Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa
File:                     0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa (raw, json)
Hash identifier:          y+VSmXBC0NGL+gOb17Fca1ChvmiDJF2qJ9u8rnR3voI=
Subject key identifier:   D1:F2:06:CD:D8:BB:68:D0:5C:08:0D:AF:5B:D5:09:A1:DC:93:03:EE
Certificate issuer:       /CN=a7fb5a33-e5d6-4994-a771-5194ace5e014
Certificate serial:       010D0C9F4328584D948AA9EAB8A9B5A1C41CBD40
Authority key identifier: 51:5C:3D:B9:65:61:78:8D:67:8F:02:47:95:A5:44:0D:0C:3A:81:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     2698
IP address blocks:        129.186.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:a9:ea:b8:a9:b5:a1:c4:1c:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fb5a33-e5d6-4994-a771-5194ace5e014
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=6d783487-4f98-4497-a355-18550358d0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:33:e0:76:d6:06:1f:26:0a:99:06:79:0e:
                    3a:a5:8c:3f:87:d0:26:d7:36:45:cb:0e:82:26:74:
                    ae:b5:c6:14:da:4f:7a:0d:43:0a:0d:4c:2d:d3:ac:
                    f4:6a:ff:78:2e:22:d2:1d:dc:84:60:ce:96:a8:6c:
                    19:3f:96:63:d1:87:0d:15:bd:a2:1e:84:f1:69:42:
                    5a:d7:dc:5e:fd:2d:03:3b:e0:6b:90:c1:68:1b:52:
                    2b:d9:c3:2e:37:09:12:7a:1d:03:be:34:ff:4f:34:
                    4a:f7:0b:e7:08:f1:a1:fe:63:27:29:94:ba:c1:50:
                    db:66:ae:da:93:6d:49:fc:d0:3e:35:ac:a7:25:fb:
                    38:f6:52:6f:71:37:39:56:8b:b6:e4:28:ea:a4:cc:
                    8b:14:71:bd:67:f3:2f:5d:85:79:40:f6:e6:c0:5a:
                    bd:8e:cf:5e:2c:23:94:e1:2b:d5:6d:6c:3f:b4:8f:
                    19:9a:2b:69:83:72:af:d2:36:87:f7:11:37:45:40:
                    39:54:aa:7c:c8:a2:66:70:46:0e:71:9b:fa:b1:e2:
                    e6:80:2f:da:94:57:7e:94:61:a6:95:0c:1a:b5:e4:
                    e2:8b:c8:ad:c9:16:f3:e9:ac:7b:93:ae:1e:7f:c9:
                    16:2b:9f:60:43:b2:89:0e:9f:e4:b9:ef:7d:a4:12:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F2:06:CD:D8:BB:68:D0:5C:08:0D:AF:5B:D5:09:A1:DC:93:03:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.crl

            X509v3 Authority Key Identifier:
                keyid:51:5C:3D:B9:65:61:78:8D:67:8F:02:47:95:A5:44:0D:0C:3A:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:72:1a:8d:35:ce:ff:9b:46:e6:44:ff:19:7b:17:f5:96:
         94:04:11:33:4c:12:af:85:93:cb:5c:6f:f0:d6:af:48:37:11:
         74:fa:18:e3:f2:0d:66:ae:d4:6e:89:e1:70:32:a2:d8:0e:53:
         dc:a3:c1:a1:41:cc:42:b4:c5:8d:6f:bc:2a:e0:47:d3:c6:e5:
         58:b5:bb:37:2e:6d:06:6a:ed:65:37:2a:42:1c:d9:ae:b8:ed:
         05:9b:31:7e:37:97:4e:d7:b6:90:4f:d1:e4:39:a7:85:e0:cd:
         9d:9e:3d:45:e8:35:11:ef:c0:39:01:83:ec:fe:62:1a:de:5d:
         2b:dc:38:5d:cf:b3:3b:5c:02:4c:a3:59:68:ab:2a:0d:d6:3b:
         e7:c2:31:e1:3a:b9:c9:bf:3e:f2:2f:fe:e1:67:4a:3e:0d:8c:
         3c:dd:9a:eb:7e:bf:07:67:9b:de:eb:1e:ff:bf:04:a4:90:57:
         5a:a6:3a:52:12:07:23:9b:18:20:09:74:1d:8a:e6:a2:f6:43:
         e7:38:36:44:b9:28:30:85:88:1e:62:d2:34:af:9a:0f:30:9c:
         85:1c:98:38:a5:2c:c9:9a:b9:f5:6a:a0:93:08:02:f9:34:24:
         e0:8c:37:e9:ea:3d:b5:13:b2:10:c9:bc:bc:07:1a:c6:51:8e:
         3b:8f:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:16 2026 by rpki-client