Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cce7fe45-804e-370b-af82-01a9bf74b14e.roa
File:                     cce7fe45-804e-370b-af82-01a9bf74b14e.roa (raw, json)
Hash identifier:          +LrWHNWwzHoMP2CKfCz3LVmDiWXcTOtNoe7N5oy4Ewk=
Subject key identifier:   C9:E5:8E:E5:33:67:D3:A6:9D:32:7E:B2:66:8D:0A:E3:47:6E:4F:8F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DB07583D82B3EC4AA08CB9800
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cce7fe45-804e-370b-af82-01a9bf74b14e.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     33647
IP address blocks:        204.1.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:83:d8:2b:3e:c4:aa:08:cb:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=7ccc9947-36f8-42df-b57a-72f77bd87c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:40:36:ce:6a:d4:f3:94:48:45:68:be:62:0e:
                    b0:a6:f3:c2:c4:1c:a5:7b:79:69:54:63:46:c7:d6:
                    f6:e6:b6:f6:a9:9b:3a:00:21:21:86:38:c6:c2:fe:
                    13:09:e3:95:8d:e0:92:5e:1c:db:5e:63:65:98:ae:
                    b4:7a:04:9c:78:dc:26:bd:f3:36:84:df:44:b8:eb:
                    f7:6d:ea:5d:63:a2:ee:f0:0d:21:24:7d:ca:ce:de:
                    48:d8:f4:db:07:55:61:bb:f9:8c:41:af:92:0a:85:
                    79:29:53:e4:24:2e:63:8f:b0:b4:6b:f9:1a:5a:00:
                    6a:8d:d1:99:b2:e0:d5:fe:ac:0f:87:de:4f:77:a3:
                    bc:23:23:b9:24:8b:1b:7b:32:31:34:ae:ed:33:2f:
                    1b:2c:3d:ae:33:ab:66:88:88:be:16:90:7f:27:c0:
                    de:5c:75:13:2a:b2:7e:e1:f9:b8:aa:e1:54:7f:bc:
                    dc:70:ba:47:a7:9c:21:1a:bd:cd:aa:50:9e:db:e5:
                    93:86:48:82:5b:32:4e:2f:d9:82:db:83:9a:43:f7:
                    9b:55:e9:3e:c8:c7:2f:67:97:83:33:b4:9e:d0:c1:
                    70:ff:3e:db:0f:a7:2d:9f:83:95:1c:f8:c3:45:d1:
                    11:38:55:67:8b:a1:85:66:ab:91:98:9e:ca:4f:b0:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:8E:E5:33:67:D3:A6:9D:32:7E:B2:66:8D:0A:E3:47:6E:4F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cce7fe45-804e-370b-af82-01a9bf74b14e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.1.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:73:dc:df:85:b5:59:42:31:ce:de:32:2e:e9:94:77:ea:
         3b:f0:3b:06:c3:e1:d3:2d:2c:23:2f:20:98:54:dc:4a:0a:85:
         2f:fa:eb:e2:f8:36:9a:81:e5:b1:d1:db:74:68:65:3e:fc:cb:
         9b:4f:c3:69:a8:4d:a3:e3:74:d6:a7:5d:c0:b9:ee:21:24:01:
         cb:f7:69:43:24:cf:e6:f9:fb:31:80:51:c0:ed:7c:ae:c8:97:
         f6:f9:4b:2f:49:16:68:52:bd:9e:ba:bc:4d:d0:f1:9f:da:87:
         bb:ee:4f:a4:46:1b:ff:3c:35:5e:ea:b2:ee:fb:41:0e:df:6e:
         69:bc:07:ab:66:f6:19:e3:03:83:90:c0:55:4c:b6:65:02:47:
         cd:fc:ad:00:18:9a:cb:7b:d5:a5:ba:a6:02:fa:10:e7:e9:ca:
         45:eb:f1:71:56:dd:63:9a:30:47:c1:c0:a6:af:89:58:cd:e4:
         5c:6f:b7:0c:af:f0:3c:1a:4e:55:e4:b1:39:19:5b:fa:0f:a7:
         d6:2f:f0:6c:3f:fd:c9:50:53:5b:8b:b3:bf:d7:90:ef:e9:2d:
         a9:1e:90:82:20:95:16:a7:02:1e:81:24:b5:bc:8c:ae:31:b1:
         77:eb:c4:fe:9c:1c:23:b7:af:f3:dc:05:90:7e:84:fb:57:27:
         51:d1:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:58 2026 by rpki-client