Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa
File:                     85f04602-815a-374a-b7b8-25f3d69f600e.roa (raw, json)
Hash identifier:          6N+8ekD+lnAPU4Oy8y9N1g78zehzQ7OyAeV6LUIVNWA=
Subject key identifier:   E4:54:94:53:BF:A6:2A:90:64:9A:16:A7:2C:47:47:41:DA:D5:82:E2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC995BB388EE65554E7D47180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     19905
IP address blocks:        150.195.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:bb:38:8e:e6:55:54:e7:d4:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=cb81e271-7ddc-482f-8285-4dd4828fe4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:36:79:d5:9f:0b:7b:7b:18:3f:7c:09:a5:
                    8d:19:eb:de:12:87:28:b7:14:97:de:83:69:8a:2e:
                    cb:c7:31:f0:71:b9:39:4d:4a:64:01:e8:fa:5e:e2:
                    ae:3d:01:59:6c:f0:62:78:e3:de:79:94:49:78:99:
                    f4:7a:70:bc:79:32:c4:92:de:ca:86:fa:ec:0b:12:
                    cc:f4:c6:e9:47:3e:89:62:ae:72:e0:61:d0:40:8c:
                    d6:8a:6c:fe:df:a5:40:5f:5f:47:fa:8b:4a:d0:54:
                    41:d9:cf:18:59:b9:aa:4a:da:e5:01:44:1a:82:6b:
                    7d:cb:3e:b7:68:f5:54:0b:84:2c:3e:f9:f7:78:45:
                    8b:ee:8e:81:90:a5:4f:d9:18:f9:58:b7:58:63:b1:
                    fd:d6:c5:77:db:00:66:ec:df:72:84:f2:d3:7c:d9:
                    5d:82:68:46:09:89:ce:0d:34:1a:b0:48:7b:13:ce:
                    c1:64:17:e7:9c:44:f8:de:d9:26:86:dd:92:10:2a:
                    5d:72:4d:95:dc:da:3e:05:b8:33:0f:6e:09:e4:2e:
                    29:d5:3e:5b:8d:3b:4b:ae:65:c1:75:84:10:9d:28:
                    e9:6f:c7:2e:e6:d1:b3:a8:b0:1c:39:08:14:65:10:
                    5e:36:6d:a6:74:90:55:6b:bc:f3:76:a3:ca:9c:a4:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:54:94:53:BF:A6:2A:90:64:9A:16:A7:2C:47:47:41:DA:D5:82:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:78:4b:26:e1:0f:77:a2:fd:af:c6:8d:21:0b:50:c4:bf:
         b8:2e:dd:e1:1b:66:a8:d2:ff:90:0f:43:7d:4e:9b:1e:ae:da:
         e5:dd:32:fb:52:4d:6f:b6:ed:36:a3:1d:a2:84:ef:e3:3a:92:
         c7:76:5d:8c:29:a3:ab:21:63:d5:1d:a1:bf:94:64:cc:8d:0f:
         52:c9:33:ed:d4:d1:01:aa:78:56:af:8c:16:11:50:eb:60:2d:
         6e:0b:1a:39:40:3f:66:5a:82:02:3d:ff:7f:0f:1d:fd:cc:f4:
         96:09:ce:30:9a:8e:5a:e4:ad:0d:c6:92:3a:ba:09:ab:e7:1d:
         35:f3:0c:43:d5:46:f4:a5:98:58:0b:55:8e:d3:15:02:0f:83:
         b4:73:78:8e:d8:8c:47:b7:a6:8a:77:17:c8:bd:3f:79:b4:ac:
         0e:62:a2:74:e3:53:eb:e3:76:e4:0b:ca:68:3f:b5:79:25:73:
         5b:a5:2f:65:3b:5b:51:97:be:59:36:cb:7a:33:e2:e4:5e:0f:
         81:a9:9d:f8:94:29:be:74:06:aa:49:a4:43:a7:5a:ae:98:84:
         ba:1a:93:2f:b9:ff:89:0c:cd:cc:04:4d:09:73:81:57:69:e5:
         ac:c0:2f:d0:53:29:09:44:20:a3:2d:fb:97:b1:ba:28:0d:59:
         87:80:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:25 2026 by rpki-client