Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
File:                     ade61511-8398-3e2e-b0df-4582caf49fa7.roa (raw, json)
Hash identifier:          6BUBw5AcJulOlRHfV3K1xOVJ13GL7T0Txx0hvgC5V60=
Subject key identifier:   97:5F:0A:1F:12:B9:EA:A3:FC:BA:76:46:6D:62:29:52:3F:3B:72:15
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584D09126FB1D64AE67005A21BE0
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     395567
IP address blocks:        198.73.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:6f:b1:d6:4a:e6:70:05:a2:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=ae2eef40-10ba-4318-b7f6-5f4142d5e90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:5c:3e:a6:df:0f:25:9c:06:22:84:fd:5a:
                    41:ee:da:e8:3e:95:30:93:95:5f:86:02:7e:ee:99:
                    02:29:b2:73:2f:9c:51:5f:fe:10:8f:d8:98:53:11:
                    8d:6e:67:e9:5d:85:63:d8:1e:f5:9c:75:40:5a:0b:
                    ef:0d:77:a5:1b:0b:c1:55:39:9b:ba:78:53:56:a0:
                    41:83:e9:cb:83:32:57:61:39:40:ad:67:6d:0f:70:
                    44:4c:8a:b4:10:f1:38:50:63:aa:b3:a4:7c:e3:ac:
                    bb:53:94:04:8b:e7:42:e8:f9:1c:79:ff:d5:87:9b:
                    a1:36:76:76:8c:76:e4:80:3b:35:1b:5d:ca:45:54:
                    94:a4:a2:d2:c8:8e:82:4b:5e:26:95:a0:2f:00:2d:
                    05:b5:97:1a:de:26:d6:d3:a9:0f:3a:0c:56:2a:8b:
                    29:df:60:6c:20:a7:3c:41:c7:9d:5b:ae:bb:32:4f:
                    a4:33:4e:b9:d2:09:50:63:89:1b:90:ff:a4:65:1e:
                    0f:be:42:62:3a:5d:b7:71:b1:e4:93:c7:9b:7e:9d:
                    df:a1:1d:7e:10:07:01:3d:b4:d6:36:e4:bc:63:a3:
                    60:af:17:9c:ea:bc:30:c6:b6:b5:76:a8:69:a5:0c:
                    fc:89:92:b0:d0:09:54:60:d3:ea:e0:64:72:22:cb:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:0A:1F:12:B9:EA:A3:FC:BA:76:46:6D:62:29:52:3F:3B:72:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:9b:50:de:9b:cc:64:d6:9a:48:60:82:58:17:88:12:df:
         87:44:48:a3:9e:d3:30:8b:96:e1:68:5a:bc:4f:78:dc:64:dc:
         e6:81:00:a3:2c:d9:3b:1b:05:ae:fc:b3:0e:8a:a8:b9:6c:9c:
         14:04:b1:58:7f:b3:d3:98:8d:a0:6f:92:36:64:7a:92:44:6a:
         51:c0:4d:40:3c:c6:11:95:07:1d:12:01:4b:b4:fb:16:f5:e2:
         8f:c0:a4:3d:db:74:d8:0c:02:47:fd:0e:00:b3:26:bb:c7:2e:
         1c:f4:8d:ae:2b:7c:b4:ce:3b:a9:0c:96:e7:8b:f0:bc:aa:aa:
         bc:b2:32:68:77:87:b4:9e:a8:8c:44:10:78:47:0d:d0:dc:73:
         88:a7:fa:d5:2b:b6:1e:c6:b6:43:f5:ca:2f:4d:7b:80:a6:bb:
         6b:c4:2d:2a:fb:45:d5:9e:7c:34:1f:d1:94:0c:71:33:e9:1e:
         cf:af:c3:5a:cd:70:e7:b6:1d:98:b8:dd:27:ec:86:79:63:95:
         e4:a9:d0:a9:c4:91:0d:97:ef:16:3f:d4:da:59:26:73:c5:bc:
         a8:98:e0:34:28:00:73:0c:58:07:76:c2:7b:84:80:d4:89:ad:
         0a:9e:41:10:b5:2f:4b:c1:78:bb:89:f0:1f:9e:61:07:5a:b4:
         35:0d:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:21 2026 by rpki-client