Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa
File:                     1fb97d52-90b2-3f47-b40b-69c650bf9738.roa (raw, json)
Hash identifier:          XSAF3fgywi2r3MhENSeGH+4aSsoLEoZROnMmfTBxWlQ=
Subject key identifier:   7F:14:50:6C:35:FC:F1:5C:13:92:F6:6F:6D:3C:1A:3E:88:B1:09:51
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F4328584D9FB56C6A97600CABFEB11C00
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     9009
IP address blocks:        104.128.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:6c:6a:97:60:0c:ab:fe:b1:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=82b29cc6-5551-45a5-b9b6-d47b66f42ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:ef:00:58:90:46:89:04:9e:95:80:82:3b:
                    24:31:8d:49:c7:54:51:d1:83:83:e5:66:40:08:a0:
                    e8:16:8e:5c:e2:35:33:b8:0f:23:7e:25:ad:76:97:
                    50:9a:5c:23:5d:b2:13:d7:07:c0:b7:2c:e3:7f:09:
                    22:b1:52:4c:79:31:4b:93:b6:3e:a7:bd:5e:d7:6d:
                    7e:9d:59:86:da:96:43:1e:65:d2:38:de:65:ec:fb:
                    1b:e9:ea:bb:56:92:0c:42:99:c5:62:23:bf:b9:81:
                    6c:02:d0:3a:d8:39:5e:0f:f5:34:d7:9b:e7:77:0e:
                    b2:75:ff:a8:e6:c6:cb:3b:a6:30:71:26:d5:2a:88:
                    20:6d:9a:c6:ee:50:f5:70:d9:07:c6:c5:e3:1a:30:
                    bc:c1:a2:9a:b0:03:f6:f6:3e:c5:40:02:a6:68:8d:
                    34:33:a4:c3:29:e2:5d:d1:e2:6c:72:98:1f:cd:6f:
                    5c:62:46:30:3b:76:cb:44:f4:06:91:a4:bf:89:09:
                    cb:79:05:a4:d2:1b:cc:65:dc:62:39:d1:f4:bb:be:
                    dd:3b:63:9d:de:e3:21:66:87:75:6d:49:4c:87:ae:
                    1f:b1:69:14:c1:09:f3:c7:a4:3e:41:7e:b1:81:74:
                    e8:b0:6e:26:27:b5:92:db:2f:9b:02:73:06:4e:4a:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:14:50:6C:35:FC:F1:5C:13:92:F6:6F:6D:3C:1A:3E:88:B1:09:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:29:51:7e:62:bc:75:ec:a5:32:e1:31:ad:ef:79:eb:4c:87:
         31:cb:ce:e4:b4:93:9b:c3:85:89:c8:22:8e:b4:54:0e:85:79:
         4b:b1:f5:33:e4:63:38:ee:6f:25:5b:27:52:b1:72:04:0d:10:
         14:72:d9:96:29:19:41:cd:6a:76:fb:3f:61:13:8d:4f:44:ee:
         c7:a4:a2:e2:7b:e2:f1:7a:e6:fc:38:84:e0:3f:85:b1:06:fa:
         62:c8:f1:36:23:59:a4:d3:97:d1:4e:af:4f:ea:1e:b2:cd:64:
         9e:cb:cf:02:d6:91:ea:40:4d:b4:5a:d0:d2:56:ae:a2:28:58:
         06:3b:b5:7b:f8:09:94:59:20:71:f2:62:c6:11:e6:88:b1:8d:
         82:39:10:cb:75:1a:2c:82:35:30:47:57:40:7a:7f:7c:e4:7f:
         51:8b:76:e6:0c:f9:5b:d8:a3:90:f7:0d:51:ef:0e:d7:e6:8a:
         03:8d:c0:85:46:e8:94:56:d1:3a:43:89:a2:c9:10:f7:1a:5e:
         de:b6:ec:93:2c:6b:bd:a2:29:f5:6d:2d:8e:d7:60:c6:b3:3a:
         14:e4:65:55:47:ca:3a:7b:f4:36:18:35:bc:46:aa:0c:34:bc:
         e0:7b:4c:5f:ff:13:72:71:ac:90:f5:39:6b:95:2b:9f:ab:00:
         16:fd:68:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:15:13 2026 by rpki-client