Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa
File:                     b7aacbe5-842d-385f-b714-d6ba290e853d.roa (raw, json)
Hash identifier:          3kbbBGLAQ2RVUEIoJ7wGQd0ce1jcBgE4NAq3JtCobUQ=
Subject key identifier:   D7:9A:36:67:2F:C9:35:0C:A3:96:D7:C3:65:7F:8C:E9:86:BA:4C:C1
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584DCDC5A9005B28F4856B83AC20
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     25697
IP address blocks:        209.94.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a9:00:5b:28:f4:85:6b:83:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=8dd61604-abb1-4430-acc1-9d8c733a7545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:27:8c:54:52:84:ae:97:d4:9a:78:e9:42:
                    93:c7:7a:2f:cc:6a:86:b3:31:a7:94:56:e9:8f:ea:
                    7c:e9:55:bb:45:08:ac:4a:2c:44:16:85:75:17:e1:
                    f7:20:45:48:f5:95:a9:95:12:49:a8:2b:6a:a4:65:
                    3c:73:66:5b:5f:49:78:bf:d8:85:61:43:2d:e6:ee:
                    5a:bf:7e:4e:47:60:cb:3d:15:b7:e0:90:32:d2:3d:
                    8d:b0:f5:ab:fa:4d:e3:1d:5b:1b:bf:b8:e3:e4:f6:
                    e5:5d:79:19:ef:21:23:db:a0:6b:5c:75:27:6f:05:
                    77:8a:38:a3:24:86:90:cb:05:0d:de:33:22:fb:3f:
                    55:73:35:fb:0a:50:08:bb:a6:a8:15:4a:be:a9:f0:
                    67:1e:0a:54:b8:3f:78:02:57:de:20:12:22:a8:92:
                    49:9b:d8:e2:33:33:2b:3f:e0:1a:6c:4c:e7:fc:5d:
                    c3:a2:bc:e5:89:94:8b:d5:db:82:36:38:47:39:ca:
                    b3:c5:fe:c6:33:4c:aa:38:eb:6e:f2:9d:a1:70:28:
                    15:0d:5a:b5:d4:7e:10:cb:8f:f7:00:52:62:ca:cb:
                    06:5d:03:66:41:20:63:fc:f7:af:93:de:a6:99:ad:
                    0f:8f:75:dd:bd:6f:22:e7:06:d4:b4:ac:df:e9:b4:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9A:36:67:2F:C9:35:0C:A3:96:D7:C3:65:7F:8C:E9:86:BA:4C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:17:07:a7:82:33:4b:d0:08:43:f0:d8:af:e2:52:b1:88:a7:
         af:ca:24:dc:11:df:ef:b9:c9:ac:36:06:e3:79:57:65:1a:a9:
         6f:79:4b:0b:e9:f5:dc:7d:f6:0d:91:29:8d:08:1c:c3:d3:0d:
         63:19:42:f4:f7:83:25:fb:ec:38:65:39:80:0a:f0:af:1f:5c:
         62:0b:80:fc:aa:39:7b:e0:28:27:be:67:4f:15:6b:b8:e8:f2:
         3f:d1:94:bd:98:0b:97:38:e0:21:0d:78:6f:68:34:c1:cf:10:
         95:7c:7e:a7:03:ac:d6:02:3f:ea:ef:0e:ba:f8:af:da:58:87:
         bb:73:6d:f9:1e:c7:f1:da:10:b4:78:68:bb:37:6b:ed:69:cf:
         32:c5:50:1e:26:88:92:f4:b8:15:3b:e9:fb:81:0c:b5:4e:ce:
         5d:b1:c7:3a:8a:12:29:e0:d5:02:c8:37:a2:8e:79:9e:73:8e:
         d7:fc:61:61:a0:b0:08:2e:14:7d:a0:fd:d9:a6:80:f0:fe:7c:
         e4:35:b3:3f:61:c0:20:f3:80:2b:dc:83:1a:b0:de:30:29:4c:
         39:04:9e:6a:84:57:01:3f:c7:15:fe:4e:1b:b0:38:02:09:20:
         7e:83:e3:96:6e:58:ec:e1:4a:65:08:7d:30:48:e5:37:84:a0:
         1f:d1:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:20 2026 by rpki-client