Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa
File:                     30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa (raw, json)
Hash identifier:          QCzL52vS+ck9wt4CfEhyvakyrcvyHm8kp5skef66L1Q=
Subject key identifier:   7A:25:7B:20:02:6E:55:AC:46:96:78:67:E5:D9:CB:96:D3:EB:2D:72
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584DC56595F495067B2B80F01F80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     5769
IP address blocks:        24.48.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:95:f4:95:06:7b:2b:80:f0:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=eb23d6e2-fbd9-4842-a237-bde912521670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:25:c6:fe:eb:02:8e:50:41:9c:11:b0:5b:
                    d6:c4:f3:27:0a:08:9a:9e:d9:79:f4:b6:42:10:f9:
                    63:52:43:bf:c5:12:9e:e4:6a:89:3d:59:71:24:9f:
                    dc:71:db:df:1c:7f:5c:27:ad:32:98:c3:dd:07:73:
                    7b:72:85:80:b4:a8:bd:d0:b8:3a:bc:31:ac:df:cd:
                    e7:aa:e1:70:c2:65:7e:93:25:62:b8:b4:e3:93:3e:
                    e5:eb:3c:7d:e2:29:1e:88:01:22:5d:d8:15:9a:54:
                    7a:d3:89:d5:b0:87:ae:ec:f2:ef:42:7a:08:db:7b:
                    90:0d:0b:7a:a9:1b:0f:c0:84:de:1e:17:0d:62:be:
                    88:8b:43:30:a1:66:48:c6:0c:49:08:79:e8:61:85:
                    a8:c3:cc:34:d2:8d:0d:04:7d:11:4d:40:33:31:4e:
                    a8:61:5e:c7:a7:23:4c:f1:0c:8d:72:6f:c7:69:ff:
                    ab:14:3e:7b:6e:ce:70:d3:54:b8:43:a6:41:2f:27:
                    5a:34:4f:5b:31:c8:73:09:c5:83:fc:df:84:67:86:
                    08:24:45:a9:c1:39:42:6a:8d:7c:ce:94:1a:08:f2:
                    a7:14:f9:8c:5a:e7:7c:d3:3f:3a:dd:c7:18:d7:a0:
                    53:f0:27:93:a5:7c:8b:14:1b:93:25:01:a6:cd:2b:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:25:7B:20:02:6E:55:AC:46:96:78:67:E5:D9:CB:96:D3:EB:2D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.48.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:1b:9f:7a:04:a4:a7:cd:a5:ac:04:84:ab:78:af:de:d8:
         fa:c6:bb:c2:b6:a3:24:e9:7a:f2:0c:cb:d6:cf:b0:54:51:9a:
         29:21:93:9b:a9:fc:94:64:05:d7:bb:f7:7c:a2:cc:9d:db:b3:
         80:e1:d9:a3:b0:3e:78:c2:1e:4d:7c:5e:2a:a2:93:c1:d2:6d:
         6b:b7:e4:1f:61:7e:42:87:3c:e7:d1:f3:ea:7c:9f:99:2c:d2:
         7e:44:6a:15:22:24:b5:26:9e:9a:05:13:ae:15:80:47:5a:78:
         65:3a:be:27:e7:d4:07:83:c6:10:c0:f3:95:af:d3:bd:e2:42:
         25:8b:97:52:a4:06:57:1d:2b:99:44:c3:06:70:5c:87:e3:84:
         7e:72:93:3b:4d:f9:b0:6b:21:1c:f2:71:97:94:5c:45:a8:5e:
         21:18:35:a2:5f:b4:d8:d1:8f:e8:d1:23:33:c6:ef:74:a2:6c:
         19:e5:25:68:5a:8f:6b:9a:ca:c4:ce:fe:92:7b:1a:e7:f6:f3:
         98:29:02:43:f4:f2:9d:c9:f0:14:81:ad:d5:95:70:a8:f9:10:
         35:7d:cc:b7:1e:7c:4e:66:5b:2b:93:b4:d3:ac:2a:c1:df:a0:
         01:da:0b:99:17:b9:7f:bf:d9:f1:6c:22:c3:ca:c1:04:43:e4:
         16:58:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:30:08 2026 by rpki-client