Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa
File:                     4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa (raw, json)
Hash identifier:          rqLJM0yNhxAObodER/kHPyqUUbZhe/N8s012CYCV49M=
Subject key identifier:   10:D0:F3:36:7B:0D:E2:68:A6:92:18:8F:26:D6:7F:14:47:07:DF:F7
Certificate issuer:       /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Certificate serial:       010D0C9F4328584DC6CAF5C413D652840BF5DE80
Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     30313
IP address blocks:        152.216.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:f5:c4:13:d6:52:84:0b:f5:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=4beaa1bf-851e-48b5-ba8a-e458599406ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:0b:15:f3:2d:2a:1c:89:08:bb:f7:91:7c:
                    08:77:a2:76:3d:9b:1d:a8:d6:55:c5:f9:7d:07:57:
                    01:81:2a:3b:aa:c4:38:1c:ad:f5:a8:cb:84:c6:7d:
                    d6:6b:f6:1e:a0:fd:98:81:69:90:7f:27:89:70:72:
                    03:7b:5c:d5:fb:03:cf:35:c5:47:18:77:b9:a7:6d:
                    78:98:96:24:a9:e6:95:11:f9:d4:14:4c:f9:bc:85:
                    ca:91:39:d3:11:be:92:90:81:f7:69:6b:e4:5e:9c:
                    69:5a:6e:ba:39:39:da:15:73:89:c7:27:53:d5:62:
                    b9:e6:df:5d:83:cb:b1:9c:6a:0f:57:8c:84:84:51:
                    fd:ed:b5:2c:10:1b:45:ba:bb:f9:a5:c4:37:0a:ed:
                    29:89:b3:22:c5:43:c0:b2:14:5c:75:fe:21:af:07:
                    61:6c:df:72:38:3b:d9:db:63:58:e4:d2:f0:09:ca:
                    91:c6:48:11:80:cd:9a:ed:65:e5:c8:17:cc:1d:01:
                    29:a6:a0:ac:97:17:1b:cf:3a:c0:22:c8:83:04:28:
                    a6:d8:74:4d:6e:63:06:cd:44:e8:ca:e5:a8:c3:d7:
                    38:73:c7:1c:fa:8b:4d:03:15:99:b3:55:c7:4b:3b:
                    0b:34:c2:21:c2:fa:cc:2c:b9:ca:27:4a:44:a6:91:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D0:F3:36:7B:0D:E2:68:A6:92:18:8F:26:D6:7F:14:47:07:DF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/4c46b0ae-4843-3f78-ae15-1a1aa032b188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.216.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:11:ea:60:f9:8f:81:e3:75:2c:06:35:b2:34:43:46:3b:b4:
         b7:b1:0f:ce:22:f2:6b:ee:9d:ce:4f:7a:6a:39:47:4f:92:95:
         92:d0:23:99:78:b6:14:9c:75:54:d1:70:06:61:41:2d:46:a0:
         78:14:23:47:55:8f:25:83:b7:c0:7c:c4:65:f9:2e:ea:11:6c:
         24:b9:2f:08:ac:14:15:de:e5:b5:30:2f:21:85:96:90:0f:63:
         49:2f:2a:f4:22:59:3e:4f:99:32:b1:1d:c8:e4:e9:7d:1b:7d:
         98:41:16:88:b1:25:18:be:4e:d2:c6:09:fb:1e:5f:ba:cb:47:
         85:ef:69:a4:26:9a:32:84:9e:78:78:12:da:80:60:da:66:48:
         ce:35:7c:b8:d2:be:32:5d:f3:de:98:6c:2c:ae:5b:da:47:d7:
         0c:80:24:3e:48:62:33:5b:ba:a9:53:2e:21:1e:68:e1:f8:79:
         b6:62:e8:bc:27:fd:7a:0e:ef:75:f5:bf:b7:bc:da:cf:4b:f7:
         a3:bd:b8:d9:e5:14:77:cd:c8:b6:e3:8d:8d:e0:c6:26:c9:9f:
         98:6e:80:bd:bc:e5:89:d4:5b:7d:35:18:b1:f3:0c:ac:06:8a:
         3c:65:cd:fe:12:ac:47:ce:36:34:2c:73:07:b6:85:d4:b4:f3:
         82:85:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:23:35 2026 by rpki-client