Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa
File:                     5aee81ee-b86d-30fc-8175-236e6876842c.roa (raw, json)
Hash identifier:          rHfBxdm4s4VjN3flCM1RUM5VNCX74wjnrvANke2lT9k=
Subject key identifier:   ED:9E:DA:C1:69:8F:51:53:F6:E9:DB:1D:1E:36:64:31:69:55:D0:31
Certificate issuer:       /CN=40cd115f-d8b2-4c56-834e-28a4b39f52d1
Certificate serial:       010D0C9F4328584D95EFF555CEF95F8F92F65480
Authority key identifier: 4B:6A:CB:FC:3F:E3:50:4D:B6:60:1B:F5:14:C1:A1:51:7E:7C:A3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     394280
IP address blocks:        66.205.248.0/23 maxlen: 23
                          204.153.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f5:55:ce:f9:5f:8f:92:f6:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cd115f-d8b2-4c56-834e-28a4b39f52d1
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=0289245a-bdbe-4986-840a-7c98c5a30bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b7:53:82:f8:4e:44:63:7f:c3:ba:3d:83:0d:
                    9e:d7:c3:7a:f1:9b:23:d3:ad:04:32:1f:51:5e:7e:
                    30:46:af:0f:cf:c0:d0:ca:bc:6e:a7:dc:c6:f1:c3:
                    14:67:78:c8:63:52:53:02:24:0c:f1:fc:4b:9f:bb:
                    2a:bb:4a:96:a0:70:60:e8:02:e4:e8:42:0c:64:b7:
                    bd:48:22:3b:93:7b:3a:38:d7:f8:d5:1b:6e:7c:e6:
                    d4:b4:66:91:5a:9d:f4:7c:43:af:79:42:c9:c0:a6:
                    22:84:49:94:fd:4d:34:9f:51:b0:ae:21:23:4d:d0:
                    cf:8a:14:f5:b4:4d:ef:fb:45:8c:38:bd:43:05:a7:
                    d7:a1:b6:cb:eb:df:f1:0e:5f:dc:a6:8e:73:0d:10:
                    88:8e:b1:d6:4c:ff:ee:eb:cf:43:91:0f:3b:be:07:
                    6c:01:0a:6f:a1:5d:59:59:ae:df:a2:09:a0:5c:74:
                    45:8d:fd:62:31:00:cb:10:25:c5:5c:b8:d6:22:55:
                    c4:44:e1:90:af:d8:37:b5:77:e5:ae:73:9d:dc:d9:
                    ca:8a:06:97:f6:52:60:7b:d6:1e:29:9e:9b:be:59:
                    76:75:b7:23:24:99:56:75:7b:ab:60:8d:d1:9b:8c:
                    b5:32:fd:84:e9:65:5b:f9:24:89:6d:ef:8a:7b:3e:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9E:DA:C1:69:8F:51:53:F6:E9:DB:1D:1E:36:64:31:69:55:D0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.crl

            X509v3 Authority Key Identifier:
                keyid:4B:6A:CB:FC:3F:E3:50:4D:B6:60:1B:F5:14:C1:A1:51:7E:7C:A3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.248.0/23
                  204.153.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:90:f7:89:89:67:d5:2a:05:31:84:92:41:ab:aa:da:34:f2:
         29:2c:12:f7:60:69:ee:fa:b0:35:4f:57:16:ec:53:67:83:79:
         7a:f2:7e:0f:70:bc:d4:c2:52:e8:71:9b:a5:8e:25:22:41:fe:
         36:46:4a:a3:19:0e:95:86:c7:38:95:ae:d4:2f:dd:67:32:b5:
         3e:4b:88:4c:cc:27:05:25:67:14:d8:27:9e:51:cb:b4:78:7e:
         7a:b3:7b:ca:6a:e8:ac:47:0f:01:3f:17:92:a5:ca:68:01:7a:
         24:1e:21:19:12:51:1b:a7:cc:76:6a:db:62:db:8b:20:05:b1:
         d8:e6:3d:cc:55:09:8a:ba:90:06:c6:7d:f5:d1:95:ab:cb:19:
         b4:9f:4d:3a:81:71:13:16:6e:7a:4f:83:12:82:20:1d:db:67:
         b6:95:7b:f9:4d:2b:8d:3c:00:b0:03:af:21:c0:ab:cd:b1:3c:
         ae:97:a7:23:e3:d8:eb:3d:a1:44:2c:48:6a:40:59:f6:17:e8:
         fe:78:c3:1a:15:61:d3:f7:b3:9d:c5:cb:15:46:8a:59:2e:ec:
         35:df:e3:c4:3c:21:38:a9:f9:2b:f7:d2:ba:85:e6:2b:53:ff:
         f6:d0:ca:1f:e0:f0:fa:57:57:ac:1f:9b:20:4c:80:14:68:d3:
         b4:4f:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:24 2026 by rpki-client