Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acc75625-6924-3fa0-b900-5b9a9155e832.roa
File:                     acc75625-6924-3fa0-b900-5b9a9155e832.roa (raw, json)
Hash identifier:          //csxi8SikSXEikg1p+KMYhu3gsjzuXysoCu+RNqkYY=
Subject key identifier:   5F:D6:62:D1:34:9F:C6:18:FF:97:6F:F5:84:A4:D9:13:95:29:36:AA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D9A2020ED8F9AB59ECF87AC00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acc75625-6924-3fa0-b900-5b9a9155e832.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     5650
IP address blocks:        168.93.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:20:ed:8f:9a:b5:9e:cf:87:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=8f1d36a4-f1f8-4f7b-8622-c326431b09d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:5c:6d:b4:82:55:48:31:75:3a:eb:e0:a3:
                    60:ec:44:8d:56:9e:89:85:cf:a4:fc:23:04:cc:61:
                    a3:5c:26:bb:c4:c8:3c:86:9c:f1:84:b0:be:dc:3f:
                    81:9c:bb:e9:e4:0e:32:b3:78:69:e3:d7:8d:67:c0:
                    a5:6d:cc:ff:e7:01:d4:73:5b:53:7b:fd:61:ea:da:
                    c1:e0:52:c8:b7:4d:a3:a4:a6:cc:17:ca:98:85:3e:
                    04:fb:4f:59:85:28:4d:cc:f1:2e:14:92:e9:c9:00:
                    66:d3:da:4f:6b:07:05:a6:30:98:ca:0d:d4:57:09:
                    99:7d:55:37:28:8d:05:4b:9e:1f:66:e2:93:de:b7:
                    ab:e2:1a:c4:44:4a:6b:cb:61:ed:0d:82:9d:5f:b9:
                    9a:c2:90:14:8a:86:9e:9a:36:81:e5:24:ef:d6:e9:
                    44:68:99:35:62:68:b0:5c:c7:54:7b:e6:5e:d8:60:
                    90:35:11:07:ad:ef:6d:b9:10:29:7c:02:df:88:11:
                    c0:36:3a:79:e3:67:06:02:0c:ee:4e:f2:1e:11:f0:
                    6a:84:9b:55:09:82:d2:db:f2:61:06:1f:94:b1:4d:
                    da:b1:57:87:d5:35:74:57:d2:ad:cc:6f:83:3a:d1:
                    2a:00:49:9e:bd:d8:96:d6:50:1b:c0:16:4c:24:4c:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D6:62:D1:34:9F:C6:18:FF:97:6F:F5:84:A4:D9:13:95:29:36:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acc75625-6924-3fa0-b900-5b9a9155e832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:e0:58:67:0e:13:4d:25:c8:e2:4b:5a:68:24:58:16:cf:
         21:3c:88:9c:1b:50:56:29:1d:d3:89:2c:db:10:6c:ad:0e:d7:
         2e:56:31:07:ea:a1:91:40:ed:df:bb:25:d0:d4:e5:86:85:52:
         8f:55:c5:55:3d:0b:7e:90:2a:ae:1a:9a:b9:50:58:6f:e0:f1:
         da:48:09:6e:1e:e9:ea:94:1f:af:40:21:60:6d:10:36:22:51:
         d3:d9:47:f8:97:7b:b8:b5:e8:81:59:72:7f:ed:38:80:59:2b:
         6e:ea:37:5b:97:c6:d0:6b:d8:5c:a1:f6:9d:c1:db:51:2d:05:
         d3:7e:c6:7d:10:d8:33:67:37:1c:c5:49:c6:b6:f9:21:ea:ee:
         31:cd:dd:c4:f3:de:cb:4a:f2:44:94:2e:ee:c5:42:3f:a9:30:
         95:fb:0b:c8:0b:a3:6d:72:97:80:7b:c3:eb:32:db:b6:f2:5a:
         d6:4b:e0:cf:42:66:dd:0e:03:8f:cf:84:9f:11:a8:f0:5c:fc:
         7a:8d:e9:45:a6:31:7a:8b:9d:97:05:9b:d6:fa:ca:65:52:5a:
         a9:21:c2:b2:76:bb:29:ee:da:9f:ab:7a:a4:b6:fb:0c:2a:39:
         73:b8:d9:0c:89:f0:7c:0c:58:3f:9e:bd:79:7d:3c:58:2e:5d:
         dc:42:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:19 2026 by rpki-client