Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/55cc643d-29e4-331d-aca5-b3ad8a759300.roa
File:                     55cc643d-29e4-331d-aca5-b3ad8a759300.roa (raw, json)
Hash identifier:          taRkmjgF6izXi0Y9UO3qjmUrI4Pb6sTtYfJh3W625VQ=
Subject key identifier:   70:41:C1:2E:A0:45:DB:10:93:C6:A6:05:87:B4:ED:B5:EB:14:D0:5C
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D563706DD96CC4BF794652E40
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/55cc643d-29e4-331d-aca5-b3ad8a759300.roa
Signing time:             Mon 30 Mar 2026 05:11:58 +0000
ROA not before:           Mon 30 Mar 2026 05:11:58 +0000
ROA not after:            Sun 28 Jun 2026 05:11:58 +0000
asID:                     14114
IP address blocks:        157.133.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:56:37:06:dd:96:cc:4b:f7:94:65:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 30 05:11:58 2026 GMT
            Not After : Jun 28 05:11:58 2026 GMT
        Subject: CN=148baf96-6c92-49dc-8fd1-9153e0b17116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:b8:5d:30:8c:b4:55:5a:ad:55:92:48:93:
                    ad:4c:4d:6e:b6:50:7d:4d:1d:2e:02:f4:62:3e:25:
                    ea:c1:7c:84:d3:40:f0:82:ad:f6:e7:64:dc:ee:c6:
                    a9:94:aa:91:40:8d:1b:c8:0a:e2:2b:70:cf:41:5f:
                    07:90:b8:14:a5:8b:9a:d3:6a:6b:d6:57:76:87:9e:
                    2c:28:03:c2:37:b1:01:59:f1:a5:5a:03:ea:a5:da:
                    e9:72:46:47:75:37:f7:f8:4d:28:23:c6:7d:7e:15:
                    da:99:29:54:57:96:1f:15:57:da:54:27:b7:47:bb:
                    e5:bf:d2:4f:14:d0:36:7e:40:1d:a6:76:d9:37:9f:
                    16:9a:96:64:37:b6:50:f3:7c:90:39:7e:e5:a7:0e:
                    96:8e:a4:99:2c:c0:76:0b:9c:b9:16:09:19:65:29:
                    d0:24:36:7e:21:ed:70:67:ed:6e:c9:d8:97:49:4d:
                    1d:8c:9f:c8:30:98:e6:76:ea:d7:76:c8:eb:80:c9:
                    e4:80:2f:df:5d:00:a5:e3:ad:0a:d5:a3:9b:9a:32:
                    d0:28:19:32:20:f1:3e:52:71:f9:01:22:74:9f:58:
                    89:58:03:7d:28:5d:e0:92:ad:8e:ac:ff:f6:7e:a0:
                    89:e0:3b:2a:74:5e:39:f4:33:57:fb:8f:29:cf:a3:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:41:C1:2E:A0:45:DB:10:93:C6:A6:05:87:B4:ED:B5:EB:14:D0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/55cc643d-29e4-331d-aca5-b3ad8a759300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:5f:b5:21:90:55:13:f4:42:30:38:89:e2:1e:ad:9c:ae:
         3e:d4:b0:7d:66:ba:22:a7:c2:10:a3:30:02:ce:a3:e1:f6:14:
         cd:cb:da:8b:99:e4:1b:13:63:c0:73:09:48:69:36:bc:15:ad:
         36:0a:18:dc:9a:39:b6:b9:da:e8:92:81:96:0c:6f:a7:7c:be:
         86:cc:ab:e3:fb:74:31:79:95:96:85:d2:d6:94:d6:b2:ed:3d:
         ed:02:44:ff:f5:c7:8e:ac:82:1d:0e:17:19:18:b8:8d:e1:20:
         9d:a4:36:9d:ef:0f:44:4c:65:c4:12:fe:1d:f9:c3:fe:10:b3:
         a2:c0:78:c5:e5:cd:0e:ad:5f:79:61:9b:01:fe:f6:53:4d:49:
         8a:ac:ad:76:85:62:66:40:be:11:14:63:65:ce:eb:33:a9:c4:
         ae:2c:16:0c:97:65:f9:ab:1b:34:8e:0a:2b:f1:96:0a:21:88:
         16:14:38:68:86:24:fb:70:76:7c:39:12:64:5b:fa:36:54:b8:
         e2:f3:64:52:e5:e6:f8:15:08:9a:a9:b7:31:c6:86:13:9c:59:
         0e:c7:38:5f:48:35:a7:93:5d:45:b6:8b:52:08:f2:33:26:cd:
         b6:e9:69:31:85:8e:1e:9d:cb:05:75:3a:92:f2:ba:44:3d:96:
         21:31:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:17:51 2026 by rpki-client