Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa
File:                     cd8c45de-7335-36d8-861c-1a78550f1bda.roa (raw, json)
Hash identifier:          xc/eJlHvWM4ZWyZlEBqcaSiy+p65ES2DyuJNCJ9vPx0=
Subject key identifier:   E0:4A:C6:4F:5F:A7:DE:98:1D:37:06:0F:C2:DD:BD:E5:34:14:89:11
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584DCC6064ECC225960A19D7DAC8
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     50304
IP address blocks:        172.84.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:64:ec:c2:25:96:0a:19:d7:da:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=40f607ea-9261-4348-b705-de3fb212a12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:12:69:26:1d:d6:30:29:4e:89:8f:6d:d4:
                    3b:64:01:da:6e:e5:b1:f4:da:43:bd:48:bd:77:cd:
                    62:64:c5:fd:67:e2:96:32:20:17:83:f7:be:8c:14:
                    45:d2:07:dc:79:84:79:68:c3:2f:4f:bb:cd:e6:23:
                    16:39:75:4c:da:32:dc:ad:8e:b6:91:f7:c4:5a:96:
                    f9:fa:87:c8:33:3e:d1:71:34:a5:b8:12:8b:5c:df:
                    c4:f4:59:15:d4:9b:16:53:58:df:1c:e7:70:3b:98:
                    58:6c:9b:c0:d3:c5:89:69:ca:ad:cf:7c:95:74:05:
                    80:41:e5:8c:1a:f6:78:ec:38:ce:7e:17:29:58:28:
                    9b:51:0e:3d:b4:6b:e4:19:6e:64:1f:82:91:8a:fd:
                    66:5f:91:b6:2a:4e:f7:0c:9e:42:7f:ca:a6:7a:3a:
                    4d:1b:0c:6b:7a:a3:58:c4:2d:0e:75:72:6c:6d:60:
                    dc:d2:8b:7f:ed:ce:aa:e9:c3:4d:8b:3d:cb:99:23:
                    c3:dc:1a:d5:70:3c:bb:7c:72:d4:30:9b:b9:2a:67:
                    c7:6e:f0:1e:94:8f:35:9b:94:61:e0:45:af:95:24:
                    df:1f:ff:a6:00:7d:63:eb:f8:2c:21:bd:75:d0:99:
                    b6:be:9d:53:0d:4e:cf:fc:e5:0a:40:4a:d3:1b:bd:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:C6:4F:5F:A7:DE:98:1D:37:06:0F:C2:DD:BD:E5:34:14:89:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ef:4c:77:da:ff:20:e9:5b:c8:a7:16:27:9b:27:15:cf:e7:
         ee:ab:31:cf:3a:d4:2c:ec:00:ee:d1:c6:7d:bc:4e:98:45:0a:
         77:6b:f2:5d:d1:96:8a:df:81:f3:2b:74:0b:a7:2b:d2:4a:6f:
         7a:3a:de:b6:da:01:2d:27:bd:a0:0b:ba:b3:0a:21:c6:56:28:
         e2:ce:fb:1a:b1:76:80:3d:a3:a6:14:9c:ae:01:7a:ed:1c:cf:
         f7:6b:20:02:f7:9b:6e:e7:93:bd:6b:c2:f0:1f:47:43:fb:1a:
         2d:90:8e:d2:a7:d1:d9:bf:3c:68:29:f0:d3:84:db:d3:80:c2:
         ae:d0:98:4b:25:11:5a:50:ab:01:74:6a:4b:db:9c:cd:ce:ad:
         c8:39:85:f7:60:b4:33:d7:78:04:b7:3b:b2:a9:2b:6a:a2:0a:
         d4:76:af:fe:01:84:2b:87:10:95:72:9e:24:35:7f:74:07:3c:
         70:31:ec:e6:f6:d1:c3:c6:f3:ce:e7:7b:b8:d5:d0:9c:af:ff:
         cc:3d:c2:6a:4f:75:6a:be:65:84:38:d2:44:69:45:86:83:57:
         10:47:68:56:d3:ce:23:99:4f:f5:8a:56:92:1f:37:26:c2:03:
         d6:08:e1:81:e7:55:b5:0f:48:64:f3:4c:be:90:c2:38:f4:10:
         c0:4e:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:33 2026 by rpki-client