Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/dc4a3d62-ec78-3a96-89ba-658a5339957d.roa
File:                     dc4a3d62-ec78-3a96-89ba-658a5339957d.roa (raw, json)
Hash identifier:          dTuiYSDgcESSje4tAL0b5KZXD8bNFmdJBZN0XJNpnjY=
Subject key identifier:   D4:FD:CF:18:12:78:8B:31:E1:66:0B:B4:1B:6E:48:A4:DA:60:BB:F5
Certificate issuer:       /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f
Certificate serial:       010D0C9F4328584DF210BAB824D0DE7335F71100
Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/dc4a3d62-ec78-3a96-89ba-658a5339957d.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     397388
IP address blocks:        147.185.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:ba:b8:24:d0:de:73:35:f7:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=7c8427af-fae2-49c0-a0cd-c5c3ef6733b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:35:ec:0d:d1:12:e3:f2:41:47:6d:0c:0c:
                    4d:f1:11:f4:07:46:05:a2:51:c6:0b:43:04:dd:3d:
                    75:0e:e8:9b:07:54:47:70:43:40:9d:d0:ea:4b:1e:
                    fb:80:71:08:ce:e7:14:b1:54:57:30:e5:e1:e1:6f:
                    8a:40:39:0a:4a:4a:82:26:58:42:6e:87:57:5f:d9:
                    40:6e:99:52:4d:9e:75:f1:94:c4:4f:5c:ce:cf:ef:
                    53:60:9e:19:bf:d1:e7:6d:8b:e5:82:74:2a:62:9a:
                    3f:9d:49:bb:4b:e4:57:8c:c8:73:c7:92:4f:53:58:
                    67:d1:22:e0:64:bd:32:d6:18:e8:3e:19:27:55:d8:
                    31:33:b4:94:a3:8a:c3:f9:7a:30:0c:12:85:72:1d:
                    95:f1:58:4f:5a:17:d2:05:7a:c3:6f:b7:b3:9f:d8:
                    36:c7:cd:d4:56:4a:4d:e7:bf:c2:de:d1:37:f9:f1:
                    29:5d:ca:25:8b:af:69:97:a0:81:83:c3:4f:89:16:
                    bc:5c:f1:1c:02:72:52:4c:bd:44:88:11:30:da:73:
                    bb:d9:ec:d4:49:de:fe:3d:d9:f0:a0:33:bc:96:89:
                    80:a2:4f:ee:1b:59:41:c0:d5:da:a6:23:1c:6b:45:
                    28:5e:ba:8c:3f:9d:f3:3e:00:15:b4:b3:3b:33:75:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FD:CF:18:12:78:8B:31:E1:66:0B:B4:1B:6E:48:A4:DA:60:BB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/dc4a3d62-ec78-3a96-89ba-658a5339957d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl

            X509v3 Authority Key Identifier:
                keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e6:e1:17:82:36:9a:fe:c7:eb:32:f5:5d:09:9b:d6:10:cb:
         c5:8e:2c:b7:c3:8d:dd:08:b5:7b:78:93:66:5f:62:88:65:5d:
         42:0f:3f:53:16:6d:63:06:ba:8e:24:10:82:76:e4:75:33:6e:
         db:54:7e:53:5f:7f:12:70:54:04:63:5f:72:09:30:48:79:59:
         07:63:8c:9f:89:bc:b3:9c:b0:e2:7d:84:7d:7b:ea:a3:73:f3:
         08:b3:e8:a1:0b:4e:1c:74:62:ad:91:fd:6d:70:59:c0:8d:41:
         2b:08:ca:d3:e6:2b:02:67:ab:e9:2f:b0:4a:cc:ba:2d:d2:a8:
         ee:2d:c0:04:79:2f:51:45:e3:87:e2:20:d5:f9:45:5a:bc:4e:
         42:1d:bb:17:75:e3:7b:3a:fc:25:88:3d:3f:e6:96:4e:b4:16:
         ec:53:db:fd:b4:8d:af:f4:c2:dd:20:8c:98:98:62:ad:1b:e4:
         dc:98:0f:9a:69:5c:d1:99:e9:08:46:a2:c9:5b:e7:38:90:60:
         7f:6d:d3:47:97:a4:e6:b1:3c:f7:3b:2a:e2:93:ec:93:be:81:
         2a:57:61:00:f6:4b:ab:81:c4:fe:3f:d5:53:98:70:3f:0a:e4:
         20:a7:d4:63:d4:60:42:2c:5e:a3:8f:7a:8a:a0:42:4a:ee:f3:
         6b:29:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:35 2026 by rpki-client