Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa
File:                     e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa (raw, json)
Hash identifier:          qOfHTWPExZ15W2twdjqj95AH26CXI2+cjXnyqs/nQww=
Subject key identifier:   1F:E1:26:1F:AA:88:04:B1:6A:04:FD:40:B7:37:EC:D7:F2:33:85:86
Certificate issuer:       /CN=0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1
Certificate serial:       010D0C9F4328584DB8D58784510A206A1D7CD780
Authority key identifier: 7C:32:C4:33:EC:1A:5E:9A:5F:89:F7:D9:82:A5:C2:4D:24:F5:A7:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa
Signing time:             Mon 04 May 2026 13:00:30 +0000
ROA not before:           Mon 04 May 2026 13:00:30 +0000
ROA not after:            Sun 02 Aug 2026 13:00:30 +0000
asID:                     53571
IP address blocks:        199.181.154.0/24 maxlen: 24
                          204.155.96.0/24 maxlen: 24
                          204.155.97.0/24 maxlen: 24
                          204.155.98.0/24 maxlen: 24
                          204.155.99.0/24 maxlen: 24
                          204.155.100.0/24 maxlen: 24
                          204.155.101.0/24 maxlen: 24
                          204.155.102.0/24 maxlen: 24
                          204.155.103.0/24 maxlen: 24
                          204.155.104.0/24 maxlen: 24
                          204.155.108.0/24 maxlen: 24
                          204.155.109.0/24 maxlen: 24
                          204.155.110.0/24 maxlen: 24
                          204.155.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b8:d5:87:84:51:0a:20:6a:1d:7c:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1
        Validity
            Not Before: May  4 13:00:30 2026 GMT
            Not After : Aug  2 13:00:30 2026 GMT
        Subject: CN=fa17f213-0d99-4d8c-a476-7385b8f9800e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:39:32:5d:c2:08:ca:70:ae:8c:b5:2f:40:
                    f0:d0:29:9f:42:db:17:ad:f0:7e:29:6a:a5:a6:05:
                    b4:0d:b7:59:22:6a:aa:93:8f:7b:05:23:b6:47:64:
                    76:c9:5a:cd:1f:21:7d:3e:00:58:18:65:2f:3d:d6:
                    e5:e9:a3:ca:05:3e:37:c9:74:66:b6:5b:2b:16:0c:
                    60:2f:a5:69:07:b8:b1:6c:48:4c:aa:41:b2:bd:37:
                    e5:4c:6b:31:77:dd:79:6e:d0:92:6c:da:00:0c:47:
                    21:16:af:d0:e8:3f:1f:70:5e:67:b5:63:93:ed:51:
                    36:f5:fd:b9:4b:6a:93:0c:78:e0:50:75:53:f0:7b:
                    1b:3e:fb:9d:f4:34:e9:7f:18:71:bf:37:9e:dc:1e:
                    9f:2d:41:86:77:7e:d9:60:da:09:14:79:41:b4:5d:
                    34:45:c7:da:a0:d4:d5:e9:88:43:60:51:c9:59:ec:
                    5c:f0:5c:08:a7:61:18:d0:fb:a5:2c:b1:df:a6:5b:
                    2a:21:30:6f:d2:1a:1a:6f:84:18:77:86:bf:1b:08:
                    27:95:0c:52:54:54:d3:4c:5c:0b:76:cf:9c:ef:74:
                    e5:15:0c:9a:6c:51:80:db:d6:62:46:df:46:e5:26:
                    43:c4:c4:08:a2:08:7c:f8:3c:6f:4e:8f:76:8d:2d:
                    30:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:26:1F:AA:88:04:B1:6A:04:FD:40:B7:37:EC:D7:F2:33:85:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/e2fa6a1e-e29d-3e3b-aa3c-c974e374a2dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.crl

            X509v3 Authority Key Identifier:
                keyid:7C:32:C4:33:EC:1A:5E:9A:5F:89:F7:D9:82:A5:C2:4D:24:F5:A7:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.154.0/24
                  204.155.96.0-204.155.104.255
                  204.155.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:78:a4:4f:6f:6b:7d:24:aa:18:8a:a7:12:02:e2:ce:7d:22:
         7c:43:76:ba:75:61:a0:16:93:91:a7:6a:12:c2:c3:20:71:85:
         c1:f1:79:c4:0e:41:b1:69:dd:0f:fe:70:a0:a9:0e:3c:46:88:
         62:20:ae:e9:3f:8f:ec:9d:a8:8b:b7:b8:32:c1:9f:13:93:e2:
         e8:77:54:ee:41:50:b8:67:4b:c7:ce:d3:d3:ba:fb:ac:9f:0f:
         e4:38:7e:36:09:bc:0c:0b:da:73:a1:31:f9:57:96:91:8d:ee:
         8b:1c:c2:da:14:08:40:e0:02:81:dc:6a:ac:a7:88:8a:24:7f:
         f5:be:4e:2e:40:f0:5e:8a:67:f5:bf:59:b3:ea:ec:8c:3a:9d:
         ff:32:67:96:26:71:4e:f8:8c:25:c0:45:30:8a:f7:8d:34:e0:
         51:06:c5:4b:f5:2c:9b:4a:74:6b:07:dd:30:f4:96:6c:69:c7:
         73:7c:10:8d:f4:83:3a:e5:fb:b9:32:b4:07:4e:de:b8:c1:a5:
         52:ca:4e:4f:db:92:e0:f4:fe:79:cc:bc:8b:67:a2:7f:18:3f:
         8a:81:96:81:47:4a:7b:cb:fa:b9:75:ce:bb:60:79:db:13:04:
         48:53:68:5a:d7:70:fc:91:c4:b1:a1:34:59:f1:bb:82:12:8c:
         cb:9a:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:12 2026 by rpki-client