Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa
File:                     87ef1e25-a9ba-3e98-a722-fc379493d000.roa (raw, json)
Hash identifier:          xKNCN//HFIsWozhPC0zpX27FGrBpEVHsMWalGqwza9g=
Subject key identifier:   E6:8A:7B:99:95:F5:76:B1:6D:B8:8A:EF:1B:5F:71:AC:E0:01:78:70
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D6AAA6C7BA325383812188380
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        134.224.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6c:7b:a3:25:38:38:12:18:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a28d5646-27b9-481e-8523-942cd94d53b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:f2:bd:e9:cd:15:5d:3b:ca:79:d1:a6:8d:
                    64:22:ab:e7:29:c1:ea:8e:67:84:ea:dc:f4:b2:c5:
                    ba:2e:f7:85:8a:c1:99:60:60:75:9d:13:05:2d:b1:
                    a0:72:dd:28:e2:4f:5c:fa:3b:50:c2:ff:53:b6:c8:
                    49:ca:dd:93:93:d5:6b:d6:b5:95:98:2b:d7:4f:13:
                    73:5e:c6:c7:1c:e5:0f:9c:40:09:8a:bd:9a:48:4f:
                    d3:d0:c5:d7:d6:c2:8d:56:14:be:78:ae:0a:07:8a:
                    f1:20:b8:e6:29:eb:56:2c:66:6d:93:24:26:e3:5b:
                    6b:81:55:b2:27:46:80:c8:c2:f8:93:63:e3:04:72:
                    87:58:5e:72:6b:f7:88:64:78:83:2e:0f:a7:c0:a0:
                    76:db:2b:61:2e:a9:cc:1e:4b:f6:0b:83:de:83:5f:
                    4e:08:7a:5b:99:4e:45:12:87:42:47:e8:95:88:ea:
                    5f:b8:0d:1f:a8:c0:b1:49:b5:89:b1:44:e9:df:7a:
                    ef:a2:11:10:43:f7:a8:18:0a:60:ff:d9:44:ae:38:
                    fe:ae:be:47:d6:28:5f:8a:e0:fa:9b:45:b5:77:c4:
                    3c:aa:2a:e8:81:87:1a:be:fa:53:9b:a6:d3:32:2b:
                    d0:5e:c8:63:71:29:b1:53:cf:24:b1:3e:65:3f:ff:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:7B:99:95:F5:76:B1:6D:B8:8A:EF:1B:5F:71:AC:E0:01:78:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:f7:bc:a6:0c:55:2b:f9:31:58:24:7b:4c:15:21:84:da:
         dc:77:29:07:8c:45:eb:41:96:86:6c:74:b6:e6:41:38:8e:5a:
         a8:91:c8:af:a3:6f:a9:fa:9d:52:6d:27:c4:41:70:c9:63:32:
         b0:2a:10:52:6c:8d:7c:7b:27:66:b7:03:70:55:ae:91:b0:18:
         f0:0d:8b:28:60:d3:c2:e6:fd:17:d9:ab:8e:17:1d:da:49:c4:
         b3:03:ed:a7:56:cc:6d:31:6b:59:3e:b8:3f:b4:14:04:6a:e7:
         61:10:1a:b9:c5:82:e9:da:9e:79:92:3a:93:b1:d7:bd:ad:45:
         dc:4d:6a:a3:e3:28:4c:ce:5c:4b:cf:df:34:98:6b:d7:66:dc:
         d2:6b:0b:26:aa:b2:3a:fb:1d:5b:fd:4d:bf:b8:26:78:e8:bf:
         df:d6:d8:71:da:ca:df:44:8c:0d:cf:41:bf:41:cc:f1:d0:a1:
         a8:4b:86:8e:9f:fa:73:32:c5:cd:ac:9a:36:53:36:a4:d1:84:
         c8:fb:eb:b9:9e:ae:0e:23:94:30:5c:9a:4f:9f:e8:6d:e6:d1:
         bc:78:27:d3:a8:8a:a2:43:07:ea:bc:ae:46:79:e5:5b:2b:fc:
         ac:9a:1a:ae:ad:7d:e0:4e:20:a0:23:d6:af:94:8b:a3:be:83:
         eb:01:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:05 2026 by rpki-client