e0:ff:1d:1e:
         9d:5d:0a:4b:03:eb:19:12:67:46:76:b3:e8:1c:c5:66:e2:cd:
         4d:1f:75:5d:69:57:d3:04:44:5d:d2:9b:68:98:68:11:41:29:
         08:83:24:59:ea:96:97:00:61:37:f2:3b:51:0f:d6:0d:a7:da:
         d6:32:47:d9:79:87:ca:0a:d2:de:64:fd:74:aa:ec:e2:db:7a:
         8f:08:6b:e9:47:af:e2:d5:9d:36:7d:58:85:f2:67:92:a9:9e:
         04:8d:fd:83:ee:f4:be:f0:33:bf:bc:df:61:33:7e:9e:c2:17:
         01:b9:1f:16:a6:4c:4a:f0:7a:63:14:55:0b:42:8f:47:38:3f:
         30:84:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:29 2026 by rpki-client