Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa
File:                     884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa (raw, json)
Hash identifier:          PWxea4pXDKv7lckLgOGJ+uXrxQd0luV/H3ElP3fKpeA=
Subject key identifier:   84:21:EA:FF:6C:06:4A:84:38:87:75:5B:F3:BA:A2:24:AB:31:F9:C5
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D300A18633B136B1F5DDB5600
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     14114
IP address blocks:        157.133.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:18:63:3b:13:6b:1f:5d:db:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=708a5219-0164-419b-8688-d1dfa551e353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:d1:9e:39:eb:96:08:16:1d:53:59:5c:1a:
                    57:38:cb:44:e1:c6:38:62:64:e7:57:fb:c8:a2:52:
                    ce:a5:a9:31:81:7b:65:86:2d:11:31:97:a5:ac:82:
                    5c:c2:c4:85:03:2f:cf:eb:33:e0:db:23:b8:a4:73:
                    05:58:2b:1d:f0:d3:9c:96:9f:fa:e0:50:a6:f6:0a:
                    ac:22:88:54:a4:96:aa:0c:cc:89:de:41:2d:e0:15:
                    17:2d:2f:b2:46:dc:28:62:6b:72:1a:c7:4f:79:7f:
                    88:c6:5e:85:e8:48:13:ce:b1:ff:48:de:06:f3:66:
                    36:b5:cd:ea:c0:48:80:43:36:8e:c9:be:a5:92:dd:
                    a8:66:bc:ad:d5:03:10:b1:ae:8f:7b:67:3d:3d:6f:
                    03:7a:83:70:78:b3:e8:4b:cf:fb:04:8d:02:c0:6c:
                    1a:6e:c6:2d:8c:43:a4:2c:15:0a:c6:f1:6b:88:2a:
                    0a:47:06:0a:59:d0:25:3a:09:b0:ef:b2:24:c3:2e:
                    1a:07:39:71:e6:28:98:75:79:69:53:ea:b4:04:e0:
                    8e:2f:a6:33:3e:57:91:c4:84:43:27:b3:94:15:fa:
                    3e:a7:3f:1e:08:58:0f:4d:fe:96:81:22:3d:f4:d9:
                    d7:72:2f:70:c8:ab:15:be:57:55:cf:d4:79:97:07:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:EA:FF:6C:06:4A:84:38:87:75:5B:F3:BA:A2:24:AB:31:F9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:85:ac:c3:c9:24:33:14:a2:8a:b6:f6:74:7e:2a:59:31:c5:
         79:c3:5d:29:2e:e9:8d:88:cf:64:fb:94:78:07:6f:75:5d:36:
         e7:1b:6e:78:b2:e3:07:17:40:6d:36:f5:79:25:36:6a:23:64:
         fe:01:f0:4a:4c:29:3e:04:9a:2e:6e:18:ca:74:ff:97:37:23:
         c4:d2:ed:4f:f2:30:a5:66:cb:c4:17:f5:5d:08:a8:82:66:1b:
         69:70:3d:4a:97:67:d5:09:f1:0c:eb:60:8d:6f:57:df:da:1f:
         a8:94:bb:7e:ab:a5:54:3b:f8:c6:05:31:c4:e7:a6:c2:a2:27:
         15:0a:75:7a:b5:43:36:89:cf:1b:88:5b:68:e6:8b:05:03:24:
         ba:d9:de:9a:42:a6:91:2f:94:ba:a5:41:05:44:1f:63:e6:10:
         b3:f3:96:83:ce:db:88:30:35:b1:49:dd:19:f7:0a:f6:06:7f:
         cb:7f:bd:27:9a:22:89:cb:7b:53:84:9f:7b:d7:57:34:d4:4b:
         b9:43:6a:39:98:2c:ca:a5:9e:2d:13:41:38:75:39:30:b3:87:
         2b:e5:ca:c4:de:31:b1:a1:d5:25:96:73:90:3c:b2:19:72:c2:
         27:57:e8:df:01:dc:c3:62:8d:38:03:c8:76:d3:5e:0f:e5:cf:
         e3:33:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:42 2026 by rpki-client