Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa
File:                     2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa (raw, json)
Hash identifier:          xgzv0SrGmVyg7zt862r2dr2yg/aHC+stvqR3cQRoxC8=
Subject key identifier:   07:89:43:FF:44:53:84:0D:E8:BC:30:77:74:28:59:06:1F:02:72:A9
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584D667A4BC5B56C8F18C8131240
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     401395
IP address blocks:        192.157.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:4b:c5:b5:6c:8f:18:c8:13:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=cc477e99-8869-4870-ade4-a63185017a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:5e:db:ae:04:be:6a:bf:b5:72:bb:fc:e3:
                    b4:6c:18:25:93:e2:08:65:cf:25:9e:b2:2e:af:1f:
                    f2:cc:5b:87:9d:cc:39:18:4c:8b:d8:c2:36:0a:55:
                    1a:26:a8:e9:db:d9:56:dd:7c:22:0c:8e:71:af:17:
                    17:37:26:f0:c3:90:02:77:30:79:53:68:59:81:97:
                    a0:95:5a:f5:23:64:dc:43:65:65:23:5b:31:c1:95:
                    4f:3b:a8:eb:c3:eb:25:eb:f8:e8:4a:64:34:31:12:
                    b5:14:78:ed:60:44:f0:dd:89:69:62:9d:c7:98:0f:
                    06:f5:f1:11:91:12:d4:0c:88:e1:fc:87:0b:61:1c:
                    2f:ed:0d:ea:43:b1:78:f3:f2:91:1a:47:bc:37:49:
                    27:ff:86:1e:70:d9:8e:2d:4f:b2:80:df:5b:a7:57:
                    8d:93:ba:ea:10:61:ed:bb:c8:7f:9a:f8:28:18:52:
                    75:62:11:66:1c:92:6a:66:af:31:3b:4c:bb:33:8f:
                    64:86:3a:76:68:93:31:71:d1:46:e2:8d:aa:54:ea:
                    82:89:da:e4:d3:f0:9f:c2:e5:b4:33:13:93:51:8f:
                    84:cc:54:02:3a:f7:d8:12:75:02:1e:6f:f4:2b:7c:
                    d7:16:84:30:c4:39:a6:d6:f0:a2:30:57:b3:61:b7:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:89:43:FF:44:53:84:0D:E8:BC:30:77:74:28:59:06:1F:02:72:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:2f:fa:07:6e:8d:36:c0:e0:62:1f:3e:40:79:d2:7a:be:
         88:35:08:33:c6:6e:b1:34:be:ec:f6:bc:90:4b:2c:46:2b:58:
         cf:74:6e:07:35:85:55:2b:1f:5e:8e:ce:82:02:9d:f7:d8:e4:
         b5:af:9a:74:ed:93:66:62:20:ac:eb:59:bc:b7:46:f8:cc:fe:
         2f:9a:75:94:f4:20:1b:71:74:15:1b:43:f4:c6:70:86:90:ac:
         76:a3:a5:b6:fe:18:b0:4d:e7:e5:06:d3:d5:f0:cd:42:93:83:
         52:f1:f9:eb:08:c1:22:50:50:08:03:bc:87:d7:87:cd:e0:d0:
         90:bc:02:6f:70:19:cd:9b:a7:f3:98:38:1f:b3:3a:3e:8c:0f:
         c1:82:5d:7a:16:f2:dd:20:16:18:74:65:cf:58:5e:fb:26:f3:
         ca:10:89:ef:fc:9c:cf:64:ac:8f:71:db:ac:28:aa:10:08:c3:
         69:33:6b:36:69:76:37:ab:48:29:44:bf:d9:ed:48:cc:6d:76:
         0f:0c:ad:0c:2a:0d:46:fc:d2:0d:f2:62:ae:45:4b:02:a0:7e:
         e1:3c:a8:6d:92:66:3a:b1:17:0c:5b:43:de:ce:f2:21:c8:2a:
         a6:79:34:6c:a5:d3:22:49:33:c7:06:3b:c5:bb:c7:a8:1b:3a:
         95:6f:04:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:54 2026 by rpki-client