Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/f9e6c530-846a-3e06-812c-206bcca4499e.roa
File:                     f9e6c530-846a-3e06-812c-206bcca4499e.roa (raw, json)
Hash identifier:          dVD6K+3lYHtUpkSNXEFnnbh9BteqKj9Gqgs9UoDnLrY=
Subject key identifier:   2F:40:91:5D:23:16:D8:52:F3:8B:38:F7:E2:1B:33:8D:E9:AA:DF:A7
Certificate issuer:       /CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1
Certificate serial:       010D0C9F4328584DAAE01B973EDDE487F6828580
Authority key identifier: F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/f9e6c530-846a-3e06-812c-206bcca4499e.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     393506
IP address blocks:        192.31.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:1b:97:3e:dd:e4:87:f6:82:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=a5c3658e-0f9f-4874-93f0-aa375ab1774c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:be:60:ca:2b:da:32:fd:d0:11:30:aa:bc:
                    34:11:11:05:c9:c2:3c:25:32:f3:fd:b5:8e:5b:1a:
                    93:54:ef:8b:30:ab:06:c2:f7:5f:4e:93:8e:dd:82:
                    de:19:44:b3:bc:ef:df:32:73:df:06:07:96:a0:e6:
                    9f:db:b1:3e:12:8f:89:f9:9b:7d:1b:0a:f4:32:93:
                    9b:c7:20:bb:1e:23:1e:d7:d7:31:d1:fb:7b:6b:75:
                    bf:fc:e8:a9:48:4b:be:19:f7:08:2e:09:34:b0:fc:
                    05:a3:30:29:6c:ba:0c:26:36:9a:c3:f5:3c:d2:ed:
                    30:da:54:e6:ef:30:9e:77:e3:e6:c8:f7:d7:5b:53:
                    22:d3:97:67:31:43:f3:8a:83:68:75:c0:a7:c9:d5:
                    d6:87:08:c8:0a:79:41:d0:03:9c:25:c6:ca:7f:25:
                    48:92:ec:bb:f4:7d:be:b5:7b:78:08:72:4b:17:30:
                    e0:4d:cb:38:29:03:9e:60:be:70:09:f6:18:ad:f8:
                    45:a5:bc:65:93:ac:46:3e:13:88:34:c9:1d:5d:d1:
                    b6:0a:55:0c:9e:74:3d:e8:f5:47:e4:41:ab:14:16:
                    bc:81:f2:ec:27:06:4d:6e:61:e2:c1:c8:fd:d0:8f:
                    8a:f7:26:d4:31:61:12:85:70:71:33:f7:be:71:f1:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:91:5D:23:16:D8:52:F3:8B:38:F7:E2:1B:33:8D:E9:AA:DF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/f9e6c530-846a-3e06-812c-206bcca4499e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl

            X509v3 Authority Key Identifier:
                keyid:F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:7b:21:ae:01:0c:0e:ae:db:ed:5f:be:92:32:d3:f5:6c:
         23:88:ea:99:5a:13:79:21:dc:2d:43:a1:5a:52:b2:11:fe:8a:
         fc:e5:ab:32:ca:f2:2d:9b:1e:89:f2:b3:bc:ad:87:a5:67:28:
         e4:d9:57:36:02:c6:2c:cf:4b:49:15:87:f0:a7:a3:d2:90:fa:
         94:6e:36:12:03:a6:01:e3:2b:65:cc:95:d4:71:94:ee:ea:bd:
         79:20:81:07:1b:5d:14:6d:0d:1a:e9:fc:4c:be:f8:13:ee:bb:
         43:5b:ec:f0:c0:0a:73:3e:1e:ab:bc:67:b5:c3:e7:cc:ac:6f:
         bb:0e:2e:b1:d5:af:ec:4e:c1:3f:7e:6f:fc:3c:a8:a6:2c:72:
         b3:14:5f:a4:ca:45:27:41:33:44:bb:c3:88:53:41:1c:5d:e3:
         aa:a5:d9:ce:3f:14:cf:e1:d1:ae:45:aa:0c:8f:57:e3:ce:86:
         70:76:3c:4e:6c:83:6f:8c:bf:b8:5d:fc:bb:c5:19:3b:7c:16:
         f3:11:f6:8c:9a:7a:8d:4f:6e:19:47:b6:26:52:9c:2f:7d:7f:
         33:4b:f2:3c:41:da:99:16:40:d4:57:91:6f:56:0f:e3:37:20:
         e7:81:14:44:1f:b9:b6:4d:c4:ef:4d:b4:89:4e:c6:c5:d3:7b:
         c7:e7:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:38 2026 by rpki-client