Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d98adb41-83ef-37b9-893b-b55d2eec2507.roa
File:                     d98adb41-83ef-37b9-893b-b55d2eec2507.roa (raw, json)
Hash identifier:          F8ic36KVf4Ei05xn3JBeE6ek37o8M+b7SweVsOiFi8E=
Subject key identifier:   90:6E:F5:3E:93:7E:5D:2E:D2:DA:88:9D:27:8A:36:2D:B7:B1:E5:99
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584D703FF72A92DA052E928AA4C0
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d98adb41-83ef-37b9-893b-b55d2eec2507.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     812
IP address blocks:        173.209.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f7:2a:92:da:05:2e:92:8a:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=76ebbaeb-b08c-46cd-97eb-dc154431ef86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:ba:f7:cd:80:be:19:fe:fa:fa:f9:dc:2a:
                    09:dc:61:43:87:b5:96:83:7d:02:a9:20:ce:70:f5:
                    49:d1:92:3e:69:7f:4a:45:40:67:91:71:0c:5a:35:
                    c3:d0:f8:bf:60:90:19:86:e2:00:77:c5:5e:62:52:
                    70:f1:52:9a:b1:ba:4c:ab:f5:80:b2:1b:79:62:56:
                    7d:77:1c:b9:03:05:79:75:0c:12:0a:57:d8:af:90:
                    a6:dc:ec:00:12:dd:91:7a:44:ae:7b:14:41:47:04:
                    14:20:74:85:07:ba:65:18:6a:04:db:d9:cc:e1:18:
                    43:31:2a:93:40:82:ee:96:8a:50:4e:40:1c:42:5d:
                    48:67:7c:1c:d5:69:42:d4:8b:6a:1b:e7:ed:88:8c:
                    91:68:90:e3:21:f6:22:63:25:aa:a9:b0:d9:92:f3:
                    11:ec:e2:0c:80:ca:f5:87:96:4f:84:90:cb:40:74:
                    04:fd:66:04:96:ac:33:47:fc:2a:6d:d7:41:06:52:
                    6b:66:7d:54:6b:87:ac:50:77:e4:50:e5:8a:a0:97:
                    56:d4:99:7e:20:e2:89:e4:df:d8:1d:3c:99:d2:34:
                    c5:3d:46:99:f3:57:ef:39:f7:87:4a:fa:c7:36:ba:
                    c8:48:d4:35:c3:94:f5:a0:10:2c:2f:0e:9a:d0:f0:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:F5:3E:93:7E:5D:2E:D2:DA:88:9D:27:8A:36:2D:B7:B1:E5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d98adb41-83ef-37b9-893b-b55d2eec2507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.209.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:1a:eb:b2:0d:6f:19:20:eb:81:be:e0:b2:75:7d:49:0b:
         ef:5b:57:e9:0c:e5:29:1b:62:ce:aa:85:8d:ca:8b:bc:08:85:
         b1:e7:3b:3b:8b:95:b5:d5:5a:3d:82:73:ef:b0:52:56:b7:eb:
         5c:c0:e1:60:4f:49:f3:b2:0d:3e:e3:b9:93:76:bf:45:9e:f3:
         40:b0:3b:e7:98:93:21:fd:ca:4d:36:29:09:a6:cf:5d:20:f8:
         2c:18:a5:57:84:eb:79:8f:b0:e0:91:a3:ff:33:ec:bf:68:81:
         32:f4:6d:1f:40:b7:38:48:11:6b:10:e5:2e:e3:c3:cb:7a:23:
         70:81:90:e4:e7:d0:8d:44:22:54:9e:d8:f0:67:ac:8c:62:fd:
         4b:ca:16:e9:ea:88:0f:75:b9:b4:fd:59:1a:ed:1c:1a:72:59:
         b0:66:75:92:94:ac:fe:f1:a2:a9:2b:61:dd:78:49:e2:51:fd:
         6d:46:9e:bd:cb:12:35:e7:6c:ad:66:7b:38:91:54:86:9c:98:
         b3:c3:48:13:66:58:56:13:b6:45:5f:01:21:6c:16:e0:e0:58:
         59:25:d1:79:31:43:17:d3:cd:a4:ff:3c:b3:8b:43:17:c0:e3:
         86:de:b0:1a:c0:aa:ac:b0:df:22:03:73:dd:06:fd:bd:1e:a5:
         15:0d:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:17 2026 by rpki-client