Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5dcbe0bc-aa3e-38b8-9154-cfa7e014a271.roa
File:                     5dcbe0bc-aa3e-38b8-9154-cfa7e014a271.roa (raw, json)
Hash identifier:          1eBD7YqVkLpY765UI03NEmZZaiquD8Tkb1U6AflIeLY=
Subject key identifier:   E9:CC:20:E6:2E:81:8F:F4:EC:F6:53:8C:31:1D:AD:26:F7:BA:13:0B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D87FA99AC0D1D29EEF099F7C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5dcbe0bc-aa3e-38b8-9154-cfa7e014a271.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     212399
IP address blocks:        149.5.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:99:ac:0d:1d:29:ee:f0:99:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=a9d71474-f6b0-46a3-8829-338155f45a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:db:ed:fd:94:ba:e5:86:fe:b0:a7:95:7c:
                    06:41:8e:4f:82:dc:67:ec:27:89:87:f4:1b:1d:be:
                    c1:a6:3c:90:f3:75:a7:93:f2:ab:25:82:50:a0:0e:
                    83:fb:90:2b:72:bb:bb:ea:01:d6:b1:52:c4:33:6a:
                    89:81:3c:17:81:fa:e2:eb:3c:73:ac:14:41:b5:14:
                    6d:67:26:68:63:ef:c9:5b:63:f7:29:3b:06:1f:1e:
                    e7:c2:cf:b4:97:76:b8:35:20:8b:b4:54:9c:0f:2a:
                    cf:82:90:0f:c2:d2:a1:2f:f5:f6:ee:f9:d8:66:03:
                    21:0a:36:ab:a5:76:5e:e5:8d:fb:07:19:28:97:db:
                    64:62:eb:23:89:5d:cd:1a:67:30:f5:e1:8c:28:98:
                    c6:e7:5c:d0:24:cb:0f:60:0c:59:96:80:f6:70:b3:
                    18:78:34:1c:08:04:39:2b:15:98:5e:f6:e8:70:1d:
                    3f:be:9c:98:00:3a:a2:25:c0:09:46:b1:20:73:41:
                    33:c9:1e:99:82:b8:b6:ef:57:3a:b8:cd:e2:6d:e2:
                    7a:1a:a0:e1:a9:f7:b2:b4:8b:3d:7c:94:96:a9:88:
                    0d:6c:24:e9:4f:f8:5d:b3:d1:93:3c:7f:18:27:c0:
                    c6:6b:c9:33:d8:4a:b4:73:13:c4:6a:77:a4:d3:54:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CC:20:E6:2E:81:8F:F4:EC:F6:53:8C:31:1D:AD:26:F7:BA:13:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5dcbe0bc-aa3e-38b8-9154-cfa7e014a271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.5.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:84:23:02:e4:21:b2:60:bb:fb:33:0d:71:c3:4d:b1:e3:
         fa:62:ca:c0:26:f1:20:c6:27:b2:da:9d:7a:88:79:b2:9a:6f:
         e4:e7:7f:ba:3d:35:88:4f:fd:fc:53:3a:6f:4d:e6:55:84:2c:
         02:bf:37:dd:a3:b2:c0:a6:1a:76:d0:d3:cb:8f:bb:62:cb:74:
         68:7b:fb:af:4e:64:c9:f2:88:5a:22:38:19:9a:33:b2:57:dd:
         24:f8:24:5b:e2:6d:b0:b1:29:a0:68:a4:cd:e6:6c:c1:7c:65:
         5c:16:73:59:03:6b:35:47:13:d7:71:11:99:99:63:4d:2a:ab:
         29:db:7e:0b:3c:8c:87:33:12:dc:34:20:bb:b8:b6:d7:4a:3c:
         b0:35:c8:16:d8:a5:7f:97:58:8d:c5:e8:76:89:90:8f:ac:b4:
         da:51:6b:a4:1b:d7:63:8d:a2:6a:79:ca:41:5a:eb:35:f3:ac:
         e4:a4:b7:81:a4:29:eb:dc:6b:e3:79:8c:a6:6c:0d:6f:6d:c4:
         07:97:6b:3d:13:52:44:0c:75:f1:18:68:f1:5e:e8:0f:b9:f8:
         c0:e8:52:e7:59:39:f4:86:03:bb:50:76:22:48:ec:8c:34:cb:
         94:d0:c3:5c:66:5d:e3:d2:ed:f5:67:7f:39:e1:11:bf:76:94:
         c7:8c:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:17 2026 by rpki-client