Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa
File:                     5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa (raw, json)
Hash identifier:          yNJsvtX79QJ0BnpbicqE5ZrtyeXjn4K0iD7acB1EeDc=
Subject key identifier:   F9:5A:B4:34:AA:82:2A:EA:D5:01:E1:58:DA:20:8B:B2:3E:1D:FD:95
Certificate issuer:       /CN=054cd560-1f7c-4ac0-bbeb-7cceeefb5e55
Certificate serial:       010D0C9F4328584DBBA057ED13FC07D88B52B080
Authority key identifier: 76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     399051
IP address blocks:        190.211.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:57:ed:13:fc:07:d8:8b:52:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054cd560-1f7c-4ac0-bbeb-7cceeefb5e55
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=758f702f-9629-4933-bd54-ac3a0bd3a151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:73:c3:ad:ac:b6:c8:d9:77:30:bc:ad:77:
                    47:03:3a:f9:01:df:f5:ec:d1:42:d4:4e:26:f4:64:
                    13:32:d3:b7:82:26:c7:46:60:2a:ba:53:73:5d:7a:
                    5d:63:ec:c1:d5:ba:34:7c:96:cb:97:26:9c:30:29:
                    1b:5c:8e:d1:bd:74:b4:4f:94:9b:9c:20:7c:1c:4d:
                    f2:05:5a:c2:f1:92:e8:c2:19:88:ee:f5:be:bf:9d:
                    76:c6:c6:55:08:eb:a5:7f:5b:89:05:1d:5c:37:7f:
                    2e:e3:7f:72:ec:a5:59:58:4d:f9:46:ef:47:0d:07:
                    2b:a9:92:63:c3:21:78:5d:c7:de:06:fb:05:03:45:
                    c8:e1:76:98:34:16:9c:e6:5d:58:3b:07:01:96:93:
                    e4:33:af:84:87:3c:40:6f:10:86:10:92:4f:a9:d0:
                    f5:b9:80:04:9f:3f:25:3b:f4:82:fe:da:41:f4:b1:
                    9a:d1:ba:ed:b4:b3:9a:46:86:ec:0a:ce:06:45:17:
                    95:1c:2b:6d:9f:b8:f1:62:ca:bf:cd:b5:21:57:e4:
                    89:11:20:ca:d0:85:98:96:5e:f3:ae:bd:74:52:78:
                    09:ea:a4:fa:bf:5a:38:cc:65:7b:5b:14:b0:db:e3:
                    d2:b3:9f:bd:84:c0:8d:0b:68:50:7e:b7:9d:a1:9b:
                    b6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:B4:34:AA:82:2A:EA:D5:01:E1:58:DA:20:8B:B2:3E:1D:FD:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/5857385c-87b0-34b3-a0f5-855b37c1bd2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.crl

            X509v3 Authority Key Identifier:
                keyid:76:90:60:51:89:83:11:47:15:70:BA:67:C4:27:D6:0C:4F:D0:81:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/054cd560-1f7c-4ac0-bbeb-7cceeefb5e55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:70:4a:f9:e4:7d:50:0f:8e:ec:11:3c:b0:f7:64:e3:4b:
         6a:12:ae:9f:4c:02:bb:d3:42:a9:c0:50:11:6b:13:a9:ff:45:
         f9:39:85:b0:a3:1a:3b:64:cd:91:3a:da:86:fe:16:9b:90:10:
         5f:09:81:d8:7a:ab:7c:89:1b:10:8c:63:53:a0:61:c5:60:9c:
         a0:85:ab:8b:17:e7:ac:07:3e:20:67:3f:ab:91:5d:43:f1:db:
         eb:94:85:aa:9c:6d:e7:78:43:d8:95:70:63:8e:8e:ec:6f:7e:
         55:f6:51:72:34:a8:b4:95:39:47:e5:78:cb:c7:44:d8:35:a0:
         09:43:f1:d0:0f:d2:25:1d:f8:e7:a7:49:ac:13:11:ae:29:a1:
         10:0d:78:76:fc:78:a4:bb:48:54:e2:14:25:54:38:02:0e:bd:
         62:22:c7:74:cd:af:03:5c:b4:7b:13:74:08:a8:59:58:7a:bd:
         3a:1d:ff:de:59:9b:32:46:47:61:e1:5c:45:18:8a:73:0f:05:
         52:a0:92:41:7a:e7:14:74:be:15:51:71:f8:61:b0:d2:a8:51:
         32:bc:f6:93:96:4f:0c:d3:92:2f:99:ee:d6:cc:2f:ef:02:84:
         c1:a9:b1:86:aa:2c:4b:3e:af:5e:8f:a5:73:9d:3b:a4:a2:5b:
         af:70:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:03 2026 by rpki-client