Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa
File:                     452a8ba2-ade7-3b56-98f5-02f50e546db8.roa (raw, json)
Hash identifier:          gM0BTtOxygzWUTAEwKQoa3HasQu5UosG1FVcP4oPb7w=
Subject key identifier:   B6:24:EE:33:12:5A:50:4C:EF:C5:9D:89:FA:60:A6:8D:30:52:2A:18
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584D703FCE02DC9C219B2F57C780
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     24753
IP address blocks:        64.49.154.0/23 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:ce:02:dc:9c:21:9b:2f:57:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=09362c75-85f8-4dbc-bff3-90dff52c549e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:51:91:d9:34:a2:d5:28:ae:a5:05:64:15:
                    7c:d1:18:1d:12:7f:1e:ad:bb:d0:e0:ee:63:ad:e2:
                    ed:c4:ed:b2:6f:ca:e3:da:06:6b:bf:a9:cc:19:8f:
                    c1:01:25:fa:17:7f:10:96:91:b6:2a:cd:c5:62:a5:
                    6c:15:1e:bc:81:e0:81:2c:55:65:b8:0d:14:91:74:
                    36:ed:5a:d6:b7:07:76:73:fe:96:13:35:76:cd:5e:
                    9c:1e:1b:3d:24:46:51:08:32:5b:02:e2:be:80:73:
                    9f:97:67:88:f8:c4:f2:c7:14:a6:cc:67:c7:ed:60:
                    25:b5:97:fa:cb:fb:9a:ea:e3:54:ed:39:36:6f:bb:
                    35:ee:ae:ee:b8:14:09:f3:3b:27:09:ae:6a:68:84:
                    57:4c:9a:9e:2c:11:65:a4:1e:a3:d3:bf:4b:71:30:
                    74:42:6e:9a:f4:81:71:8e:55:95:a8:16:23:14:51:
                    9f:4d:98:a7:93:f5:2e:8d:1a:a2:50:05:3a:0b:70:
                    28:30:47:49:08:98:51:e1:22:c6:bc:7a:6a:28:8a:
                    35:87:a1:ca:fc:97:ac:3a:18:e3:96:e0:ea:7d:b3:
                    c7:87:d6:a8:c6:c2:64:b6:62:c3:47:ca:9d:aa:32:
                    11:2d:b3:17:19:f8:47:ce:a6:eb:9f:43:7d:0a:c1:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:EE:33:12:5A:50:4C:EF:C5:9D:89:FA:60:A6:8D:30:52:2A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:f8:66:b9:2f:54:ab:62:f4:a2:06:4f:5f:ff:f8:7b:e5:
         34:63:15:50:cc:8c:38:8c:14:2b:4c:da:8e:74:2f:4a:1a:b2:
         18:6f:59:45:d9:10:e7:df:17:70:e2:99:cc:25:85:04:cb:f0:
         bd:9a:53:3c:76:e4:84:df:df:0c:d6:f5:7d:99:0c:5c:21:24:
         2c:d2:f0:f1:a2:bd:3d:36:5d:21:12:12:29:2a:be:f4:c2:6d:
         77:a1:e7:93:2f:74:fa:ad:4f:e3:8f:63:f1:d3:62:a8:0f:8d:
         bd:18:41:ae:61:b5:df:18:58:94:ce:07:e7:c8:6e:89:dc:7a:
         d8:a3:f6:b8:cd:dc:bd:ee:f3:7f:b4:7c:70:f4:6c:d2:c8:68:
         56:ee:06:f2:00:f5:7b:b0:cc:a0:fd:d9:8c:6f:f4:2a:4a:23:
         7d:a5:b0:fb:d6:f5:2e:16:10:bb:85:3b:50:2e:f1:3f:80:43:
         fd:e2:b3:f0:dc:43:a2:a6:66:f6:b4:77:41:41:78:61:55:37:
         b4:bb:70:91:00:da:4f:02:46:fb:f0:f0:7a:a0:f9:a0:76:76:
         8a:19:0d:38:7d:5f:9e:98:29:c7:4a:50:1c:3e:bd:ce:80:9f:
         ed:e9:5e:24:ce:88:78:25:8c:96:cd:ad:ec:1e:2a:19:21:5f:
         25:84:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:45 2026 by rpki-client