Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96506768-bac2-3fe5-bb94-963345efe5a3.roa
File:                     96506768-bac2-3fe5-bb94-963345efe5a3.roa (raw, json)
Hash identifier:          IiL4sEHjkbUKNt+LllSqQXrsdYfTdBzxS8hYopvdOMg=
Subject key identifier:   4E:30:10:E5:B4:F7:8C:65:70:75:FA:5A:73:E4:45:64:E3:B4:AA:A4
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D316F6CF31451C19FBDC15E80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96506768-bac2-3fe5-bb94-963345efe5a3.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     150436
IP address blocks:        128.1.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:6c:f3:14:51:c1:9f:bd:c1:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=7b8fc2fd-8490-4e26-8018-06066510f6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:9d:56:8c:7e:dd:e1:5a:7c:19:01:36:f1:
                    3e:17:3f:c0:e9:7a:ca:d9:dc:6d:9d:3f:fb:fd:8c:
                    0f:e7:73:ac:d1:6c:24:e2:cb:fd:fb:29:0e:4f:b4:
                    b3:3b:bf:4a:90:73:bb:e6:5a:e3:95:67:30:5d:be:
                    9a:da:f4:3d:10:36:09:14:90:a0:4c:4f:86:64:5e:
                    07:14:4e:44:26:0f:b3:e4:8d:92:3a:98:68:13:ee:
                    ef:bc:c5:3f:fc:5f:d5:d0:e7:91:c3:03:5c:d0:44:
                    2d:71:07:f4:13:0a:e3:ce:3a:19:00:ff:38:7c:15:
                    18:6f:86:61:04:d9:52:57:df:c3:1c:09:32:0d:52:
                    93:83:78:4b:a5:ab:f5:18:ce:f4:21:32:68:bc:71:
                    be:5f:7d:60:fc:51:9d:54:4e:a9:20:e1:74:e3:54:
                    1d:a5:7f:e2:17:f5:8a:70:2d:60:3b:9c:39:10:6a:
                    27:44:6a:fb:74:82:db:bf:eb:24:07:7f:cf:94:d4:
                    d1:2a:ae:be:30:53:eb:d7:47:89:ae:71:17:f7:0a:
                    e1:43:3f:6a:dd:5f:6e:ab:0e:27:dc:11:88:f1:37:
                    d4:87:0f:9c:3b:12:1a:95:ed:87:ed:fc:87:66:5a:
                    51:9c:cd:f2:1a:c0:cc:59:31:97:2a:61:ef:e1:69:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:10:E5:B4:F7:8C:65:70:75:FA:5A:73:E4:45:64:E3:B4:AA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96506768-bac2-3fe5-bb94-963345efe5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:d4:b1:29:fe:c7:c0:cb:ab:62:e5:c5:07:01:19:d3:ba:
         8e:fd:fd:91:2e:12:e5:fe:88:53:0e:f7:fe:7b:c5:68:f8:20:
         49:5f:bb:b8:78:4a:b8:98:a1:34:1b:08:3e:a1:b5:76:35:11:
         8b:43:ab:b0:d9:dc:ec:fb:b1:0d:9a:44:9c:3a:7a:d7:48:96:
         73:5a:71:9d:d8:a8:7d:d9:c7:6c:78:b2:61:f0:05:f9:aa:b0:
         d3:14:f4:1d:a7:bf:8b:d5:88:db:e4:e5:6c:7d:94:1a:f8:da:
         8a:86:44:c1:75:67:f1:bb:ee:66:86:cb:b7:0b:e5:20:9f:ed:
         ae:72:a3:c5:1b:a5:8e:81:04:c1:db:b5:f4:e0:9f:d7:dd:e5:
         a0:52:21:58:4a:23:9d:ee:bc:29:0b:2a:89:54:1f:9d:22:db:
         ba:32:19:91:7d:12:f0:a7:6b:47:3b:b5:d3:ba:72:5c:6d:08:
         74:52:2e:1b:51:73:28:d4:d4:aa:f8:8a:31:5e:6b:ed:13:38:
         69:b7:39:85:7b:ef:19:09:86:96:c3:01:1d:5d:bd:21:55:25:
         25:52:5e:78:ee:e1:58:a0:b1:a5:19:94:93:b2:b0:b5:f8:91:
         b8:df:73:ba:35:cf:47:88:22:4b:52:41:c3:e8:fe:25:f6:8c:
         12:13:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:35 2026 by rpki-client