Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa
File:                     b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa (raw, json)
Hash identifier:          IVlx+8TXCbhhvv+2XbYu9gVnGwM44eKbQFEymvKG1WQ=
Subject key identifier:   B8:10:E2:9E:6D:66:F8:54:6A:A0:C3:C3:72:8F:A8:5E:EC:21:33:6B
Certificate issuer:       /CN=8acb4eb7-b033-4163-a995-eb1cfc8903b9
Certificate serial:       010D0C9F4328584D7A0512AB28DE704B53484900
Authority key identifier: 71:EE:CF:06:4C:D4:0C:E4:A2:2D:8C:3F:B3:41:5D:72:20:C8:2B:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     25697
IP address blocks:        203.30.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/8acb4eb7-b033-4163-a995-eb1cfc8903b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/8acb4eb7-b033-4163-a995-eb1cfc8903b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:12:ab:28:de:70:4b:53:48:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acb4eb7-b033-4163-a995-eb1cfc8903b9
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=cebe04fa-4eb3-4d2c-944e-c70a20575218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:ab:b0:ad:53:82:fd:2c:e9:20:56:35:3f:
                    49:11:85:d9:d1:ce:d6:f8:0f:2b:f8:43:97:8f:a1:
                    13:82:5c:83:8b:6c:bd:44:cc:51:e4:1b:74:ee:46:
                    83:cd:b9:45:eb:db:b9:31:4b:e6:9f:89:12:fe:7f:
                    8f:c1:74:e5:9c:d3:75:ff:11:c0:0f:b1:46:88:79:
                    39:25:e5:b8:1c:cb:bd:b8:2a:ec:a9:91:96:95:6b:
                    5d:57:24:12:c2:4e:2e:ad:7c:83:81:0a:c9:14:ff:
                    8b:0c:c3:5d:73:38:2e:50:c8:26:21:b4:b8:d9:2d:
                    b4:ef:a6:29:c0:48:54:41:69:c0:43:f3:ac:9e:d3:
                    67:39:ab:46:60:21:fd:96:93:04:06:37:01:d8:71:
                    f4:fe:4d:7b:c0:69:78:94:51:aa:f0:5b:b8:67:f7:
                    0d:a1:cc:84:a6:b4:41:05:ca:82:a5:69:7b:bb:fe:
                    05:44:b4:75:aa:3e:37:03:6c:32:be:aa:22:d0:53:
                    06:30:3a:43:83:cb:71:28:d6:0e:bd:d7:7b:7e:a5:
                    0d:67:63:9e:af:d2:96:df:13:e7:9f:c9:a3:23:c5:
                    d6:42:d0:fb:ff:c9:8e:59:5f:98:80:1b:4f:0e:74:
                    07:31:06:78:9b:f2:a8:21:6a:67:99:fb:76:7b:bc:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:10:E2:9E:6D:66:F8:54:6A:A0:C3:C3:72:8F:A8:5E:EC:21:33:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/8acb4eb7-b033-4163-a995-eb1cfc8903b9.crl

            X509v3 Authority Key Identifier:
                keyid:71:EE:CF:06:4C:D4:0C:E4:A2:2D:8C:3F:B3:41:5D:72:20:C8:2B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b5:d9:74:de:af:13:83:8c:99:51:5a:b5:06:c5:6a:f8:49:
         72:c9:6c:0d:13:53:44:ef:3b:84:4e:6c:7f:6d:68:20:5f:82:
         6b:fb:d2:d7:ce:7d:6a:94:4c:2a:59:6e:63:50:cf:b7:dc:1b:
         bd:29:eb:21:90:6a:ee:c6:5c:7c:53:61:a5:51:8b:9b:18:02:
         35:a0:0c:87:fe:0b:28:57:83:0c:68:53:e3:db:8e:e2:14:ba:
         8c:e6:b0:7e:b3:3a:0c:d8:e6:46:d1:91:64:73:7c:a3:aa:8a:
         bf:9b:87:df:85:c4:d9:52:88:58:af:ea:f2:92:70:9a:b3:c3:
         65:9a:c5:e3:a0:48:56:d0:86:5a:85:45:6d:07:02:29:c6:8d:
         91:22:e9:98:15:d8:48:31:fe:69:36:4d:04:0e:93:37:c3:b5:
         d6:d0:4d:4b:40:8c:16:e2:60:a6:52:e9:74:a8:e4:b0:ef:e7:
         f2:3c:f9:1b:03:94:bd:4f:8e:75:01:fb:60:d9:27:2e:2a:67:
         55:6a:1a:c9:1b:54:c1:1b:f1:5d:13:10:5d:89:50:ee:f7:e6:
         68:d4:0c:48:0b:60:02:a6:a1:fb:91:0c:03:95:90:a0:d3:f0:
         1e:13:9e:89:64:5a:98:29:28:5d:ad:9f:2d:4b:0a:02:70:62:
         7b:e1:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:04:45 2026 by rpki-client