Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
File:                     8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa (raw, json)
Hash identifier:          cfEgVEVFDfNH203DLZYmA7qYB8hd/j7pzr28lDAz7wk=
Subject key identifier:   9C:54:5F:DC:0A:E9:3A:E7:BC:A0:12:51:14:37:FE:F5:80:82:8F:8E
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F4328584DB4A5895CF09BCE6F8D2952C0
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     19905
IP address blocks:        157.188.0.0/16 maxlen: 24
                          161.185.0.0/16 maxlen: 24
                          167.153.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:89:5c:f0:9b:ce:6f:8d:29:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=9f29fc69-75a7-4d39-84e6-c63e7c378a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:36:95:c9:57:6d:97:cc:18:bd:b8:49:a3:
                    b1:48:d1:eb:1b:80:a3:26:d9:59:88:19:91:97:9f:
                    e9:a7:b7:fd:2c:e1:0b:8f:16:31:a6:d5:08:be:7f:
                    7a:de:c7:57:6b:1b:96:e6:42:12:dc:eb:8c:93:22:
                    57:08:66:ef:08:3d:bd:d1:6c:cc:0a:8e:91:f4:cc:
                    4a:5f:33:5b:51:b2:18:13:79:00:63:0f:1b:49:3e:
                    23:f2:b7:79:73:ca:d4:fb:91:bb:a3:63:8c:2c:39:
                    ac:1b:e2:eb:6e:e6:9e:46:68:b7:4d:19:0e:75:c5:
                    18:09:9f:c0:0d:a2:4b:2d:d4:30:c1:9a:ce:74:1c:
                    65:11:cf:23:b6:ed:5f:7a:26:75:78:e4:c7:5b:22:
                    d1:83:57:33:48:70:8b:87:3f:5b:e5:3c:e5:d7:53:
                    e7:89:21:d2:66:76:7f:11:23:ca:7f:7f:28:5a:55:
                    e1:c6:ce:ac:53:df:5b:8b:39:14:45:71:73:39:12:
                    be:2a:43:76:68:5f:60:5b:8a:4c:70:1b:8b:52:fb:
                    50:d4:69:2c:e2:7c:8d:dd:a2:e8:96:c0:d6:d2:f8:
                    36:43:2a:af:da:26:4d:f4:ea:8b:8c:36:1b:3c:41:
                    a6:ae:6f:eb:10:ed:04:4b:29:2e:1c:72:e7:40:50:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:5F:DC:0A:E9:3A:E7:BC:A0:12:51:14:37:FE:F5:80:82:8F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8fc9b646-98e7-30c8-bb8b-1175b9921e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.188.0.0/16
                  161.185.0.0/16
                  167.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:81:76:15:87:bb:68:fd:c4:2b:24:9c:91:1c:fc:93:a3:44:
         02:9f:af:8e:55:50:c3:0a:e8:08:31:af:ad:fd:bd:48:ef:48:
         52:86:52:7f:ec:ae:d8:22:5d:ae:3d:d4:45:15:ad:69:d8:12:
         93:3b:01:d4:87:10:c1:71:45:d6:df:31:d9:2e:35:46:98:41:
         63:e7:b6:91:ec:17:36:98:8b:0f:2d:c8:29:61:91:2b:b2:39:
         17:43:ce:09:f5:9c:7f:0f:fb:cd:af:5b:b3:2e:9a:6b:ee:d4:
         a0:be:8a:e4:cc:65:c6:b9:fd:ce:05:1d:93:6b:ab:e5:92:e5:
         cf:d8:dc:2a:90:60:39:87:22:a0:cc:b2:13:0f:6e:4a:2b:f0:
         da:b2:55:e2:60:3b:fd:81:5b:d3:74:04:f8:23:0e:b6:69:36:
         5d:37:e8:c1:31:4b:52:c1:71:12:a7:41:9c:5f:95:e8:ff:a2:
         b3:e2:18:e0:14:6e:f2:4e:f7:6d:66:61:ee:ba:f8:a9:73:7f:
         79:91:95:d8:f5:01:d2:33:5d:c9:3e:84:0e:dd:1d:76:61:31:
         02:b1:b3:29:ce:46:fd:c4:83:d6:94:83:f0:47:ab:0e:63:b1:
         34:5f:93:bd:aa:b6:f9:b7:66:bf:e4:56:db:88:37:35:fd:49:
         a7:b1:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:11 2026 by rpki-client