Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa
File:                     4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa (raw, json)
Hash identifier:          S8RNjUaxAe2zrHNEoCICzJbTDdAGG2pvpJYA/8/pZi8=
Subject key identifier:   53:38:14:4F:68:EF:A9:7E:AB:BA:C1:FE:B4:A9:4D:97:54:7E:DD:BB
Certificate issuer:       /CN=7aba55ae-833a-4487-8be1-9b997adbbec9
Certificate serial:       010D0C9F4328584DCAFAF7BC4E1BB3398C4A8980
Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        134.195.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f7:bc:4e:1b:b3:39:8c:4a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=ffcb20fe-a058-4497-9869-63d16c504355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:86:6b:46:f4:d8:9b:ef:5e:91:fc:45:36:
                    f3:38:c0:e5:e8:a0:4a:e1:cd:f0:f5:cc:9b:f5:f5:
                    90:38:6b:a3:80:aa:97:16:b6:9c:ee:c3:3f:be:78:
                    58:86:72:b8:71:3a:e4:0a:51:eb:f9:62:bd:03:0d:
                    ac:c2:b8:57:d9:6e:2d:2d:d4:78:e2:1c:78:6f:29:
                    cb:b5:06:21:1a:99:44:b4:85:26:4d:f5:59:2d:89:
                    68:b2:b1:9d:28:3e:cc:7e:b6:93:66:3c:06:90:cb:
                    8c:a4:e0:d8:c4:7b:29:b0:53:bb:89:b7:4f:e7:47:
                    ee:93:82:6b:16:f3:cc:b3:6f:67:5d:7f:ce:b6:9f:
                    76:0a:94:67:0f:b9:0c:8f:17:bc:43:b7:64:0d:fc:
                    66:67:67:1a:60:cb:eb:bc:1f:0c:a4:6e:a1:c1:14:
                    d8:0a:14:3b:d5:cd:df:2a:00:6f:7b:06:fb:77:9f:
                    ae:43:da:fb:0f:7e:e8:65:f0:de:77:8c:91:89:cd:
                    71:d8:e8:dd:51:5f:b6:99:8f:9a:50:26:05:ea:80:
                    ce:11:2a:e9:e4:e2:4f:9b:f4:6b:23:88:9a:07:2c:
                    c0:34:b9:92:91:c1:92:e5:50:21:7b:f7:84:57:20:
                    94:48:1a:d3:88:b8:b3:37:1e:26:d3:c7:34:ca:14:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:38:14:4F:68:EF:A9:7E:AB:BA:C1:FE:B4:A9:4D:97:54:7E:DD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/4ea89e5e-619d-33a3-b3f1-269dad48eb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:75:a7:62:43:a7:c0:f4:af:64:2d:3c:08:09:e8:5d:17:a1:
         3e:30:49:60:93:55:a8:75:24:05:e3:0c:93:67:87:01:e4:ed:
         08:50:8d:e0:10:f5:69:6c:df:fb:f3:87:e0:29:5c:e6:2b:f1:
         78:d8:cd:df:33:5f:4a:d6:2d:76:c8:31:d5:0e:13:82:14:81:
         21:f1:fb:d1:b3:f9:6a:ae:7c:cd:1f:73:c3:d1:40:05:29:d8:
         e2:f2:da:1e:72:9e:36:29:ca:a9:2a:f0:e2:86:27:aa:03:71:
         87:dd:0d:b7:74:63:f5:78:53:ca:3b:a5:32:ba:2d:3c:6f:c3:
         29:2e:ee:b6:ad:e3:43:4c:26:f9:97:9e:3b:51:66:bd:93:54:
         b2:b2:46:7e:b3:8e:66:f8:78:26:e4:32:cf:83:dc:b9:6d:7d:
         56:08:15:fa:54:8f:97:3a:df:73:74:7f:2f:ae:96:39:7f:9f:
         92:da:fc:10:c3:84:93:0c:cc:07:6b:f7:2f:5e:da:31:ab:b9:
         4c:aa:16:82:1e:d3:f7:85:68:cb:6f:73:7a:15:26:56:a0:0f:
         ce:0a:87:e5:8f:fa:04:22:86:6e:b8:48:1b:b8:2a:8d:ab:df:
         17:88:47:e4:78:6c:4a:77:b1:a3:ae:d9:95:1b:b0:40:de:b3:
         dc:5d:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:31:27 2026 by rpki-client