Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c5afc-23c6-38b6-ab29-c12ac7626026.roa
File:                     d73c5afc-23c6-38b6-ab29-c12ac7626026.roa (raw, json)
Hash identifier:          /U9uqw8+lWwW2cg+l6K7Al2oPXzJOgS2bJOUkdJVVFA=
Subject key identifier:   E3:BB:06:21:26:5A:72:85:EF:1C:FA:33:E3:64:E7:6D:43:D5:5D:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D7A0538C7DC9B0A24AF5BE2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c5afc-23c6-38b6-ab29-c12ac7626026.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        184.25.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:38:c7:dc:9b:0a:24:af:5b:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=7e203dbd-d683-4e33-b26d-a2fdcae22e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:dd:cf:6a:a1:71:24:55:3c:04:54:2e:3f:
                    28:94:61:ac:9c:ea:0d:c2:b0:3b:dd:5b:f1:b6:ed:
                    14:eb:71:cc:07:d3:f2:f5:8b:a1:10:7f:7e:51:39:
                    aa:21:f6:26:e7:d5:8f:9f:c2:08:10:b2:c0:0f:ae:
                    1d:07:dc:08:c9:03:dd:d9:d3:b5:34:ce:ed:ee:35:
                    5b:31:4c:e1:5a:12:fd:1b:f1:31:ce:16:6a:2d:47:
                    89:e3:c1:ba:0e:cb:46:a4:da:43:1f:d1:2f:c1:69:
                    01:dd:05:e9:3e:dc:c7:97:34:0f:73:cd:45:fe:96:
                    3a:de:e3:19:51:a1:87:78:63:d1:41:fb:3a:e7:6d:
                    cd:69:fc:5d:84:bc:f0:64:fd:5f:fe:f4:2f:41:f6:
                    44:c7:a0:6c:c3:23:b7:cc:92:17:bb:fe:6b:c8:96:
                    bf:5b:76:aa:a0:a5:52:5c:4d:57:ec:1c:b9:21:dd:
                    06:26:4d:fd:f4:63:b1:77:8b:81:73:ef:b2:5f:2d:
                    b4:15:74:05:53:e3:0f:54:b8:de:04:30:ee:98:3e:
                    b4:77:38:90:06:f0:38:23:c2:eb:67:f1:9b:39:c7:
                    aa:dc:d5:48:a8:4f:d2:53:45:88:45:f8:62:c3:d7:
                    cc:3b:33:99:81:ce:a7:de:7a:27:9a:26:1f:80:b3:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:06:21:26:5A:72:85:EF:1C:FA:33:E3:64:E7:6D:43:D5:5D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c5afc-23c6-38b6-ab29-c12ac7626026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:89:4f:01:9e:21:7f:38:c7:c5:09:61:9b:3c:5d:f0:a8:
         e6:db:c6:da:f2:41:f4:b9:ba:93:24:25:43:62:cb:7c:2e:37:
         22:9b:68:cb:8c:7b:e3:ca:06:d8:88:1d:46:a3:97:49:86:97:
         dc:76:ab:c8:bd:a2:e5:4e:85:63:9f:d7:48:9b:a3:fe:fc:48:
         06:98:a1:18:1f:38:50:e3:ad:82:dd:e8:30:c0:63:7c:22:db:
         9b:1b:30:71:3e:71:22:88:df:f4:af:70:c6:b5:78:c9:bc:c3:
         65:89:6d:87:5d:78:ba:26:b0:b9:be:58:f5:21:71:f3:62:05:
         23:0e:f8:bf:47:9d:64:33:a2:81:c2:4c:ff:a0:9b:0c:db:0d:
         bd:d4:1b:d3:11:e3:94:bb:9d:9c:a3:7b:58:ea:ce:e7:08:42:
         6a:d9:2d:74:9e:67:1b:a7:e8:41:a0:bd:1a:ec:fb:ee:bc:6a:
         9f:b0:26:76:e6:36:2b:58:6b:97:e8:13:a4:93:c6:bb:e4:49:
         83:2a:4b:d1:3d:db:0e:0f:d1:59:85:18:28:f4:5e:71:a7:f0:
         36:11:7f:62:15:13:85:c0:33:6d:a5:67:a8:60:26:7f:dc:f1:
         d1:d5:66:33:84:80:7e:9e:76:79:57:d8:39:b7:f9:76:56:72:
         f7:04:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:32 2026 by rpki-client