Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
File:                     d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (raw, json)
Hash identifier:          sFr+xWCUt1H8VfqJKnYAmfHmhfWqSIX8N7a1TVwSAiY=
Subject key identifier:   A3:79:E9:27:B4:67:01:B9:97:7C:8D:33:95:E7:34:F2:79:F0:80:84
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F4328584DBE6B21282149E53253DF5000
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     32058
IP address blocks:        216.147.192.0/20 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:21:28:21:49:e5:32:53:df:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=c0fcb018-7ada-4c23-900a-30fcb73e0f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:80:5e:6c:a6:16:77:0a:12:91:70:68:f4:
                    26:ce:95:aa:fb:7a:3e:21:01:43:68:88:1e:d5:46:
                    d9:e8:89:00:79:a5:bc:47:b5:59:99:24:50:58:96:
                    a7:ff:87:69:7e:6b:5d:42:5b:48:47:ec:0e:63:f1:
                    69:28:e1:68:37:78:0c:bb:3c:31:e4:21:f7:70:80:
                    18:fe:fa:65:36:17:7e:55:81:e0:74:88:43:0f:81:
                    e2:ec:29:7a:6b:44:22:03:43:a4:13:5b:6e:8f:e7:
                    43:3b:f4:3a:5b:4d:fc:bb:d6:55:94:f3:2e:11:f1:
                    d7:ba:36:b6:fb:7c:37:30:fe:a9:26:c1:01:f3:a4:
                    43:96:8a:da:66:bc:a7:73:a4:36:6c:7a:4b:06:18:
                    17:bc:de:80:cf:d5:f3:5f:a9:f4:eb:7c:19:2c:a0:
                    09:15:0a:81:f6:b6:98:bd:9b:79:3c:0e:cf:64:bd:
                    20:ac:65:c3:c9:45:a7:41:3b:13:bc:5e:b1:6b:b2:
                    0d:cd:d0:45:6f:7b:f8:c7:31:38:c8:97:17:12:7b:
                    78:28:ac:03:ab:f2:5a:8a:49:06:ad:83:06:09:11:
                    7b:73:fa:f7:61:f0:7b:d2:51:4c:cc:e8:7b:be:3f:
                    76:88:be:97:46:71:71:e1:be:8d:38:22:3e:c6:9d:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:79:E9:27:B4:67:01:B9:97:7C:8D:33:95:E7:34:F2:79:F0:80:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:bb:39:f5:f4:ca:e7:a7:9a:d1:87:ce:bc:85:e1:74:0e:
         c8:25:d8:9c:c7:96:ef:b6:5b:a4:29:bc:da:e2:66:e8:6c:d8:
         79:60:02:56:d2:3e:01:6c:9a:88:89:79:82:3b:e5:c0:ec:4b:
         f8:df:7e:a3:c1:e6:1a:a8:65:50:ca:6d:65:5d:5b:ae:20:4d:
         6f:51:9d:31:eb:14:c5:15:93:29:70:cf:65:38:8b:b2:80:36:
         d1:ca:f9:a2:7b:87:1f:2f:72:98:d5:09:d2:a9:88:ed:18:b5:
         17:06:b6:77:d6:40:00:6b:60:a4:e4:b4:c6:b1:44:e0:68:a3:
         bf:f9:10:c9:fd:ec:9a:32:ab:55:6f:1f:1a:3d:d7:d4:08:8e:
         38:3a:f9:2f:ce:34:4c:c7:3f:c7:be:b1:27:cd:e6:53:d1:74:
         f6:e2:1c:a0:9d:52:bd:a7:2a:74:ac:cc:8d:1d:01:6f:4c:1f:
         8d:9c:bf:de:fe:b1:f9:14:13:bb:1f:c5:e5:62:b9:1b:c4:d2:
         4e:1e:b2:82:28:22:00:45:8e:5f:31:51:fe:02:7d:0f:39:fa:
         73:cb:a5:5f:2b:59:46:8a:54:5d:ea:91:48:3a:4b:43:91:4a:
         3b:9c:ac:c4:7c:1d:fb:0d:b5:3f:ed:6d:90:68:51:3f:16:62:
         82:54:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:11 2026 by rpki-client