Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa
File:                     9c31740b-6dee-303e-a41e-afaf27f3c49e.roa (raw, json)
Hash identifier:          vBG+Zx2SZRlzWNK/vEeQMezsB9hxPsOkSNqsfzySK/A=
Subject key identifier:   F8:78:82:5F:78:0D:CD:EB:38:1D:7B:57:BE:2B:6C:B3:B4:1F:00:F4
Certificate issuer:       /CN=461640c3-4830-4680-b242-767100bf2245
Certificate serial:       010D0C9F4328584DA3E56241A8F969AA6827AA00
Authority key identifier: 1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     62807
IP address blocks:        128.254.168.0/22 maxlen: 24
                          192.84.255.0/24 maxlen: 24
                          198.54.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:62:41:a8:f9:69:aa:68:27:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461640c3-4830-4680-b242-767100bf2245
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=91d58a52-a210-4eba-bc6e-32145b84b018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:6b:d0:34:af:07:a7:10:ca:ad:3b:3b:f5:
                    4d:43:b2:14:38:4c:b2:9e:ba:9c:7b:a6:14:f0:00:
                    11:f6:6f:f7:6f:d9:f3:95:d8:c5:05:4c:dc:83:79:
                    d0:28:85:28:96:fb:ca:99:18:ca:cf:91:79:a8:8e:
                    4c:21:62:b2:7c:3d:f8:2f:1f:88:5f:dc:bb:4a:31:
                    42:72:00:6e:6b:16:d2:a2:76:d7:71:78:2c:74:5e:
                    46:93:ec:6f:0a:9e:15:18:6d:53:4b:33:25:24:0c:
                    d4:a3:f1:4d:99:53:8f:3a:ce:c1:55:27:e3:9a:2d:
                    64:71:87:4b:24:f3:b5:51:eb:f6:d6:53:59:34:74:
                    f7:a2:b2:28:ec:74:a0:73:56:61:d0:a2:3c:05:97:
                    d7:3d:7e:fc:65:dd:e1:44:b0:27:17:e5:59:b7:36:
                    0c:20:92:f4:0a:fa:60:82:d0:45:34:1e:44:fe:2a:
                    e8:59:b8:ee:bf:26:0e:d3:4b:0a:c4:75:66:61:da:
                    88:a4:76:e9:fd:e2:d7:a4:b6:17:b1:a0:cd:7f:94:
                    15:91:58:7e:78:41:dc:0c:ab:46:5d:10:35:85:7d:
                    a5:e0:f9:ec:d9:19:34:c2:34:02:0d:7e:c3:cc:75:
                    b7:fa:ac:04:4f:9a:f7:0a:a1:a7:91:1a:f8:5b:0e:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:78:82:5F:78:0D:CD:EB:38:1D:7B:57:BE:2B:6C:B3:B4:1F:00:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/9c31740b-6dee-303e-a41e-afaf27f3c49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.crl

            X509v3 Authority Key Identifier:
                keyid:1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.168.0/22
                  192.84.255.0/24
                  198.54.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:f5:15:39:f7:85:44:3a:6e:81:ec:7f:68:53:ea:e5:92:
         94:b9:76:49:01:86:b4:95:0e:08:d2:ac:9d:40:6e:3f:6a:28:
         b8:3a:00:b9:55:12:76:de:59:d7:c1:b3:0b:46:35:d4:fb:32:
         ce:58:4f:4f:8a:bf:ba:f1:81:40:a5:c8:9a:5c:00:ca:3a:83:
         be:10:dc:06:74:ad:d2:36:7c:50:c1:38:23:da:d0:c3:42:89:
         5e:3e:65:7f:86:ac:25:49:57:5c:d6:ae:b2:75:ff:c0:08:c8:
         1b:b6:cd:db:53:14:2d:ac:30:59:ee:e1:3c:20:72:1a:89:47:
         49:b8:70:d6:2b:33:25:4f:40:bd:38:40:5f:32:4b:13:a7:ad:
         40:ea:71:82:0a:fd:e2:b2:3e:be:8c:0b:a5:93:b3:25:0e:3a:
         51:fc:c8:b2:60:18:f0:e2:a4:65:e6:00:2c:96:c5:b8:e9:9e:
         c8:ba:79:89:44:8d:f2:8b:bc:bc:da:f2:38:8d:d7:75:7d:f8:
         f4:bd:fc:11:a5:9f:06:83:06:d6:43:e9:50:37:64:1e:f7:47:
         ff:d1:8b:7a:9f:21:e6:b0:64:6c:c6:a1:ae:07:00:ce:ea:e4:
         b4:5f:28:e3:75:ec:27:09:65:f4:80:c1:98:a4:5a:4d:0c:88:
         b9:56:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:13 2026 by rpki-client