Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c91cfcf9-6544-3453-9678-80993435d5a3.roa
File:                     c91cfcf9-6544-3453-9678-80993435d5a3.roa (raw, json)
Hash identifier:          Hmc2orCw/tZkIMTzyCWsik06WBgTTnKnQGuDoWyApOM=
Subject key identifier:   52:C3:64:92:8C:6C:0A:DF:63:C4:7F:F3:7E:76:A2:0C:B6:6C:DE:2D
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584CB81C74768815A073C8598900
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c91cfcf9-6544-3453-9678-80993435d5a3.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     54994
IP address blocks:        153.43.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:74:76:88:15:a0:73:c8:59:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=5d858090-9384-41fd-a37f-61861a899a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1b:5d:4f:c4:ce:9e:49:d5:18:8b:ed:9d:54:
                    96:4e:f3:10:f6:a1:ea:b5:32:50:5d:92:d4:2f:0e:
                    c2:1f:4e:5e:eb:f1:3d:90:07:b0:47:7d:fe:3c:52:
                    e8:62:65:64:56:9c:71:83:b1:90:dd:f7:71:4f:30:
                    50:78:1a:a2:cf:c9:6c:9f:65:0f:e7:7d:64:62:73:
                    2f:4f:63:a8:11:40:67:5a:b4:d4:40:2d:3e:63:ce:
                    39:0b:58:3b:99:98:68:77:ef:04:ee:91:c8:db:3c:
                    f6:77:0c:96:6e:2a:92:8c:80:e3:c9:34:48:75:f1:
                    e7:1b:f1:21:9a:62:1f:fa:1e:dc:72:c3:dc:b4:93:
                    8d:9e:a6:b9:a8:9e:69:02:9e:0d:29:0b:51:97:7e:
                    96:36:8e:3b:54:59:0a:c9:84:d2:1a:50:be:81:12:
                    1f:f1:56:fd:58:8c:3b:90:6d:87:68:4c:e7:9b:d5:
                    1c:72:f6:46:d1:b3:8d:c0:17:de:68:55:7f:2f:cb:
                    11:c4:f4:a6:31:a9:c7:70:eb:0e:87:76:67:d5:0a:
                    92:52:f3:19:26:9c:f6:55:01:fd:ce:2a:29:34:12:
                    96:fd:87:fb:a6:47:34:34:be:71:9a:79:ca:af:89:
                    ea:44:ae:f0:2f:16:ae:00:4b:e1:77:e3:31:c4:c7:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C3:64:92:8C:6C:0A:DF:63:C4:7F:F3:7E:76:A2:0C:B6:6C:DE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c91cfcf9-6544-3453-9678-80993435d5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:de:7a:01:3e:94:76:f6:ca:b2:3c:3a:2a:ab:38:3e:67:af:
         20:65:39:e4:11:8f:7b:0e:c5:18:a9:88:5d:0c:11:f5:17:71:
         d0:db:6f:ea:ce:b7:e6:31:f5:58:f5:a3:16:ed:18:a1:07:68:
         87:76:36:23:19:f1:a6:fb:33:a0:4f:c9:1d:ba:c2:bb:9b:4d:
         d3:2a:dc:ca:3b:df:57:c2:ef:94:1c:47:f9:3b:b3:08:29:a1:
         ba:3c:fb:10:0b:fe:86:62:00:9b:f6:89:bf:56:a4:34:eb:b5:
         ae:f3:2c:c8:c6:55:a6:83:63:b4:2a:2e:ad:07:3b:c8:58:39:
         11:c3:40:37:52:93:c2:fa:31:9f:04:bb:d4:30:b4:44:72:56:
         a4:bf:de:64:72:9b:2d:f1:ef:60:10:9e:b2:e5:5c:51:4c:70:
         5a:42:29:c0:e8:58:4d:77:f3:35:62:b2:38:7c:7e:f9:f6:b5:
         e2:c9:6f:57:d0:87:93:4b:28:2d:6a:a0:c5:c1:ba:09:9c:e8:
         f8:a1:10:de:7d:b3:dd:6d:3c:30:8f:17:e6:6d:66:12:84:4b:
         4d:1a:c9:ac:c0:46:e1:b6:6e:3e:16:37:88:8c:9a:20:60:0f:
         30:2e:db:12:83:66:48:0a:a7:39:32:b1:9d:61:2d:13:ad:b7:
         fd:57:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:20 2026 by rpki-client