Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3135352e3130332e302e302f32322d3234203d3e20343031363832.roa
File:                     3135352e3130332e302e302f32322d3234203d3e20343031363832.roa (raw, json)
Hash identifier:          gNCw9cyNsaLf2uNSGOTCz8/1wcZfCsgNl31oP1u4THA=
Subject key identifier:   D3:02:F8:94:15:E9:83:EB:26:0D:16:AF:4E:D1:29:3E:AE:3A:A5:6F
Certificate issuer:       /CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
Certificate serial:       6D35CEF4D962681459D2B5327B6B2C96E268E824
Authority key identifier: 7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3135352e3130332e302e302f32322d3234203d3e20343031363832.roa
Signing time:             Sat 25 Apr 2026 19:12:29 +0000
ROA not before:           Sat 25 Apr 2026 19:07:29 +0000
ROA not after:            Sat 24 Apr 2027 19:12:29 +0000
asID:                     401682
IP address blocks:        155.103.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/4e962717-1138-4d2b-9442-0332e9060132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 01:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:35:ce:f4:d9:62:68:14:59:d2:b5:32:7b:6b:2c:96:e2:68:e8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac
        Validity
            Not Before: Apr 25 19:07:29 2026 GMT
            Not After : Apr 24 19:12:29 2027 GMT
        Subject: CN=D302F89415E983EB260D16AF4ED1293EAE3AA56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:23:04:69:b2:7a:31:08:30:76:6b:72:b6:
                    01:40:20:e1:07:0d:85:ba:17:e6:e1:4e:24:60:72:
                    0f:1c:67:f1:d2:53:68:c8:3a:90:62:90:dd:3b:19:
                    ad:d7:2b:42:d0:29:a7:d3:04:7a:94:55:3b:95:ed:
                    bb:f5:09:75:da:54:cf:e4:35:31:28:9e:13:04:cb:
                    61:bd:dc:d7:52:06:cd:86:3c:2d:50:7f:10:e4:c4:
                    40:a7:82:de:26:45:65:a4:ea:31:95:11:15:41:a7:
                    2f:6f:7d:40:a0:81:75:63:72:81:68:d2:31:40:b6:
                    65:f1:37:d4:f1:13:02:3f:0a:f7:24:7d:45:ad:42:
                    d1:94:58:7f:d1:e7:4d:f4:13:c3:ea:3a:e3:3f:20:
                    a3:ee:8f:0e:bf:20:fa:eb:6b:0f:bf:46:cb:39:90:
                    9d:28:05:3d:20:94:c1:8b:bb:f5:c6:0f:a7:bd:4d:
                    0a:94:c6:57:bf:6e:8c:e4:d9:8e:d0:fc:04:55:b5:
                    99:eb:a9:94:e4:b4:33:5a:4a:89:c6:9e:a6:68:8d:
                    1e:df:b8:50:9e:64:c4:6c:c3:6f:d1:0d:c2:03:13:
                    67:8e:85:4f:82:b4:b5:35:5d:52:09:6a:88:d6:78:
                    10:5f:66:45:03:86:fa:5f:ba:41:c6:4a:0a:2d:35:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:02:F8:94:15:E9:83:EB:26:0D:16:AF:4E:D1:29:3E:AE:3A:A5:6F
            X509v3 Authority Key Identifier:
                keyid:7A:23:54:F0:82:84:98:49:CD:00:07:B4:50:E4:C1:B1:FC:5B:90:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/7A2354F082849849CD0007B450E4C1B1FC5B90DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f12291e8dd29114cf00baa89e4ee77d644c29c8fac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/1/3135352e3130332e302e302f32322d3234203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:22:f7:7c:3a:2c:76:a4:da:dc:f7:ad:2f:1d:6f:4d:95:d2:
         49:c3:6f:62:b1:92:3c:f7:1f:9b:d7:fb:0c:f9:41:1b:a0:bd:
         8a:5a:64:65:96:4c:88:1d:f3:d8:2c:8b:43:c8:06:c6:35:27:
         bb:e7:72:1c:8f:9b:43:9f:a9:ae:88:84:30:c3:ad:8e:ec:6c:
         27:be:ae:f7:35:6d:d5:3d:c5:e1:c8:4a:24:43:71:3e:7c:fa:
         dc:da:37:f9:0d:1f:4a:c6:0c:b7:4c:1f:19:cd:f2:54:af:c0:
         9c:03:60:26:a2:12:a0:af:17:f7:91:36:e8:a1:71:ff:ba:fe:
         65:07:38:79:e1:f2:8a:75:5f:cb:a6:f1:70:62:ad:56:64:35:
         82:a7:fe:d6:70:b5:a8:6f:f2:64:70:a6:85:41:2a:8d:53:13:
         4b:23:09:99:84:5c:9f:c0:df:3f:06:15:92:14:69:20:fc:d7:
         d2:97:9d:b6:1d:2c:f6:6a:fb:08:71:93:56:cb:a3:c4:77:5b:
         2f:0a:67:9b:5b:bf:a3:55:93:e0:c1:aa:0d:95:5d:4b:60:05:
         9d:95:91:fa:40:1d:fd:47:42:0e:0f:de:00:7f:39:83:a9:c5:
         79:99:52:cd:49:d8:b4:02:3d:56:c4:57:9f:e3:74:48:42:c0:
         91:54:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:59 2026 by rpki-client