Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/f23b3b18-e686-35ae-8bbb-a29250c4d616.roa
File:                     f23b3b18-e686-35ae-8bbb-a29250c4d616.roa (raw, json)
Hash identifier:          nROWb2nKtLmCXmooVAEOPU7xRx5ctdDcA11W4fX1OI8=
Subject key identifier:   5B:06:E3:70:E1:F9:C8:5C:0C:19:99:72:EC:5B:C1:AE:84:A6:58:42
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584D83CAB45590F5636275394B00
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/f23b3b18-e686-35ae-8bbb-a29250c4d616.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     210
IP address blocks:        198.60.4.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b4:55:90:f5:63:62:75:39:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d1fd32ff-ea05-4d51-b91c-b05f96979cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:e7:7a:88:ec:ae:33:c0:6b:20:08:8a:60:
                    cf:c1:3c:2b:60:42:0e:d6:ff:15:cb:0f:38:4c:6d:
                    45:84:6f:33:f6:df:1b:05:9b:0e:fb:b5:fd:75:05:
                    95:56:69:9d:12:69:ca:c7:35:93:d5:5d:1f:40:80:
                    ac:c3:ae:78:db:54:f3:c9:16:28:a5:5e:7b:14:f9:
                    77:ec:ff:fe:58:68:aa:d9:f9:98:1d:f3:98:13:93:
                    65:f2:34:b0:c2:1d:4c:62:cc:9e:bf:fd:6c:44:36:
                    de:cd:dd:35:6d:d6:7e:18:d3:ab:54:5a:ff:c1:36:
                    44:bc:38:ca:b3:82:8b:3e:9c:f6:8a:61:18:13:e3:
                    68:04:a8:c4:e1:67:85:b6:fd:6b:f9:d4:73:84:90:
                    7f:34:63:c9:f7:08:29:5a:55:b8:0e:6f:f1:28:dc:
                    e9:25:f6:c6:c0:c5:96:74:1b:02:f7:35:d5:7f:88:
                    81:73:a2:7e:4d:34:64:79:98:8d:cb:f7:07:cd:a1:
                    c0:10:be:4f:31:35:4f:25:0d:9c:04:38:fb:82:46:
                    a8:6a:90:13:25:f2:60:8a:e2:6c:92:36:ff:5e:ab:
                    9d:b5:d2:64:93:21:a0:49:fc:96:87:ac:9d:86:87:
                    86:60:ee:17:63:c6:55:24:ec:cc:8a:0c:18:ca:30:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:06:E3:70:E1:F9:C8:5C:0C:19:99:72:EC:5B:C1:AE:84:A6:58:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/f23b3b18-e686-35ae-8bbb-a29250c4d616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:9c:14:cf:9a:f2:87:b0:48:c8:51:b8:93:44:96:98:f9:
         c7:cd:0f:cd:80:d5:8c:22:a8:70:9b:90:28:73:60:c9:8e:11:
         42:2f:7c:37:28:3f:50:e3:90:25:56:93:09:f9:24:6f:c1:84:
         05:d7:49:b1:80:ad:cb:22:1d:fc:8d:6f:51:9d:e7:58:41:db:
         e4:5f:8c:5c:70:bc:99:a1:5b:3e:d6:8d:ba:4a:9f:c7:d9:fd:
         0b:7b:b7:4f:be:7e:00:dd:4f:d2:04:e3:55:09:f5:6b:d5:1e:
         c1:46:0b:85:f1:a5:bc:60:64:84:93:79:3a:63:2b:b1:4d:7e:
         63:c8:e8:b0:b0:18:6b:8e:0c:ca:3e:fe:08:ec:f2:58:19:65:
         c1:ce:aa:6a:65:11:d8:b3:80:81:10:c8:e0:fd:00:fb:c6:c4:
         69:5c:36:93:25:4f:4e:98:0d:e2:50:fa:0a:66:75:95:f7:90:
         d4:e9:10:e2:52:58:79:f9:ba:10:c2:25:5f:86:11:7b:87:1f:
         fe:63:cf:f7:d4:02:60:4f:49:dc:ea:83:d8:e2:60:5a:fe:2a:
         fb:d4:03:00:2a:1d:21:80:af:a1:e3:84:e9:c6:6e:c0:15:af:
         a0:36:f9:fc:a7:89:20:2a:f9:dd:54:1b:b5:02:57:23:52:e3:
         a4:4f:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:38 2026 by rpki-client