Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3f00cbf-af3a-3b76-9cb2-69cd76124329.roa
File:                     f3f00cbf-af3a-3b76-9cb2-69cd76124329.roa (raw, json)
Hash identifier:          XS8jnQXf5SPuUIJKfr4czYylqQyRhWwLqNIhfV0Tj+Q=
Subject key identifier:   03:58:48:EA:8D:20:78:4C:4E:FC:BD:D8:73:AF:70:28:2F:69:C3:64
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584DAA173EFC695C622D881C65E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3f00cbf-af3a-3b76-9cb2-69cd76124329.roa
Signing time:             Wed 29 Apr 2026 06:15:50 +0000
ROA not before:           Wed 29 Apr 2026 06:15:50 +0000
ROA not after:            Tue 28 Jul 2026 06:15:50 +0000
asID:                     55154
IP address blocks:        192.253.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:17:3e:fc:69:5c:62:2d:88:1c:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 29 06:15:50 2026 GMT
            Not After : Jul 28 06:15:50 2026 GMT
        Subject: CN=68d375b4-d27b-4b99-a951-06802b156da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:dd:56:c4:70:42:59:b9:13:c1:3d:3b:eb:
                    f2:2d:50:52:76:92:0e:e3:9d:89:19:b6:c1:3f:f0:
                    f5:b6:41:1b:b2:52:a2:42:46:7c:ea:67:96:bb:35:
                    6c:8d:3e:5e:23:eb:0f:b9:ba:e1:23:51:83:58:de:
                    5a:29:11:fd:c6:52:5c:4c:8a:26:41:ab:32:c6:2e:
                    50:80:f6:7a:8c:fd:3c:47:9f:78:d4:7d:1d:64:7f:
                    8d:25:60:b7:ec:2c:39:2f:3b:e0:26:cf:e0:68:06:
                    b3:53:df:d6:24:34:f3:43:93:70:f1:df:30:2f:8f:
                    97:33:0b:d4:5a:71:b3:26:29:93:83:53:81:39:64:
                    08:6d:9f:9c:2f:c4:a3:50:fd:5a:b4:8f:dd:8d:2f:
                    5a:65:bd:42:93:b9:c8:ea:85:6d:a6:2e:d3:56:9c:
                    0a:38:ef:f7:fd:29:37:61:df:b5:0a:d1:21:5f:92:
                    c9:5c:4c:2e:7f:bc:13:ed:cf:a8:ca:0e:1e:13:35:
                    59:2b:6a:e1:92:2d:7f:d1:69:36:54:5a:55:58:a0:
                    fa:d0:af:13:7a:48:d8:85:27:50:45:1a:f6:0d:97:
                    15:14:c7:ae:84:3f:aa:17:46:2d:34:2e:ad:a0:22:
                    88:0f:6c:3c:72:0b:12:e0:22:21:01:45:e8:dc:c2:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:58:48:EA:8D:20:78:4C:4E:FC:BD:D8:73:AF:70:28:2F:69:C3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3f00cbf-af3a-3b76-9cb2-69cd76124329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.253.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:a7:b1:04:f9:0f:35:cd:92:39:18:f2:ab:4b:89:a7:1e:
         9c:06:96:9a:e9:fd:e0:64:f9:88:f0:4d:de:d3:bb:88:3c:d4:
         b8:5f:4f:fa:cb:a5:3f:95:72:d0:ab:2c:60:a5:da:2c:0c:84:
         1b:40:65:f7:9f:21:67:a0:66:ee:99:5b:df:04:a7:9c:16:cd:
         47:78:c6:d1:02:cb:30:88:70:3a:a2:83:78:4c:a5:24:95:ec:
         a0:ef:8a:6a:be:ef:c3:fa:47:4a:f6:d5:92:09:4c:c0:2c:ab:
         83:18:5d:28:e9:07:29:d6:da:d8:fa:72:84:92:f3:d5:22:86:
         07:3d:4b:2f:39:4a:a3:47:24:16:c1:80:52:29:10:7f:30:dc:
         b9:6c:05:f2:f4:09:95:1e:eb:70:3d:26:20:03:6a:3b:ed:d8:
         5f:01:5e:b3:96:0d:ac:ec:f8:47:37:2b:e6:55:f6:b2:60:df:
         12:15:49:68:ff:6c:e0:87:ca:3b:46:b7:9b:29:5f:c3:04:ac:
         75:43:fc:cf:a5:bd:68:21:59:3c:9a:e4:b0:ab:90:ca:6b:29:
         fb:fd:44:36:c6:b5:0f:cf:43:2e:b2:58:2e:f8:c9:94:f9:6b:
         e4:22:9b:c5:c0:4b:7b:b5:be:b4:1d:3e:1f:87:b4:6c:f9:ae:
         24:a3:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:54 2026 by rpki-client