Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa
File:                     e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa (raw, json)
Hash identifier:          iBE/9PeQ+iDQyQxLo0k3X/j29J8qQlZj4lLCOc22BAk=
Subject key identifier:   E0:69:5B:12:6B:28:95:EE:DC:69:E8:F8:3B:29:A8:3D:BA:8E:F2:15
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584DAC45705DD912E5DF556ACE80
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     0
IP address blocks:        149.112.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:70:5d:d9:12:e5:df:55:6a:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=26c6215b-d090-45ff-9a63-9e4ee55271c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:9c:1a:0c:96:c0:cd:82:99:76:11:10:7e:
                    64:b0:f5:84:11:66:09:e2:75:ad:fd:96:ea:b9:25:
                    75:16:ea:77:81:27:40:96:c0:3f:41:16:d9:a5:10:
                    02:29:9f:f5:ca:6e:d1:fa:02:82:d2:a6:08:43:1a:
                    57:6f:12:7b:6c:20:76:b3:70:14:ff:9d:a3:97:de:
                    71:f0:b1:82:05:66:01:ed:c0:1f:77:df:3e:89:ec:
                    44:77:2a:25:26:ad:56:45:43:10:e1:35:04:44:e3:
                    70:da:ab:0b:2b:33:5e:3a:11:3f:bb:3d:20:cb:6f:
                    61:55:19:d3:01:2a:b8:2d:03:b4:04:70:fb:1e:4c:
                    19:b2:09:f4:88:af:ab:f6:d2:62:04:ad:3e:af:30:
                    00:da:4d:58:f5:60:17:ab:65:9a:49:3d:b8:3b:17:
                    73:86:a3:5b:87:3f:04:db:46:4d:a9:a7:e6:4f:02:
                    7f:26:32:79:a8:da:68:ce:3e:7d:91:b6:07:2c:c7:
                    3c:76:86:08:f4:73:ad:39:75:d6:86:e9:d0:6d:7d:
                    0c:bb:ab:c7:19:08:bd:0f:96:89:19:2f:37:5e:cb:
                    a1:de:af:e0:77:fb:d4:b3:bd:fa:d1:cf:f9:e5:d1:
                    6d:b7:ec:bc:ef:8d:90:2b:1d:45:97:2e:50:66:3c:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:69:5B:12:6B:28:95:EE:DC:69:E8:F8:3B:29:A8:3D:BA:8E:F2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:6e:24:d0:18:de:f4:26:fa:69:f0:10:7c:31:03:b7:de:
         db:1f:e3:2a:cb:37:90:c2:94:74:fd:6e:fc:a0:fa:0b:c3:b8:
         81:88:c7:16:b4:46:7a:47:c7:1d:c4:55:55:b9:00:52:80:e8:
         75:1b:57:d4:7b:81:5c:7e:98:21:36:9f:c7:40:f7:d8:b0:39:
         50:bc:ac:24:8b:5a:38:6b:70:04:c7:4c:61:cd:7f:31:fa:64:
         e6:48:ce:48:12:12:5d:2f:5f:a5:73:e0:1d:19:4f:73:65:ec:
         41:e5:7b:b7:80:e9:1c:d8:f0:b5:b1:56:5b:ec:eb:45:31:46:
         48:f8:a1:db:b0:fc:8d:cc:79:62:03:f9:51:96:68:ca:71:6e:
         44:51:30:c8:70:12:7b:cb:eb:f2:cf:10:cd:31:ea:9b:e2:29:
         96:89:e4:3e:f3:34:4f:99:2d:27:84:ac:92:06:ee:48:82:70:
         e7:dc:ba:2f:c4:34:18:7f:49:59:ee:28:0f:2f:cd:cc:e1:b4:
         c8:95:1f:55:d7:de:01:67:75:89:11:de:89:45:9c:99:49:7c:
         1f:17:bf:b8:79:6c:51:35:02:ec:c4:b0:6c:ad:29:bf:5e:a2:
         c0:45:3e:72:40:50:fb:c0:82:d3:ed:80:3c:fb:16:11:76:b7:
         42:85:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:42 2026 by rpki-client