Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa
File:                     26cfd816-2d86-3517-87c3-b35ccc8a1995.roa (raw, json)
Hash identifier:          icSWUjq01ciIxjwGHL4gtHOXD2OJ7YREygoOz1ZxTRk=
Subject key identifier:   0C:3B:05:B6:5E:5D:D1:54:E2:44:7D:D0:F9:27:41:C1:D3:43:8B:27
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584D7B6A9A8989F36B0E32FD5700
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     54535
IP address blocks:        156.37.200.0/24 maxlen: 24
                          156.37.201.0/24 maxlen: 24
                          156.37.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:9a:89:89:f3:6b:0e:32:fd:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=de3f7563-06e3-4895-9ae1-dcaebf033db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:e7:df:d3:14:fb:8f:49:61:54:e6:23:7d:
                    4c:eb:4f:05:27:76:7d:5b:a9:6f:dd:f2:83:c6:24:
                    ee:2b:d2:1e:e1:da:b2:74:58:51:24:6d:31:a2:6b:
                    a5:3a:20:47:48:bb:7b:6c:a1:26:db:42:19:1d:a3:
                    10:2e:83:30:8d:7c:d2:95:e9:98:08:77:fd:f5:38:
                    8c:6c:83:9f:93:a8:8d:cd:11:3b:9a:32:db:13:0a:
                    9e:ad:98:f9:a2:ca:88:44:be:9d:6b:dc:0d:b2:92:
                    70:0f:d5:a0:2e:30:f6:a3:9d:08:5e:de:3b:78:b9:
                    f2:c1:3f:f2:f3:89:46:1f:ea:20:e2:d9:99:30:97:
                    8a:dd:c0:1c:42:e5:f6:c1:7c:55:15:74:18:b0:65:
                    de:55:e0:df:7d:42:5f:db:1d:b7:30:cc:fa:75:85:
                    18:38:34:a5:1e:55:e0:e3:33:5b:0e:23:5f:fb:12:
                    ea:b0:aa:3f:07:82:39:31:d5:fa:82:52:3f:df:fd:
                    59:72:4e:e3:a3:68:f7:0c:58:d5:cf:e8:c6:ab:21:
                    a8:d7:b9:51:bf:6e:a6:4f:74:16:b2:35:2b:61:39:
                    98:51:ce:50:ce:35:c3:97:22:0e:0d:6e:a8:77:b7:
                    a7:e9:0f:16:e9:03:22:87:23:37:ca:05:84:13:e1:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:05:B6:5E:5D:D1:54:E2:44:7D:D0:F9:27:41:C1:D3:43:8B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.200.0/23
                  156.37.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8f:6a:34:f2:73:73:ca:42:2a:3a:f6:90:13:d7:ca:96:07:
         ef:3c:7a:c7:13:8d:7b:f6:f5:8c:ef:e2:aa:b0:4d:1c:aa:bc:
         42:0c:ae:26:7c:d4:be:61:4c:01:c7:13:45:29:91:c4:e3:3c:
         3c:8a:23:cc:b0:f4:34:c7:44:90:76:a5:f3:fb:0d:9e:9a:7f:
         b3:24:c2:30:46:fd:e6:98:ab:6b:f7:98:b6:24:38:c3:65:b2:
         06:e3:44:51:17:c3:ea:e6:31:70:3b:1b:6c:5d:09:ed:50:ae:
         76:33:93:6e:d3:02:6b:6f:f6:ce:a9:e1:d7:51:e2:13:06:e4:
         38:a2:6f:d0:7e:84:96:54:cf:2d:94:79:e8:4c:fa:4b:b3:2f:
         98:7c:72:03:db:9a:21:c7:cb:c4:d2:f6:11:3e:12:76:6c:23:
         7e:aa:5c:d8:b2:17:71:5d:3f:7a:37:cf:a4:e9:ea:f1:46:0a:
         7c:c8:f4:54:43:8f:87:6d:23:d3:24:ce:c0:f6:7d:33:cb:56:
         f5:41:d9:6a:30:81:72:e7:de:0f:36:17:f1:92:05:10:b5:cf:
         50:ce:aa:a3:52:eb:5a:ab:43:27:bd:6a:08:f9:61:b6:64:64:
         22:6d:08:ac:dc:98:9e:a1:2c:90:cc:71:4e:35:23:ef:c1:1a:
         2f:74:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:38 2026 by rpki-client