Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/0bf34e49-7b6e-3d58-a0a8-f203eefc6a0a.roa
File:                     0bf34e49-7b6e-3d58-a0a8-f203eefc6a0a.roa (raw, json)
Hash identifier:          fHHnLLS8sZfWjZNT1qbFA9b3oVL/SVYs83m/CE5TME8=
Subject key identifier:   A4:D4:26:74:02:E5:43:FB:CD:F3:E0:FE:D2:A6:58:72:40:4B:19:8E
Certificate issuer:       /CN=65b75871-7632-4a71-a4a9-41f38235fc29
Certificate serial:       010D0C9F4328584D7F9AA1EFB45CA7E13B8684F8
Authority key identifier: C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/0bf34e49-7b6e-3d58-a0a8-f203eefc6a0a.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     13431
IP address blocks:        174.138.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:a1:ef:b4:5c:a7:e1:3b:86:84:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b75871-7632-4a71-a4a9-41f38235fc29
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=8092d46a-3262-4a17-987d-92dcab221204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:77:09:14:a9:83:d2:83:26:a7:a5:3e:5f:
                    25:6d:d3:64:fe:bc:cc:88:ba:07:7b:fd:9d:89:eb:
                    01:b7:b0:c2:7c:f5:3a:02:4c:e2:d1:c1:7e:52:60:
                    51:cc:b8:b2:aa:13:dd:90:4b:46:fc:48:db:a4:81:
                    e6:1e:b8:d5:2c:d7:df:e4:77:a3:08:bf:b0:6c:cc:
                    31:09:f4:2e:13:07:a7:7e:0e:16:e2:bb:e6:bb:3e:
                    42:02:c4:c6:24:65:2c:8c:e4:14:c0:85:e6:ca:fb:
                    a6:61:b4:59:a6:99:47:fc:e7:be:67:51:6f:bf:b1:
                    5f:7f:89:ba:72:c4:f9:0f:05:4f:42:3d:e9:1f:cb:
                    8e:76:60:b6:9d:9c:9a:71:b8:c0:72:bd:9a:6e:c8:
                    fc:c3:93:81:00:fd:c1:f4:75:95:0a:56:3e:52:65:
                    f6:4a:c4:1b:f0:1d:fd:47:20:d2:9f:41:64:ab:78:
                    4c:12:10:40:c7:e5:28:55:d3:cf:61:84:ac:83:5a:
                    14:17:f5:79:ee:8e:c0:34:60:7b:74:f3:06:42:6a:
                    b9:d2:09:d2:b8:ff:6e:f5:78:18:b6:49:97:c2:3e:
                    2c:05:1c:45:c9:9f:54:44:51:d8:03:3e:18:e0:6c:
                    55:04:45:3d:8a:b8:e3:4c:ec:8a:ce:22:fc:42:f0:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D4:26:74:02:E5:43:FB:CD:F3:E0:FE:D2:A6:58:72:40:4B:19:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/0bf34e49-7b6e-3d58-a0a8-f203eefc6a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.138.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:58:cb:7c:f8:ac:f1:68:40:41:fd:31:8b:ff:3c:88:09:79:
         99:9f:a0:cf:97:36:bf:82:71:3e:6b:34:f2:7e:d2:bf:8a:5d:
         9d:a4:64:db:c3:34:d7:28:8b:46:b6:35:6e:54:8b:fd:ee:5d:
         1c:fa:5d:a5:9a:e4:e4:e3:7d:30:ae:6a:fa:e5:af:89:02:c3:
         70:84:94:16:1d:e5:1d:8c:c1:ee:69:41:5a:6e:e5:a4:e6:06:
         3d:66:3a:20:35:5b:1e:ba:e8:c7:39:15:ed:4d:84:ee:42:29:
         c0:c0:5f:7d:47:5c:66:b2:17:09:3b:13:77:34:47:79:ff:b9:
         7d:6e:f0:4c:3d:d8:7c:a0:08:3f:03:16:e9:c0:ac:a3:c5:b1:
         29:ea:73:52:da:dc:8a:6d:28:a5:9d:52:3e:5d:40:22:a9:1a:
         f6:2d:21:29:81:a0:32:fb:8a:89:a5:f5:d3:0b:2d:c4:76:a6:
         f4:a5:c4:bc:5c:cb:10:82:bb:b9:73:30:e8:f3:36:19:1d:d1:
         02:37:75:38:de:26:e9:32:47:1f:2e:dd:89:97:d8:b6:13:27:
         6d:93:d4:b6:89:ea:2b:46:5d:ff:f0:4f:c1:30:d1:9b:60:1a:
         12:a2:fc:b7:c5:dc:38:74:db:28:e7:33:a0:4c:4c:d0:c7:03:
         04:52:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:29:10 2026 by rpki-client