Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa
File:                     d0ad8b12-f500-35ad-bbab-c68990fd814c.roa (raw, json)
Hash identifier:          G38j8rqZbcKjBqxp84/IT375IZy9nMp9d8OWs8qx7Ls=
Subject key identifier:   B9:B7:37:66:33:69:31:3E:8D:38:10:7E:CA:05:EC:B6:78:BA:D1:4F
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584D5024ED50CA70B005925F1DB0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     20454
IP address blocks:        125.253.70.0/23 maxlen: 32
                          125.253.72.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:ed:50:ca:70:b0:05:92:5f:1d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=f43e1f0f-b1d4-4636-8e9e-508f4011d615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:c3:81:be:70:a5:17:a1:dc:1b:af:18:65:
                    d2:a4:a5:a1:75:9d:1d:0f:a6:89:df:08:f5:6e:ed:
                    d5:7c:19:50:62:0c:ed:ef:00:b7:ba:9f:fc:ca:1d:
                    a5:57:26:e8:fd:e4:90:4f:39:1c:b1:6e:64:e4:bd:
                    11:21:3a:de:f1:4d:b9:01:f5:8d:b8:49:81:31:1c:
                    8b:ed:9e:f4:9b:19:d3:25:38:06:c4:9e:af:d8:af:
                    db:cc:87:17:25:b8:dd:d8:a9:e6:07:fc:54:15:85:
                    b2:64:eb:a0:d0:ec:d1:47:07:91:9e:79:b1:21:98:
                    81:f0:0c:02:e5:ea:40:6a:43:2e:cd:66:e4:d6:e4:
                    d5:5d:b9:2b:85:69:39:1f:55:82:df:21:f3:aa:61:
                    9f:68:f3:d3:58:db:ba:ff:34:bc:ca:e2:e4:a1:0a:
                    5b:a2:e0:a3:0c:2a:5f:c8:46:0e:a4:ed:ea:c9:84:
                    1b:79:39:5d:d5:54:86:97:cf:eb:cf:a3:bd:4f:dc:
                    59:c9:59:9d:1e:59:94:16:3f:54:e3:95:2c:1a:7a:
                    d2:63:4e:54:b0:b2:51:a8:d9:d7:7c:43:ac:8c:b6:
                    78:d4:fe:b4:4a:c2:20:48:53:f9:1a:55:2c:2a:b5:
                    d0:69:d6:e2:24:ff:8d:7f:dd:c4:bd:df:9c:3c:7f:
                    ac:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:37:66:33:69:31:3E:8D:38:10:7E:CA:05:EC:B6:78:BA:D1:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.70.0-125.253.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cb:e5:4d:8d:1e:c7:f0:f1:c0:eb:3f:bd:e5:00:21:cd:4d:
         e9:65:7d:59:81:c3:9a:53:49:2e:33:69:7c:00:cd:d1:0a:dd:
         26:ff:78:10:08:9b:c2:f4:0b:53:6d:8c:29:2b:87:ac:0d:5a:
         6a:23:b3:5b:fa:64:03:35:e1:53:35:0e:10:35:a6:7f:a2:41:
         fe:fe:a1:80:ac:af:d1:3c:78:6a:01:4a:a2:9a:98:d2:f3:fd:
         22:d0:7d:42:f6:48:3f:79:d8:bd:5f:05:c1:23:10:27:71:c0:
         64:65:f2:d0:df:2e:09:fd:4c:ba:ac:31:b4:b4:6e:e9:a7:97:
         7d:74:72:20:fb:9f:ba:7b:ca:e8:0b:64:58:0f:bc:2b:4d:bc:
         5e:aa:3b:08:51:b8:30:9c:04:e6:e9:ac:35:5d:7b:25:9a:45:
         c5:5f:c8:58:de:91:f4:33:e9:b4:f5:21:d0:ab:29:56:1c:81:
         bc:0a:16:03:1d:c8:a3:ab:49:2c:dd:7d:64:0a:9c:c8:53:d6:
         4f:3d:87:f3:c5:37:22:c9:10:fd:3e:cc:84:b7:9d:ee:fb:34:
         4b:62:7f:10:b7:8e:9f:ba:89:0f:28:18:29:32:71:6f:35:8e:
         cc:37:32:f6:9c:8d:66:13:a2:c6:7b:89:b4:ad:4a:d1:1a:19:
         2e:fa:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:32 2026 by rpki-client