Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa
File:                     a60a9b00-d731-38a8-8ec7-2870a2014055.roa (raw, json)
Hash identifier:          qWpHLTUgFnpDrRUCiicjzc/PLOnsSBTRbAKxLTcqCDU=
Subject key identifier:   E0:6A:FB:C3:FC:8C:9C:0A:C1:AA:B5:71:A7:48:C2:5B:35:0F:8C:37
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584DADAAE47738594FC5DF7E9380
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     20473
IP address blocks:        155.138.128.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e4:77:38:59:4f:c5:df:7e:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=619ddcb9-8e42-40dc-8351-198ad7847a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:b4:63:14:04:2a:0c:57:99:af:db:60:fb:
                    35:1e:82:fb:3f:85:0c:af:71:25:0f:8c:f5:1d:9f:
                    73:b5:66:f8:2b:2d:43:b6:ba:8b:33:37:b3:eb:8f:
                    69:e6:2b:a6:39:7c:43:11:77:94:b0:55:f2:b8:ad:
                    b9:c0:82:9e:86:a2:29:3c:b2:02:80:c7:14:41:b6:
                    7f:52:15:60:25:f2:83:26:fa:3c:45:f8:d5:c4:ae:
                    2b:76:42:50:d3:fd:a2:6c:76:12:16:47:9f:c1:6d:
                    ba:81:11:42:4b:b1:5d:f8:a0:76:62:17:b5:9c:56:
                    c8:43:4b:63:6c:c7:69:15:8f:4c:72:b4:02:cb:9b:
                    7c:e0:5a:3d:ba:0e:bd:07:14:b5:ec:39:02:53:2a:
                    3c:05:18:e5:a6:3c:2a:13:2c:a3:5f:ee:67:39:35:
                    7e:35:69:87:53:f4:b8:65:d2:c5:0a:38:71:d7:bf:
                    8f:a2:da:62:e2:a5:f7:64:e3:14:ec:7d:4b:f5:ee:
                    88:47:3d:79:b1:b9:9b:5c:19:00:30:54:d4:8a:1d:
                    91:78:90:84:5f:f0:52:f3:b1:e5:70:49:1c:4d:fa:
                    40:71:af:f6:c4:15:f8:0d:b1:af:80:39:1a:ff:14:
                    59:45:8d:0b:a1:e3:1a:60:a9:37:57:64:e2:16:21:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:FB:C3:FC:8C:9C:0A:C1:AA:B5:71:A7:48:C2:5B:35:0F:8C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.138.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:37:59:1b:46:8d:5b:02:a9:66:90:3c:2c:ba:2b:82:c2:09:
         2b:e1:b7:d3:b4:14:09:4c:a2:40:5d:a8:03:19:5c:03:c2:e6:
         7e:cb:53:e6:50:b6:92:81:87:a7:1a:2c:1b:6a:2d:42:63:cc:
         14:c7:e2:2f:9a:88:95:7d:4a:38:d0:2d:5c:03:f5:35:cd:dc:
         73:07:60:d8:b6:c0:a1:3e:79:71:5d:55:1b:b5:08:28:50:c0:
         c9:bf:29:c4:13:94:8e:4e:10:a4:ab:7b:7d:3f:0a:96:9c:8a:
         ae:b9:c4:16:67:ff:0e:45:a2:2c:26:e2:83:fc:82:f9:1a:ba:
         5d:e2:09:4a:ad:0e:a6:9a:71:50:2e:65:10:6e:a5:71:c1:c8:
         02:1f:50:76:68:d4:4a:1e:c7:e9:e0:ce:d1:cb:47:fa:8f:f9:
         31:11:8b:ba:6e:29:e8:4a:56:03:3d:b7:99:b1:7f:d8:98:da:
         76:8b:e3:67:4f:e8:9a:16:59:6b:a8:ec:4e:cf:42:b7:2f:aa:
         4f:2e:66:bc:6b:0b:8b:ba:35:01:f9:f0:98:06:8b:2f:e3:c0:
         9e:45:02:16:d0:9a:6b:41:9e:b5:05:d6:9e:f1:20:84:cf:ed:
         ea:dd:fa:a9:7c:eb:6d:33:22:d7:22:5e:07:97:b3:54:75:21:
         31:13:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:22 2026 by rpki-client