Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
File:                     0dbdb44f-ac3e-376f-90dd-5a4848410620.roa (raw, json)
Hash identifier:          cyZxinj2dEacdDPHREReDG4AOAkU412Jur2u1D7MRQ8=
Subject key identifier:   92:0C:25:94:7C:AA:8F:6C:4E:AA:0A:6F:68:05:1B:B0:23:D1:A2:94
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584DC6CB083A1461D45B3FEE5CF8
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:08:3a:14:61:d4:5b:3f:ee:5c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=41653803-a74b-4c4a-8ff6-9a74b94d77b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:89:7b:95:9f:fa:21:c6:2f:c0:51:18:e2:
                    ae:ed:4d:89:97:3b:7d:0e:d0:9a:d9:46:67:4a:56:
                    da:28:5a:f0:9f:ce:93:38:95:4c:04:4d:ee:74:b5:
                    8a:76:7f:65:bc:cf:f6:a1:6d:0b:54:d8:09:e0:5a:
                    b0:38:a8:36:aa:0d:26:e8:fc:f3:8d:59:10:ae:dc:
                    56:0e:81:cb:15:5c:0e:46:c9:6b:2e:ac:ac:9d:b9:
                    c3:9d:cb:e1:2b:f8:80:5e:c5:ae:da:d9:cf:d6:0b:
                    c8:83:b8:40:fe:25:38:a6:2a:d5:f1:8f:af:33:4a:
                    52:38:94:21:6b:1c:ed:69:6a:9d:8b:9d:18:15:ae:
                    d6:a7:75:62:8f:ca:97:11:20:aa:12:48:6a:02:9b:
                    ec:90:60:b8:f7:58:78:bb:50:a5:a3:4e:25:7c:94:
                    07:08:17:16:d4:51:3f:e4:4e:89:ad:0e:3b:ca:4a:
                    7c:05:7b:6a:cc:40:60:36:99:ac:e1:d9:6a:99:37:
                    12:12:2b:56:2b:53:42:46:32:d3:8c:53:b3:44:48:
                    ab:26:e8:4b:85:30:73:ce:80:22:5f:ad:2b:fc:ee:
                    0e:8f:d4:63:30:4b:14:03:56:42:bc:ec:74:b0:e8:
                    a3:e7:30:41:2e:f1:9a:96:1f:31:0d:8c:21:e9:74:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:25:94:7C:AA:8F:6C:4E:AA:0A:6F:68:05:1B:B0:23:D1:A2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:d8:0d:bc:b5:56:15:48:88:90:98:14:66:f9:29:76:6b:
         f9:e0:af:be:ee:ec:1a:ed:38:e7:3d:fe:99:07:dc:73:1b:39:
         d5:23:4c:0e:bb:16:ee:d0:91:d6:32:63:08:76:a6:08:61:c1:
         37:ba:04:d9:7f:17:e4:6e:d0:3c:26:a7:17:d9:96:38:26:4f:
         fe:08:a5:3b:cd:09:56:45:49:95:c8:46:d3:d2:45:2f:4a:fc:
         73:26:3a:54:c3:db:be:b5:05:e9:0a:6b:1f:8c:de:33:64:5e:
         49:f0:a5:a7:17:a7:5b:ec:f3:3e:0a:8e:34:57:8f:8f:3f:49:
         64:be:ef:6c:a4:d9:b3:6e:bd:3f:f1:e9:da:20:72:c0:a0:68:
         ba:56:6a:88:c5:8d:41:f3:09:fe:99:16:1e:bb:6d:15:34:15:
         da:95:28:3b:e9:1b:bc:e4:e0:19:0d:95:f9:3e:b9:dd:3c:2c:
         b8:df:8c:8d:b5:c4:42:57:73:08:ff:ab:cc:60:e7:b5:82:4f:
         21:d0:c5:09:48:bd:be:33:42:7a:51:25:4f:37:47:10:91:dd:
         7c:8f:78:6d:e7:b0:e4:19:98:db:30:2f:51:6c:87:10:a4:7b:
         a8:e4:55:9b:c7:ab:0f:c9:ed:2a:74:47:af:6f:a5:1b:f2:f8:
         2c:cf:47:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:09 2026 by rpki-client