Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5dc527a7-124c-3184-ad4d-49de4158d4d6.roa
File:                     5dc527a7-124c-3184-ad4d-49de4158d4d6.roa (raw, json)
Hash identifier:          PUiQH0oRVX6NYyJeV49H8WPzT99ur9wzqA/SFqHMvww=
Subject key identifier:   AD:B1:15:F4:A0:88:5A:A6:8B:AD:A4:2D:85:AD:B0:34:12:01:1E:0B
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D624A64A41E5A77B25B23B780
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5dc527a7-124c-3184-ad4d-49de4158d4d6.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     54994
IP address blocks:        138.113.177.0/24 maxlen: 24
                          138.113.179.0/24 maxlen: 24
                          138.113.180.0/24 maxlen: 24
                          157.185.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:64:a4:1e:5a:77:b2:5b:23:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=7d075341-7973-4c14-bcc1-24caee505540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:72:15:ae:3c:27:43:83:9c:6f:34:87:54:
                    c6:d5:7d:ac:77:b1:f8:ae:0b:86:7b:7c:ed:d4:70:
                    8d:05:2b:91:4e:73:f3:d6:e1:b5:48:f2:68:87:53:
                    0e:23:93:88:d7:38:e1:a9:da:db:07:ce:e0:1c:96:
                    5a:09:4a:63:3a:b2:34:79:35:21:be:94:0d:6c:58:
                    e2:2c:62:1c:67:71:9a:15:2f:27:19:cc:e7:30:d4:
                    17:bd:33:ee:ca:20:1f:20:3c:85:88:36:6e:ac:70:
                    08:8d:54:77:15:11:50:fe:2d:30:3a:a4:67:ac:6b:
                    e0:79:ec:f9:4b:52:66:d8:d4:52:7b:c3:70:ea:dc:
                    4c:06:8c:4e:10:b5:6c:79:c2:fe:3e:77:8a:b8:d8:
                    5a:39:f4:e0:c7:29:0a:24:40:06:5b:b5:80:8c:9a:
                    23:e0:4d:47:b2:40:ad:4e:46:28:97:e3:b6:98:20:
                    f0:0e:4d:8d:62:a2:2c:de:0f:7d:d2:92:73:b7:cf:
                    53:e6:a3:ff:89:21:cf:8a:e9:17:3f:71:2a:4a:8b:
                    92:f8:bb:b9:6b:05:33:f8:8c:55:21:b3:b8:51:54:
                    05:d9:e3:3c:f5:25:25:ca:71:38:68:cc:7c:29:4d:
                    ea:91:e2:25:48:50:35:0b:26:e9:d0:9c:42:52:c1:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B1:15:F4:A0:88:5A:A6:8B:AD:A4:2D:85:AD:B0:34:12:01:1E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5dc527a7-124c-3184-ad4d-49de4158d4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.177.0/24
                  138.113.179.0-138.113.180.255
                  157.185.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4c:e4:d1:b5:68:21:55:4c:0a:c1:89:d6:1d:41:67:80:e8:
         36:43:ae:ee:1a:15:ee:b5:20:3c:20:58:ed:90:2b:4c:38:4a:
         0d:ca:5f:cc:0e:ff:a0:8f:48:b0:1b:aa:44:4e:72:55:0e:9e:
         17:42:ea:14:27:56:d0:af:c2:6a:bf:89:71:b3:c2:57:17:7d:
         f9:05:a5:1c:6a:dd:55:93:a6:aa:1f:bb:64:ac:b3:14:8b:87:
         9f:4c:c2:94:1d:78:82:fa:06:64:ad:58:c0:b6:44:fe:71:c0:
         55:20:ae:b7:83:dd:79:11:b2:51:ad:ee:94:70:49:4e:e8:0a:
         da:7d:0b:bd:3b:b7:ff:46:ef:f5:60:a9:65:97:df:1b:7b:82:
         05:be:72:8c:0a:5d:fe:02:f3:67:83:24:40:33:b6:3d:36:6a:
         de:27:d8:bd:1a:69:4f:fc:76:45:7a:ba:8e:35:4c:f9:64:d2:
         de:12:1f:69:cc:9e:ac:25:76:5d:74:d1:a5:30:99:15:92:29:
         18:ca:5b:e1:be:28:95:28:3d:12:b4:be:e5:f8:1e:36:92:fe:
         a7:1a:53:d2:af:4d:b4:66:ee:6b:3b:55:b7:6e:c4:21:da:fd:
         e9:7f:fc:35:af:7b:1b:09:15:40:08:c8:ab:d4:29:51:2e:c0:
         1b:e7:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:54 2026 by rpki-client