Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa
File:                     de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa (raw, json)
Hash identifier:          nX1QPRobKLnMjbpMiKpVTyR9a/0I6y0SWf/LevkkMFw=
Subject key identifier:   EA:75:40:9D:D2:19:51:CD:CB:D8:3B:2A:C1:36:EA:88:57:74:32:93
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584D9B8553D42B5882692F798480
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     797
IP address blocks:        144.160.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:53:d4:2b:58:82:69:2f:79:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=1eadc714-2cd5-45ee-ab02-75a60700c3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:01:d1:a6:28:14:b7:00:63:55:db:d3:cc:
                    fd:10:85:16:85:bd:f9:3c:1b:6b:7b:38:29:22:1f:
                    b4:9a:4b:14:1f:4c:1c:cf:8e:ee:c4:d8:28:27:eb:
                    cf:e5:a6:09:e8:a7:9f:a8:53:38:e3:83:78:c7:64:
                    7c:3c:cb:24:f1:9a:d0:39:db:1d:8e:0b:09:d4:c9:
                    8d:1a:f6:ca:2c:b1:ed:af:11:8c:82:36:19:c8:46:
                    ba:67:84:6c:d7:0c:36:6c:d6:b8:72:3e:c6:49:2c:
                    59:97:dc:41:b9:51:a3:70:f0:63:af:87:6e:5f:bc:
                    be:2d:c2:ef:a2:dc:eb:93:b9:4e:0f:73:f9:5f:92:
                    38:df:87:b3:e8:57:ac:9a:3c:64:f5:cb:0c:c3:b9:
                    ca:48:a9:01:de:dc:38:c6:c8:28:96:cd:ca:b6:e4:
                    6c:c5:48:70:5d:56:8c:b8:bf:4b:21:a6:a0:97:9f:
                    87:14:da:69:4f:fe:d6:0c:01:d9:63:31:dd:a2:f9:
                    c1:d1:52:80:d4:33:b4:86:b9:88:e0:bd:8d:fc:11:
                    e9:1e:39:7e:20:24:41:a8:76:21:55:b3:84:4d:72:
                    24:3d:27:df:e3:2f:80:83:8c:23:9d:b1:3e:9d:25:
                    36:aa:09:ff:e0:18:52:91:df:87:e3:d1:81:f8:7d:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:75:40:9D:D2:19:51:CD:CB:D8:3B:2A:C1:36:EA:88:57:74:32:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.160.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:80:c3:e7:f1:4d:74:2a:5d:bc:c3:be:50:03:bb:57:41:
         cf:39:5a:d1:e2:d8:19:dd:d6:7b:17:c4:95:d9:02:c8:e2:ec:
         c7:6b:b6:57:81:20:26:75:76:53:3d:d5:d8:8c:41:cd:54:aa:
         64:c2:c3:40:6e:27:be:a4:45:db:a8:09:ae:11:a8:83:bc:d1:
         90:c9:33:59:85:2b:29:6e:bf:ab:74:e7:67:b3:3a:1b:1c:c5:
         37:69:1e:34:7d:6d:fb:8c:e5:94:15:78:cc:4e:5d:d0:2e:2f:
         55:ce:dc:ef:39:6d:be:2d:46:d3:15:08:92:95:e7:6b:c4:b9:
         09:a2:24:e1:67:b9:92:bf:2e:f7:ad:78:4a:fc:f1:78:68:49:
         99:6d:46:81:89:ca:8a:0a:d2:fb:30:d6:66:93:cf:0e:75:55:
         4e:8a:17:20:6a:2d:31:af:d9:c1:39:38:3e:dd:a5:3d:fa:7a:
         ee:eb:32:9c:54:79:e0:9a:48:a6:ea:30:67:52:45:b9:7c:83:
         85:8f:53:e7:48:21:28:51:98:28:79:e2:f4:c5:fe:f5:54:c4:
         33:00:ad:af:05:d1:9a:70:82:5c:c4:7d:9a:fb:e7:74:ac:18:
         dc:b6:f3:9b:5e:7b:a6:01:87:84:41:c5:b3:e0:4d:46:99:1f:
         85:a3:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:44:57 2026 by rpki-client