Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
File:                     12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa (raw, json)
Hash identifier:          LSHrs9etWX4W1DvS1DVbvNyWWQ9O0dMGWcCeqFvYSNw=
Subject key identifier:   CE:0D:87:DF:50:12:C1:2D:4B:3F:22:52:E2:DB:9C:B5:EB:85:F0:AF
Certificate issuer:       /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial:       010D0C9F4328584DB4A576B1CC11870B985BB380
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     7018
IP address blocks:        199.83.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:76:b1:cc:11:87:0b:98:5b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=3cda10bf-c655-450d-960c-3b99144f98e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:73:d1:79:09:48:d6:95:4b:b5:14:e3:ec:
                    1d:f3:e5:5b:46:f9:e1:da:39:46:3e:30:1c:45:37:
                    96:e3:4d:1a:5a:c6:7d:bd:25:62:e5:2b:50:08:78:
                    ae:6f:c7:64:e5:8d:9f:77:39:e1:79:10:06:e3:33:
                    2e:e1:bd:72:20:77:04:15:37:ae:bb:23:46:57:7a:
                    2b:fc:a6:40:ea:98:88:6c:11:e5:31:c8:eb:87:90:
                    45:64:a1:cc:46:7e:b8:cf:4c:f6:c6:54:d5:a9:2c:
                    e4:6c:f1:b4:23:9a:c2:32:56:62:f4:c4:d2:63:8d:
                    65:53:3e:98:a8:a4:55:ff:de:cd:72:a9:28:a2:f8:
                    ab:27:65:a5:56:c5:7f:98:f5:da:27:41:4b:2c:dd:
                    b9:cc:fc:87:a2:62:ea:77:5f:2d:a7:34:a8:ed:30:
                    a1:0f:37:aa:69:55:16:bb:c1:c0:fb:24:0c:21:01:
                    cf:34:c7:35:93:49:0d:94:3a:ad:f6:a2:fc:48:12:
                    1e:53:48:e3:74:d1:d2:6f:b8:48:12:9b:98:ef:64:
                    ea:8a:63:54:e5:31:ab:6d:18:c6:88:9f:c0:f6:e2:
                    9a:c6:5d:55:1f:87:1b:1a:4b:05:5f:4b:b1:e1:38:
                    f9:77:f2:cf:7a:ce:27:1f:96:b8:83:39:c0:19:09:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0D:87:DF:50:12:C1:2D:4B:3F:22:52:E2:DB:9C:B5:EB:85:F0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl

            X509v3 Authority Key Identifier:
                keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6c:ec:52:d2:ab:8a:15:fe:32:03:ff:23:ea:a8:3a:9f:96:
         e2:2a:e5:ea:da:01:f4:c8:53:b2:b2:93:ca:bc:03:1b:78:8e:
         30:fb:d4:f6:c1:f3:90:f3:56:fc:b5:a9:96:37:61:d1:41:a9:
         ed:2d:5e:fd:27:d7:50:96:9c:7f:14:f0:11:7d:e0:8b:52:15:
         e3:b8:c5:fa:e3:1c:7d:f4:d1:65:06:7f:86:95:89:08:8f:34:
         ee:ff:61:71:d4:28:4a:53:6c:e9:e5:da:1e:d5:3a:c1:d9:4a:
         9e:93:79:bb:ad:32:cd:55:bb:62:7b:db:90:11:80:eb:bd:75:
         01:f4:ff:ea:a0:69:a6:04:ee:76:0b:e8:f3:52:48:0f:72:0f:
         3c:14:7b:7e:eb:c4:5c:06:0c:31:63:20:f8:6c:ab:11:88:52:
         ff:ab:cf:38:53:cb:84:ad:a2:f2:80:d1:96:99:85:0b:77:3b:
         47:cf:76:7c:4a:8b:69:1d:90:c8:a6:50:5d:af:2e:0c:44:d7:
         dc:ee:78:64:91:ad:9e:44:f1:81:7c:d8:5f:60:06:86:57:87:
         44:e9:6b:21:e7:8b:f6:33:96:a9:1b:4b:4f:c3:4e:21:3b:a3:
         43:0a:fc:1e:36:91:a5:ff:ca:d7:c4:72:6a:87:75:72:0c:36:
         c1:f5:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:50 2026 by rpki-client