Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa
File:                     2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa (raw, json)
Hash identifier:          rZKf9eVdKLQ1GsJfGSeV8R+AUPUoy1G5mPYuN0XcOZU=
Subject key identifier:   5E:16:35:B6:22:51:9E:C4:95:0D:AC:20:AF:21:53:EC:62:D4:C0:D5
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584D6AAA6AD077191DB7B89B1340
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     24753
IP address blocks:        64.49.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6a:d0:77:19:1d:b7:b8:9b:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=3586a4fb-174f-4ea5-b465-f60c342ced9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:70:09:f2:43:b7:f8:71:89:3e:e9:3a:cd:
                    e7:8a:33:80:dd:97:5a:e8:97:88:ee:44:7d:ea:4b:
                    71:db:16:7b:ef:6a:6c:b9:f8:f6:fa:54:51:69:76:
                    57:0f:87:f8:d5:7c:c6:d5:e1:01:06:9c:6e:ad:89:
                    c7:f8:99:a6:e8:63:1a:3d:47:fc:4b:fd:cd:94:ca:
                    24:3e:ad:a8:bb:1a:72:91:a8:d5:9c:44:3d:54:a9:
                    23:d1:db:27:66:16:93:bb:8e:3f:59:da:81:3a:ee:
                    e2:65:37:2c:69:d9:13:3a:6b:9a:4d:09:3c:6f:4b:
                    d0:13:1c:c3:53:07:21:32:c7:74:0f:9d:96:bd:42:
                    ad:46:fb:82:1c:b8:b9:d2:e0:cd:5a:7a:b6:ad:98:
                    d8:82:b8:61:83:78:c7:21:82:6c:bb:d5:d7:1a:c0:
                    bd:22:c8:27:eb:f1:21:28:3e:0b:cb:b7:63:4c:bf:
                    9e:26:20:9e:b3:39:2e:d9:9b:6b:fa:0f:2e:46:25:
                    f1:2b:b1:3c:51:8e:8f:1d:1e:34:66:34:66:40:45:
                    ba:24:55:91:98:42:bc:ec:b3:1a:82:1c:c6:68:1a:
                    00:3c:03:ee:0a:51:35:63:f2:c7:e7:4c:1b:c3:2d:
                    a2:3a:9b:b2:ad:a0:c0:f0:4a:69:d9:c6:df:1b:32:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:16:35:B6:22:51:9E:C4:95:0D:AC:20:AF:21:53:EC:62:D4:C0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/2a984cf4-8ed3-3545-8c6e-d930e9904b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a4:3a:8b:50:86:96:9a:90:12:48:8b:7a:5c:86:d1:01:6e:
         79:cc:a5:bc:ec:23:95:85:e2:b8:96:c0:15:af:dc:5b:af:6c:
         0d:c9:7d:a7:aa:7f:71:1b:61:df:d6:f7:41:f7:e7:6d:9c:9d:
         49:cf:98:5b:43:03:f7:9e:39:1a:65:24:fb:66:58:be:79:c4:
         0e:53:21:95:1e:a4:73:1d:3d:97:3a:d0:d1:6a:e5:4c:0d:61:
         e5:88:6c:7a:f7:5f:63:1f:bc:66:f3:59:ab:30:09:68:8e:9b:
         b1:3e:2c:9d:8b:c2:ba:34:77:c3:0e:34:c3:d4:aa:ed:a8:59:
         44:85:31:3a:9c:c5:1f:5e:ad:36:cc:1a:95:2b:04:23:58:a9:
         58:d9:55:e2:c6:8d:1a:bf:dd:32:ff:6a:51:41:f7:5b:80:a1:
         83:f8:4d:a8:9d:a9:da:f3:f9:a7:fd:dd:4c:7f:43:38:c4:20:
         80:08:35:d9:d0:fb:33:00:4e:e1:bb:15:d8:cc:cf:ed:55:1c:
         4e:21:ce:25:dc:0a:55:4d:6a:a8:9d:77:7d:c3:50:cf:76:86:
         6d:a2:6f:ca:b6:0d:93:da:8b:a5:01:a8:53:e3:4a:df:11:0b:
         44:01:2e:d0:29:a8:ed:9d:33:ef:41:dc:d6:6c:97:5b:79:79:
         c2:62:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:06 2026 by rpki-client