Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa
File:                     c54be940-176e-3507-b859-c6607747abb6.roa (raw, json)
Hash identifier:          QTExGHX710LA2eOS2TlCXyP66yDpRdYihW6t6iK1/yQ=
Subject key identifier:   81:9A:C0:AA:00:40:90:04:E2:54:B5:83:93:6A:76:A6:63:F9:AA:1A
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D651506362450DA0C2A717B80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        192.184.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:06:36:24:50:da:0c:2a:71:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=bd729a97-9586-431d-8bf8-4d186fd9b6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1c:55:4c:67:92:0a:92:d3:da:c8:69:19:3f:
                    70:4c:2b:79:f2:d2:0e:d1:0a:34:89:ab:29:68:be:
                    77:b9:57:18:76:71:64:4e:16:7a:96:11:74:3a:54:
                    c6:1a:9b:d4:20:1c:6f:6f:cf:48:ab:ae:3e:7c:b3:
                    1b:86:bf:d1:ea:3b:78:b7:8b:53:0a:ab:0f:b7:f5:
                    d7:f3:8b:85:5c:e0:e7:df:d7:ae:aa:ae:87:6c:10:
                    cc:a7:1a:13:a1:6c:49:70:c5:7e:ea:f0:3b:42:cb:
                    e9:70:23:57:cf:5f:87:ed:9e:fa:42:8c:02:4f:92:
                    0a:37:d9:15:f8:47:70:fb:9d:f7:79:6c:42:e2:7c:
                    56:48:5b:0a:1c:cc:9e:b4:2d:9d:c6:af:98:cb:5e:
                    70:bc:3b:94:87:6b:74:1c:e3:80:db:de:2e:91:d0:
                    99:3e:6d:89:af:c3:84:61:43:e3:83:29:83:71:49:
                    11:1b:f5:3e:8f:81:bd:aa:6a:69:f7:53:f6:bf:26:
                    d6:08:c9:e5:36:71:02:89:11:bf:2c:2e:06:86:a1:
                    51:7b:d6:ca:4d:bd:c8:e9:fa:20:e9:11:8c:ba:72:
                    3f:38:3b:37:07:e5:cc:00:e6:93:32:f1:22:d8:23:
                    f0:aa:ac:7d:04:39:5d:49:51:41:33:fe:02:81:d2:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9A:C0:AA:00:40:90:04:E2:54:B5:83:93:6A:76:A6:63:F9:AA:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c54be940-176e-3507-b859-c6607747abb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:8f:12:27:ec:72:21:f7:57:0b:27:59:7f:a6:bd:f7:28:
         55:b6:29:9b:51:04:7e:e8:a2:56:20:86:0e:9c:65:df:d3:35:
         0e:29:11:b6:3d:5d:72:1c:58:b1:d4:20:e7:84:49:d0:c5:1a:
         93:a8:29:65:20:d5:64:ce:5a:77:f8:44:b1:f2:9a:22:db:27:
         5d:ab:09:ad:78:f5:ca:34:e9:01:73:5f:19:eb:47:ea:b9:36:
         93:fd:56:70:62:c5:e4:7f:1f:ea:4d:f0:87:3d:4f:d7:4d:f7:
         14:b7:21:7a:6c:23:1d:19:8b:83:e1:8f:39:d5:58:be:d6:a8:
         85:02:60:d9:74:ce:ae:54:2a:ee:64:24:74:5c:c9:73:aa:a9:
         bd:d2:de:dc:c6:38:73:83:16:41:73:68:1c:78:e6:6e:a3:e4:
         bc:26:00:5a:b8:47:f2:ef:dd:cc:7a:6c:d5:52:dd:7c:3a:75:
         3e:60:eb:14:81:8f:ed:e1:3f:a5:5b:bd:27:70:1e:2a:dd:fd:
         63:fb:da:77:cb:40:a9:9a:65:3d:53:f2:05:78:15:77:40:ed:
         a3:19:16:36:35:30:c0:f7:11:ac:2e:f2:73:25:71:01:99:49:
         2f:bd:ed:cf:de:42:49:9a:4e:16:0e:2f:e2:53:f6:cb:d6:b5:
         6a:df:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:34 2026 by rpki-client