Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
File:                     4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa (raw, json)
Hash identifier:          v+5heEyNFwXkthGXl3fdX0yHN8Pm/WIvCuOXjMij7nA=
Subject key identifier:   A4:FD:3E:E5:68:CE:24:FF:B6:97:83:F2:85:F3:F0:16:93:D3:D5:04
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584DBFD058A683F903EB66FC90C0
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     44486
IP address blocks:        134.65.192.0/22 maxlen: 22
                          164.152.160.0/22 maxlen: 22
                          169.155.44.0/22 maxlen: 22
                          169.155.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:58:a6:83:f9:03:eb:66:fc:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=e59adc3c-f45c-4711-b2a6-c8de1cd523f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:01:5f:d4:61:b5:06:8b:2d:25:6f:94:b0:
                    6b:df:2d:43:cd:57:ca:99:43:d7:6b:7f:0f:21:02:
                    47:2b:60:4a:1f:71:c7:d5:b8:30:f9:66:7b:18:f8:
                    e9:77:f6:83:52:ce:d0:ad:ee:7d:c2:2b:c5:d0:0e:
                    5b:83:12:a3:eb:22:66:c3:44:9c:9c:5e:17:42:6f:
                    cf:69:63:29:1f:22:a3:fa:8d:32:a7:97:a7:96:3b:
                    80:99:21:14:33:4b:df:91:24:ce:64:79:5c:20:19:
                    b4:86:c2:9f:53:0f:a9:53:b4:8b:2e:62:3d:2d:57:
                    e9:7b:10:0e:20:4a:47:3a:9e:c1:81:45:c4:2c:66:
                    0f:84:88:eb:0e:94:ea:9c:15:37:3d:7c:6d:45:ea:
                    c0:9f:88:10:92:59:26:93:ae:ea:4b:f8:23:1f:fd:
                    a9:dc:d1:2f:cb:e1:5d:1a:a0:fe:53:90:d6:2a:0c:
                    e1:70:2b:35:5c:0e:e7:08:77:7b:e4:fc:ff:b7:a9:
                    f2:b6:41:84:6f:19:61:71:f8:f1:70:54:2d:ec:5f:
                    42:c0:53:51:1d:61:51:8a:1d:70:79:34:b0:fa:57:
                    e9:15:98:04:9e:35:21:2c:22:b4:53:d9:18:33:97:
                    20:6f:94:40:d5:d8:91:f6:97:87:1f:8c:50:2d:39:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:3E:E5:68:CE:24:FF:B6:97:83:F2:85:F3:F0:16:93:D3:D5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/22
                  164.152.160.0/22
                  169.155.44.0/22
                  169.155.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:70:7d:f4:b8:41:fe:1c:93:d9:30:c5:a6:ac:c9:21:a5:06:
         3a:73:4a:89:fe:c4:9b:5c:d9:f1:f0:e0:f6:ef:9e:63:28:2c:
         c4:bf:3e:9a:57:54:b3:90:f7:43:bf:6d:7b:cc:8c:1d:b9:76:
         8d:3d:a7:16:aa:41:a3:4c:1d:a8:4c:59:d2:9a:89:ff:2c:0a:
         ac:af:d8:54:cd:37:51:08:aa:fb:33:c0:00:41:91:4e:86:d8:
         33:c8:59:1f:2d:55:ff:83:1b:20:3a:03:88:e8:80:75:85:60:
         bd:b4:47:48:ec:b8:7a:eb:d5:e7:0f:96:83:76:bd:79:db:15:
         52:5c:f5:d1:db:dc:5a:1d:82:27:b6:fc:07:db:64:27:44:ff:
         b1:28:b2:39:40:6f:7b:b0:41:15:9c:1e:d6:58:f9:90:97:57:
         95:33:2e:2d:d9:be:f1:8a:95:59:75:26:75:1e:fd:ab:d5:f4:
         31:0f:a6:0b:3b:0d:d8:d4:e1:78:e2:44:35:00:06:3d:8b:90:
         fb:2f:41:a0:fe:2c:71:52:6f:21:81:e9:5a:f5:50:fa:cc:53:
         f7:66:78:94:62:a2:d8:4a:df:7f:19:ba:36:d1:70:f2:1c:4c:
         0b:0b:c3:ca:4d:07:74:78:46:39:76:d2:92:01:c3:5b:57:91:
         49:6f:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:29 2026 by rpki-client