Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8494442d-d05c-3627-9db0-94d10db229d9.roa
File:                     8494442d-d05c-3627-9db0-94d10db229d9.roa (raw, json)
Hash identifier:          s1/2Rjk2k09O+6XYjNgVlRE69/sPusgUGdik80hsXrg=
Subject key identifier:   CB:E5:CA:CE:FE:04:2F:AD:D1:30:21:8F:96:EA:92:E0:80:4D:79:15
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D83773AA076747505BDD38360
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8494442d-d05c-3627-9db0-94d10db229d9.roa
Signing time:             Wed 15 Apr 2026 10:12:42 +0000
ROA not before:           Wed 15 Apr 2026 10:12:42 +0000
ROA not after:            Tue 14 Jul 2026 10:12:42 +0000
asID:                     54994
IP address blocks:        153.43.141.0/24 maxlen: 24
                          153.43.142.0/24 maxlen: 24
                          153.43.143.0/24 maxlen: 24
                          153.43.144.0/24 maxlen: 24
                          153.43.145.0/24 maxlen: 24
                          153.43.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:77:3a:a0:76:74:75:05:bd:d3:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr 15 10:12:42 2026 GMT
            Not After : Jul 14 10:12:42 2026 GMT
        Subject: CN=bbd25f90-9903-40e8-b581-b99e92f51119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:85:d5:56:08:23:ea:53:af:ea:3e:2a:55:
                    cf:07:11:ad:c4:77:a7:8e:80:e3:19:19:b7:55:86:
                    ea:25:15:e1:4a:29:ec:11:d9:48:68:42:3b:b6:46:
                    62:e7:53:c3:5a:11:72:1d:fe:01:9d:67:25:ed:3c:
                    56:09:70:4a:55:cf:14:97:af:99:79:63:d8:e8:57:
                    f9:93:39:7a:a0:68:a9:a7:47:89:9b:e6:16:91:bf:
                    89:b7:c6:e0:69:91:40:9a:da:e9:a3:03:e5:42:7d:
                    60:63:a5:94:7e:be:d1:fc:b2:ad:94:9e:8d:66:43:
                    d2:58:d8:ae:8c:ff:0d:c5:0e:86:99:dc:76:51:72:
                    85:2a:72:76:e8:05:38:c9:52:30:e0:ac:aa:89:da:
                    31:45:02:87:42:cf:6a:ca:26:b7:6c:2d:35:f4:e5:
                    70:5a:d6:b3:94:04:37:e8:bb:54:62:a8:f1:0b:2e:
                    bd:9f:f2:52:ec:be:10:e3:c2:5f:02:13:12:05:a7:
                    ae:37:cc:3c:d8:e2:82:2c:aa:99:27:61:a3:c3:7f:
                    4d:c1:8e:3f:4d:2a:4a:d3:64:67:23:ed:af:6a:97:
                    8e:85:ab:78:a4:4a:9b:0d:59:71:f7:bc:bf:9e:fb:
                    2b:4c:20:70:37:8b:1c:8a:94:31:59:d6:34:88:5d:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:CA:CE:FE:04:2F:AD:D1:30:21:8F:96:EA:92:E0:80:4D:79:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8494442d-d05c-3627-9db0-94d10db229d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.141.0-153.43.146.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:20:79:1d:04:77:a5:e1:5c:38:d5:8c:b2:7b:af:36:a9:57:
         bb:78:12:d3:06:e8:e7:47:df:a2:3b:a2:5d:09:29:a7:66:23:
         cc:02:6b:24:60:5b:66:8f:f7:76:0e:85:c1:19:61:10:23:bb:
         50:e8:e3:41:59:6d:da:81:81:9c:2f:ea:98:78:36:56:2b:36:
         7a:42:ed:8b:16:f0:85:a4:e0:96:70:26:e3:63:4a:2c:60:f7:
         5e:92:79:26:fd:28:9f:04:0a:72:a9:76:f6:ec:2d:8b:f0:18:
         78:ad:8c:44:50:0b:56:e0:d4:7c:c4:04:3f:b0:ad:2a:01:f6:
         e2:ac:42:af:34:a0:74:c2:4f:20:d3:02:9c:7a:ee:d0:19:84:
         a4:27:d8:33:cb:76:da:a0:1a:7c:ba:3a:2b:3d:22:6c:88:0b:
         74:3b:56:58:63:22:2d:1c:4e:ae:22:13:24:9a:aa:a9:08:76:
         fe:7e:6d:97:bb:96:4f:66:87:1f:7c:2e:18:c2:82:10:da:c2:
         d1:21:b4:87:01:43:dd:bd:c8:e0:a1:16:c9:1b:2e:87:23:99:
         af:07:d2:05:8d:16:19:6f:55:45:ec:a3:7e:c9:88:10:53:02:
         86:89:4c:e5:af:0e:19:45:81:85:a3:d5:df:5a:fc:8e:77:7e:
         9b:4a:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:22 2026 by rpki-client