Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
File:                     ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json)
Hash identifier:          DZmMEyJ7fVNrWdLEt59cejjaZYeZ1/vQIdiIr5fHo6Q=
Subject key identifier:   DD:4B:AF:29:79:3C:69:26:1A:D0:1A:1D:A7:26:93:9B:0A:4C:03:D1
Certificate issuer:       /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
Certificate serial:       010D0C9F4328584DC6CAFDDF3B8582237E66EDC0
Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     398292
IP address blocks:        23.158.48.0/24 maxlen: 24
                          169.197.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:fd:df:3b:85:82:23:7e:66:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=c7be1db2-f1f1-4a94-8cf7-da051c4f2484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:e6:75:81:ae:86:9e:c6:0d:40:9d:36:c6:
                    78:13:24:3c:27:e3:6b:41:ab:43:00:3c:d2:6a:4e:
                    9e:e8:07:cd:fc:08:f3:79:77:ce:28:e1:fd:15:b1:
                    a5:ef:84:1d:a6:37:8d:93:e3:9f:2c:73:8c:5c:e0:
                    e7:6f:4f:04:3d:b3:eb:fe:e9:5d:34:4b:62:13:55:
                    3e:12:78:ec:c4:31:bf:da:3e:e4:52:b1:29:cf:84:
                    3c:ad:23:05:66:97:8d:6a:3b:c3:33:56:23:6d:64:
                    e6:65:1c:54:49:ca:4a:5c:57:25:e6:b5:98:99:11:
                    d3:0f:51:e5:ef:4c:30:72:11:63:9c:a7:f3:06:8a:
                    d4:8e:9d:dc:76:91:4b:ac:ff:4a:fa:d7:4a:66:c8:
                    73:06:05:11:56:82:50:b9:a2:a6:54:39:29:ac:3e:
                    83:9f:ac:50:b3:5a:30:60:a3:4b:2e:cc:12:3e:49:
                    2e:d9:37:5e:b9:e7:a4:5d:50:cc:cf:64:6b:27:dd:
                    eb:f0:7c:d0:13:06:e2:f7:c5:19:28:6f:b9:14:e7:
                    10:9f:53:46:cf:a6:ab:de:b4:38:7b:60:56:32:14:
                    9e:23:5a:c0:5e:4b:44:86:d0:81:02:de:11:44:79:
                    2d:f3:28:4f:8e:dd:74:17:14:ee:d4:42:26:67:a5:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:AF:29:79:3C:69:26:1A:D0:1A:1D:A7:26:93:9B:0A:4C:03:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl

            X509v3 Authority Key Identifier:
                keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.48.0/24
                  169.197.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a6:de:b8:65:28:b3:26:f5:ea:24:3c:13:5a:57:23:4c:38:
         00:71:6f:09:b9:c9:9e:db:03:d7:9c:9c:9c:df:c1:bd:fc:a8:
         83:ce:7a:c3:f6:ed:4b:80:22:55:bc:20:7e:fd:e1:01:9a:1c:
         6a:2b:21:cf:e5:8f:fa:93:cb:a9:37:e4:77:11:c9:10:06:98:
         9e:f4:a3:e5:30:70:39:92:3c:5d:72:b2:a3:8d:58:a4:1d:c9:
         27:7d:59:1a:65:3d:6a:ee:55:4e:74:e9:84:6a:ec:15:ba:6e:
         85:60:ec:46:f2:8e:73:ce:54:b5:17:30:86:fa:ff:72:c6:57:
         0b:1a:56:d8:4c:86:e5:7a:64:a6:d0:b0:9d:ed:fa:94:0a:10:
         4d:a9:d8:31:42:09:0c:db:ac:d8:3d:5a:e3:44:88:dc:2c:1f:
         c4:ae:3a:fc:53:e7:b0:f7:db:95:be:92:a0:62:e7:52:7b:6d:
         b0:95:c3:af:df:29:50:b5:c7:8b:1e:ec:2e:ac:22:2a:78:4b:
         cc:86:a5:02:91:c6:e2:41:dd:31:3f:00:7e:16:5a:15:d6:cd:
         69:bf:2f:1b:7b:62:fd:fd:42:84:07:d9:d3:17:5a:7c:49:ef:
         03:8a:6b:81:c9:3d:c1:0e:14:24:59:07:70:e2:7c:6d:13:00:
         17:af:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:37 2026 by rpki-client