Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa
File:                     a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa (raw, json)
Hash identifier:          6Zlh65uxkOJOqfqFlWEqgMwTpMzozM2EyjsSylgS3vI=
Subject key identifier:   51:F2:D7:3E:B4:98:CA:DE:F8:35:1B:C4:F4:AC:10:3C:B6:61:4F:8E
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584D80FFF928FBFF6F4D64AA6BC0
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        146.197.80.0/24 maxlen: 24
                          156.37.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f9:28:fb:ff:6f:4d:64:aa:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=7b6d58ca-69f1-43e1-a3eb-10ce4f4f072a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:c1:94:b5:94:ba:2b:56:e1:44:2a:3c:31:
                    fa:6e:47:b4:c4:07:1d:70:a4:1d:f4:12:65:a6:71:
                    f2:46:00:b2:fc:12:0a:76:53:d4:ce:51:37:d1:07:
                    29:cc:7d:19:e3:dc:46:07:42:82:a1:9f:e0:5b:c7:
                    a4:26:5f:d9:c5:dd:d7:ad:34:b3:27:a7:1d:91:5e:
                    29:bf:84:7d:95:ce:4b:f3:fb:c2:1d:9c:69:2f:c3:
                    b9:9f:90:5c:f4:fc:e9:9e:6d:b8:54:b4:1d:eb:a5:
                    e4:87:c8:ef:a5:92:2f:ac:6d:d1:e7:50:2a:05:8f:
                    8e:a1:18:6d:66:19:02:fa:60:d4:0e:d3:d7:31:98:
                    9f:3f:95:fa:86:5f:ce:2a:b8:50:ba:5c:7a:7f:5b:
                    32:be:50:6b:91:82:0c:5a:5b:6c:eb:13:77:3b:ad:
                    27:b4:4e:eb:ca:0b:30:37:70:fa:76:dd:87:8b:90:
                    6c:5c:a4:ed:55:b7:33:5a:a4:9e:d6:a0:9a:08:f8:
                    c0:28:9d:0d:5b:96:b4:5c:b0:ab:6c:4e:00:20:03:
                    37:99:b9:b0:e3:1c:98:54:b9:be:d6:f9:03:d2:a5:
                    53:2c:0b:10:6d:5a:b2:82:79:1e:5d:6c:ba:47:07:
                    3e:68:88:c0:ac:82:e7:25:fb:39:bc:c8:b1:d6:49:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:D7:3E:B4:98:CA:DE:F8:35:1B:C4:F4:AC:10:3C:B6:61:4F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.80.0/24
                  156.37.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:5a:ff:e6:df:7f:7c:f1:49:3e:0c:ae:51:4c:81:cc:da:
         97:0b:4d:18:d7:42:7b:7a:59:4e:61:23:e4:52:7d:d4:35:c3:
         39:9c:cb:3a:ff:ef:23:47:a6:2a:4f:ec:6c:39:b4:9b:74:9a:
         95:02:37:3f:82:bd:6a:4b:b0:90:2f:b5:64:d9:17:6f:f7:d3:
         60:51:1a:52:93:a5:b6:4b:a6:ae:11:88:86:80:bf:48:12:f4:
         1f:5e:00:b9:fb:bb:39:14:c0:9d:78:45:8b:a8:1f:f9:f3:26:
         7d:c3:cc:7c:33:f8:68:f0:5d:7b:77:7d:04:33:fa:47:92:c8:
         be:8d:40:ff:16:ae:4a:75:f9:94:da:19:a9:38:d9:8f:c3:49:
         c4:e1:a8:eb:9c:f0:a8:9d:a7:36:18:bc:84:dd:0d:c5:bd:37:
         45:89:bf:b0:a8:f3:89:47:7e:a2:02:c1:54:45:9d:48:00:fa:
         6d:66:1c:3b:41:20:71:e7:dc:2e:f7:ae:95:5e:ae:26:30:43:
         27:fe:a5:e1:bc:eb:c9:4b:0b:48:24:36:83:d4:17:70:42:b3:
         54:4a:13:b3:d5:84:d2:cd:24:f6:93:e9:e4:9c:b4:4f:ba:9e:
         81:d3:1e:0b:51:24:6e:10:39:14:c5:0c:bc:e5:59:eb:8e:4c:
         28:c8:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:36 2026 by rpki-client