Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
File:                     aa132d09-6f7c-30f0-91e8-edc325846360.roa (raw, json)
Hash identifier:          ApEN4Q8iPoKlsY5CPN2mqsMXDokPL3h6dLmmMf+FSeE=
Subject key identifier:   1D:02:BC:8E:76:84:48:0C:25:25:AA:87:44:41:59:12:33:16:D2:61
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584D9FB56656314B93156DD62B48
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     55091
IP address blocks:        198.73.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:66:56:31:4b:93:15:6d:d6:2b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=0334f46f-241b-4bab-a0be-a50352f71dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:9d:ed:af:8b:3b:b4:d6:e4:fd:6c:22:e8:
                    a4:65:7c:cf:3c:11:0e:4b:27:4e:8b:47:96:0f:e2:
                    c9:93:c5:2b:5e:e4:a6:77:32:1c:53:62:c5:76:62:
                    16:f4:2f:40:b5:f7:96:35:90:e0:cb:ac:66:35:3e:
                    34:3f:00:ee:9d:46:73:19:14:01:a8:bd:98:c1:4a:
                    f3:04:4d:46:8d:9c:1f:cb:f1:cf:a0:78:9f:6a:72:
                    b2:a8:ba:72:25:2d:e8:fc:49:43:ab:87:4a:8a:1d:
                    d6:bb:fa:fc:27:8f:6f:53:24:97:e1:1e:83:41:50:
                    9d:9e:dc:f7:47:6c:d9:18:57:81:f5:c1:a2:11:20:
                    77:c4:00:38:ca:9e:81:8e:09:07:23:d4:a4:ab:cd:
                    c6:a2:e7:2a:e9:01:18:61:87:43:15:58:4a:71:ac:
                    cd:64:bc:ce:b7:a0:19:69:54:a5:d0:a8:2c:d1:8c:
                    5d:6a:e7:96:f9:f6:fd:7f:e7:5e:c4:df:08:08:5d:
                    5f:68:10:f4:c5:90:09:bb:fe:3c:be:8e:23:7d:13:
                    63:e4:83:fc:02:11:64:78:25:7f:3f:12:09:d5:e7:
                    65:dd:6b:78:4b:5d:d2:6a:10:36:48:12:69:26:36:
                    77:27:1b:14:71:72:3f:3e:17:e1:2f:43:1b:4c:8a:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:BC:8E:76:84:48:0C:25:25:AA:87:44:41:59:12:33:16:D2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:41:69:ee:94:54:8c:bc:2f:eb:45:eb:3d:92:b9:fb:c8:
         a4:e5:79:e2:f9:4f:3b:e1:21:8b:14:77:49:7a:4d:3e:20:49:
         33:20:6d:0b:08:58:3f:bf:0c:13:9e:d7:d3:57:3b:34:ac:7f:
         96:6d:c6:5f:a4:5c:cc:b0:54:bc:93:bb:1f:e8:cc:f8:6e:b5:
         46:fc:cf:66:82:be:09:a8:12:85:e9:b2:22:4c:ca:b4:9e:2e:
         89:48:d0:a0:13:fe:7f:50:7f:62:18:8a:e8:26:3d:96:54:b3:
         f2:d6:e7:cf:97:e2:b8:49:17:c8:e5:22:5a:cf:f4:73:66:9f:
         c2:2c:f2:55:06:6f:9b:a5:d2:c4:90:5a:0f:1d:62:fb:a1:b1:
         ec:f6:76:7c:6f:32:f1:2b:25:5c:bf:ab:54:86:42:39:a7:48:
         ef:38:0d:58:b7:e6:a0:c8:69:99:e0:34:07:e1:d0:56:84:40:
         88:de:4d:85:4d:a8:25:7a:5b:c3:f8:05:fd:35:a9:86:86:41:
         02:9e:d1:5c:7c:a7:46:9a:ca:fc:59:8f:1d:6d:0a:4d:f3:70:
         6a:14:f8:3e:8d:dc:40:f0:4f:6b:0d:b5:62:44:c0:72:21:24:
         b5:57:ac:29:d3:b8:ad:ef:c7:24:70:1f:7e:08:4f:00:3c:21:
         39:fb:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:17 2026 by rpki-client