Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/58456863-1f05-3691-9eb4-8c91a4ff195c.roa
File:                     58456863-1f05-3691-9eb4-8c91a4ff195c.roa (raw, json)
Hash identifier:          2xvkDFObd5yuykf/kqhlgKE0nIaswyYJjRheqlaFZvM=
Subject key identifier:   E7:03:7E:2B:68:F1:76:03:73:76:AC:AE:65:E1:58:6D:C5:56:B2:DC
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584DAF10189F41D56A745155A660
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/58456863-1f05-3691-9eb4-8c91a4ff195c.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     18434
IP address blocks:        156.55.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:18:9f:41:d5:6a:74:51:55:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=d60d1455-6ed7-448b-a64c-9657630794ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:04:0b:fe:de:91:57:8b:06:95:03:0e:c7:
                    82:3d:ba:2c:47:79:e3:2f:e0:24:9a:1f:93:0b:52:
                    49:f8:9d:6f:46:b7:13:01:ae:4e:59:f5:4c:05:ef:
                    5a:cc:70:87:c8:46:a5:40:e5:1c:05:e2:0f:e4:d0:
                    17:04:95:64:02:7a:cf:e7:c5:fc:fe:e4:b0:98:4b:
                    0b:37:20:f8:3b:82:71:36:7f:e6:97:12:b8:7f:65:
                    34:57:d2:f8:71:05:cd:49:65:aa:fe:3d:9c:fa:8f:
                    ca:67:36:73:4a:bb:30:63:00:7f:12:39:bc:cf:ff:
                    e8:87:a2:31:ab:18:40:27:f6:df:01:b6:50:07:67:
                    c0:4b:20:f7:be:49:46:c1:6b:24:c8:a9:2b:dd:c9:
                    ac:14:63:c4:be:2b:88:0f:4e:e1:de:9d:a0:90:f9:
                    13:19:4b:39:5f:ae:30:db:b9:4b:86:c4:05:dc:94:
                    18:e3:a3:40:5a:b9:ec:a4:20:6c:c6:8b:25:6a:98:
                    19:ed:14:ee:50:20:53:bb:c3:07:d7:a2:b2:c0:16:
                    e0:0d:55:85:c8:99:57:e6:ce:2b:f9:15:44:ee:e2:
                    38:fd:dc:8a:16:58:f2:c2:ae:12:1c:60:97:5b:74:
                    b0:69:8b:b5:bb:f0:c9:f5:5a:36:0d:e5:3e:8e:09:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:03:7E:2B:68:F1:76:03:73:76:AC:AE:65:E1:58:6D:C5:56:B2:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/58456863-1f05-3691-9eb4-8c91a4ff195c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:33:ab:da:17:89:e0:71:78:52:36:8b:06:25:06:19:7a:3e:
         43:bd:7d:22:b2:8e:58:34:64:41:e7:fa:78:c6:52:80:0b:a3:
         c6:22:de:8f:c5:12:83:56:4d:a2:2e:80:f3:68:13:f5:a5:7f:
         2d:2e:35:3a:67:bd:12:b8:d0:7a:98:26:56:51:cc:1a:b9:24:
         7a:6f:7f:65:5a:72:df:29:d1:f9:f6:30:76:02:6e:c6:34:93:
         3d:97:00:07:65:e2:3f:75:a4:08:af:bc:58:87:25:9e:88:dc:
         d7:e7:83:cf:aa:ee:86:0e:ff:37:0b:5d:c5:29:f8:9e:bd:98:
         36:51:6a:b7:9b:a3:e7:78:be:99:cf:db:72:56:87:81:89:5e:
         ad:e5:28:a1:9a:65:76:4e:7f:86:cd:40:03:91:f0:8b:1b:36:
         e8:0a:af:04:eb:0a:cb:cd:01:cf:ce:30:18:f2:08:49:17:64:
         9e:a7:7f:45:54:49:72:d8:db:4d:a8:fd:31:3f:8b:99:1a:29:
         c9:29:75:52:73:87:fe:16:71:07:56:c6:66:43:ea:c1:33:03:
         1a:93:79:93:9e:7f:0d:d9:c8:b8:b7:44:d8:75:33:27:0a:1b:
         8d:f0:94:eb:12:9e:1f:11:48:01:1d:82:5e:b2:3f:57:f3:dd:
         bd:c9:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:44 2026 by rpki-client