Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/40a20a7d-02f2-37bd-8133-1efc8395c017.roa
File:                     40a20a7d-02f2-37bd-8133-1efc8395c017.roa (raw, json)
Hash identifier:          paUdpXVisM8dq3v5mOlolo0MVtfLjP1nKCP4CIgXl60=
Subject key identifier:   F9:E6:FA:C9:A7:98:EA:BD:B5:C7:7A:37:AD:4D:E4:D2:7D:F8:6C:92
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584DC6CB05E4B99FB25CA0EC3180
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/40a20a7d-02f2-37bd-8133-1efc8395c017.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     30513
IP address blocks:        204.14.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:05:e4:b9:9f:b2:5c:a0:ec:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=b511c7b0-ab08-4b81-88c4-de0cae149272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6a:a3:e4:67:98:d8:06:1b:b9:aa:33:d6:1d:
                    a6:c8:9b:4f:5f:35:b1:cc:e5:98:ac:24:1f:57:6b:
                    f6:8d:e0:30:d6:3a:b8:7b:a1:c6:78:d5:b3:0f:65:
                    67:38:ce:7c:d8:f5:3c:f2:94:70:a2:39:5a:0f:17:
                    f7:16:93:9e:eb:2a:76:ba:f5:9b:28:28:c7:c8:fd:
                    45:b3:54:8c:a2:90:04:3b:ed:e5:07:04:36:b2:7d:
                    5c:ce:17:a9:31:02:72:c0:bd:02:f5:7c:7b:c7:7b:
                    98:20:be:b0:99:57:54:df:e1:06:dc:e8:3d:30:d1:
                    9c:87:b2:05:a8:7d:a3:50:48:2f:19:96:e6:4e:52:
                    98:83:77:32:18:53:3b:08:e2:f9:4d:be:0b:76:c6:
                    f8:14:18:ee:42:dc:b8:cb:da:fd:7b:74:06:27:d0:
                    70:2b:38:ce:a1:24:6c:62:63:5b:49:80:6c:32:12:
                    08:20:25:d1:f1:b2:d4:42:0b:68:c3:51:63:fc:4c:
                    3e:af:e2:c2:e9:67:68:ae:21:f0:f4:e2:17:e4:6f:
                    e7:a0:a3:01:08:cd:17:35:01:ae:5b:27:07:8d:5c:
                    f7:24:6a:d2:84:b5:e9:71:65:e9:dd:4e:cc:cf:66:
                    fd:00:72:45:b0:17:87:0d:15:83:f8:6a:3b:d4:5b:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:FA:C9:A7:98:EA:BD:B5:C7:7A:37:AD:4D:E4:D2:7D:F8:6C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/40a20a7d-02f2-37bd-8133-1efc8395c017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:49:45:82:0d:a0:7f:2c:48:f6:0b:9c:1d:19:52:f2:47:
         dc:80:b1:cc:5f:5e:4a:e3:1d:a0:26:93:79:20:80:41:0f:3b:
         49:71:66:30:be:92:06:05:4c:6e:c0:fb:e4:24:af:74:ec:ee:
         4e:74:f3:5d:73:14:84:aa:aa:2b:98:13:c0:18:97:50:76:9f:
         18:2f:70:dd:ed:4d:0f:13:07:ba:19:67:9d:c7:7b:1a:30:e2:
         f7:f3:dd:34:38:ae:68:a0:0f:2e:4f:1d:7a:83:d6:b1:6b:1c:
         0d:53:dd:ce:40:70:1d:3f:fe:bb:52:ff:47:45:12:50:a4:bf:
         62:f0:3f:3b:23:3f:b9:0d:76:d8:de:23:5a:32:e7:c1:2e:92:
         5f:23:1a:4c:8a:b2:fc:0c:ce:16:bc:d8:53:57:b1:63:a1:10:
         79:a2:5f:0c:2e:62:7e:a6:10:4c:ed:a8:a9:98:95:12:3b:0b:
         75:b4:57:3f:d9:3a:3a:d1:63:51:a8:c4:11:af:82:d6:3b:60:
         86:84:01:71:e8:57:2d:e3:13:02:b1:ea:fc:13:84:b1:4a:f1:
         dc:fb:d3:c8:83:4d:31:74:29:0c:af:7a:a2:24:c1:43:28:7b:
         42:41:0f:32:de:fb:b4:f9:5f:42:5d:04:8d:83:eb:5c:e6:82:
         c7:1d:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:23 2026 by rpki-client