Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa
File:                     17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa (raw, json)
Hash identifier:          xYeKSzqZ7ADFm63hC7BvBTFPgbZ8Ns61I+TwNzUS7J8=
Subject key identifier:   28:41:B5:A7:69:7D:D8:23:6B:7C:BB:30:57:22:5D:E4:A0:BD:55:C7
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584DCF2B1C1FD216BFD195C51E40
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     400928
IP address blocks:        204.89.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:1c:1f:d2:16:bf:d1:95:c5:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=81e1ae85-d5be-4920-900c-908911f9047a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:7e:85:94:c5:7e:84:ad:c3:7e:af:6e:45:
                    f4:8a:f7:b3:f5:bb:f2:bb:e2:e2:9a:2c:ca:5d:a9:
                    50:b8:c5:29:6b:e2:91:98:63:bd:5b:79:71:a0:80:
                    11:8e:e8:88:03:51:04:fa:ef:8e:8e:b4:cc:e6:f8:
                    c6:f5:a2:d2:2a:31:ee:22:c0:71:e5:98:43:17:9d:
                    33:f8:99:c3:59:43:06:bf:4c:f0:4e:f5:86:58:57:
                    57:b6:c1:5e:a3:5e:ed:9a:ac:94:6c:0f:8c:68:c9:
                    89:c5:00:86:be:7f:0d:da:c2:a0:59:2d:9c:23:c9:
                    6f:3e:a7:c8:5a:9a:a9:3a:f7:0a:80:39:fe:b3:e3:
                    24:f7:81:2d:d7:8f:e8:79:b3:0d:c4:3e:02:84:12:
                    82:b1:fb:8c:1e:ac:68:36:27:24:53:3a:05:ab:18:
                    31:54:75:65:92:33:95:91:3e:80:5f:2a:d9:0f:bf:
                    bb:fa:45:db:34:93:bc:9d:38:11:62:a6:65:62:6a:
                    9f:f5:a6:e2:d7:44:43:b8:a8:97:63:c8:f6:ac:10:
                    dd:9b:24:89:bc:c9:2a:20:87:79:03:1a:00:57:c5:
                    c1:6f:37:88:b6:59:f3:78:94:7c:32:3e:d4:80:d7:
                    b2:d2:61:42:a3:e3:3a:a1:a0:10:64:96:21:4b:5c:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:B5:A7:69:7D:D8:23:6B:7C:BB:30:57:22:5D:E4:A0:BD:55:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:57:de:0a:86:59:d7:c2:bd:7e:c2:92:f3:b7:d1:0d:dc:
         8e:bc:65:23:2b:72:77:c9:56:3a:c8:89:55:64:92:d2:19:98:
         10:f8:60:2c:55:67:d4:aa:0d:a4:4c:3c:04:27:0a:9a:05:c2:
         b3:58:e6:6b:be:09:96:f4:a3:f9:2c:4b:3a:12:97:66:1c:4a:
         ce:8c:7e:13:52:05:03:93:e5:c9:d8:a8:ec:92:be:cd:ab:56:
         e5:17:6e:bb:27:9d:ad:d7:10:83:9e:b6:0b:70:d8:b9:91:f7:
         7e:08:05:58:f8:dd:bc:e0:5a:f4:c5:fd:d4:27:b1:11:7f:17:
         7f:18:e5:ea:79:e9:6b:ff:0d:56:f5:59:df:c5:16:70:da:db:
         9c:a0:c8:6e:ec:7b:06:9b:66:c4:2f:c5:e1:78:71:16:29:2b:
         ba:a8:6a:39:eb:4a:5e:9d:f9:b2:93:e5:55:ea:48:a5:f3:26:
         3e:56:85:cd:5f:a0:42:38:89:22:bc:f1:0e:07:36:f3:8f:41:
         b4:97:bd:17:02:78:2c:f4:bf:48:3f:ff:93:6d:b6:6b:ca:a4:
         51:a7:94:d0:60:8c:d6:be:a6:69:39:b1:ed:c2:78:df:fe:a6:
         5f:9b:42:b0:f2:34:b7:e9:03:1e:0d:6b:90:58:5e:05:b1:03:
         fa:fe:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:35 2026 by rpki-client