Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa
File:                     f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa (raw, json)
Hash identifier:          7y8knSeZCpUGGUIH5G9yVEGsm7nmhzKPF0vz58p61DA=
Subject key identifier:   52:7C:39:BB:15:70:A6:2A:BA:55:9C:A4:AD:F9:4A:03:74:87:FE:3D
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584D8EF561BE15FC9BA5F5E0B2E0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     14061
IP address blocks:        146.190.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:61:be:15:fc:9b:a5:f5:e0:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b4279762-b62f-4d83-b254-63424a26b0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:10:96:58:6a:5b:4f:01:85:0a:23:44:48:
                    9d:0c:4a:af:c8:1e:03:f1:d2:33:d0:7b:7f:24:6d:
                    81:bb:d3:e1:f1:bb:eb:45:40:99:61:52:41:f7:48:
                    67:67:e8:76:d7:70:45:6c:ea:cf:af:47:67:84:32:
                    ed:70:bc:e1:39:3f:12:c8:50:c5:82:28:e3:34:e5:
                    89:12:b9:d6:ba:1d:93:1b:76:8b:37:3c:35:b9:57:
                    e6:9d:82:ac:c8:f9:31:7b:2d:20:51:e3:e7:fc:8e:
                    b6:63:4d:7e:7c:b6:98:70:e4:93:ed:9a:ba:44:91:
                    2c:a6:ae:4f:c4:70:60:55:ec:59:53:50:68:00:8c:
                    08:e6:ae:5a:64:6a:6b:8c:3f:5a:5f:da:e4:dc:60:
                    30:b6:b6:a7:79:13:8f:01:72:21:a3:d3:b6:dc:9f:
                    92:9c:f5:f2:b5:0d:c1:c2:00:af:44:11:1a:51:12:
                    5b:8f:49:10:9a:62:68:fc:38:d7:1c:ad:f0:9b:f3:
                    a4:be:e9:4b:69:76:fc:d4:57:b0:6b:e1:cd:af:67:
                    1f:60:28:0d:34:fa:e7:da:dd:6c:42:c1:68:dc:18:
                    50:fe:cf:0f:54:11:00:d5:56:98:71:5e:10:a3:52:
                    ec:64:d7:d3:62:7e:ac:a2:07:ac:a1:3e:68:c2:b5:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:39:BB:15:70:A6:2A:BA:55:9C:A4:AD:F9:4A:03:74:87:FE:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/f7e0bd36-8adb-3c43-b4dc-432ee8e35bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:aa:21:4f:d6:a9:b5:2b:bc:33:d4:87:dd:f5:d5:ba:60:7c:
         6b:cd:82:c2:79:f8:7a:70:99:0e:62:89:ef:58:12:f2:07:8e:
         ad:62:4f:62:f5:3e:52:4c:43:26:88:b1:47:04:94:f2:76:e2:
         7e:64:6e:b0:32:35:8b:43:8a:c4:d6:69:36:d4:1e:51:52:00:
         10:1d:7c:82:42:47:48:99:36:b1:07:f6:d4:4d:2d:b1:21:d7:
         dd:a4:61:a2:bd:cc:49:12:b5:3e:f0:5d:86:11:d0:4d:c3:ad:
         95:a8:8b:a0:1e:e9:0b:3c:fc:ad:0e:91:0c:a4:f3:91:32:3a:
         40:9c:b5:29:33:98:d1:7b:b2:85:82:c2:a6:2f:b7:5c:8b:60:
         2b:a9:57:74:17:5c:66:6d:90:be:07:0d:60:c1:e7:48:19:1c:
         5a:e5:cb:f7:6c:84:60:97:f3:02:e0:f5:22:a9:53:fe:fe:15:
         5c:3c:a2:60:bd:fc:99:4d:0d:d8:9b:a5:6e:85:8f:f3:86:db:
         30:b5:67:29:78:cd:44:45:8a:5f:2a:58:65:27:7a:87:da:66:
         ae:0f:8b:33:7a:fb:ad:a5:da:3c:1a:40:31:e0:ce:c3:f5:02:
         a6:4f:c8:6c:eb:d3:89:4a:08:68:4d:0d:a8:bf:e7:c0:ac:07:
         01:79:9b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:38 2026 by rpki-client