Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa
File:                     ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa (raw, json)
Hash identifier:          CBoNR1YrzCm49TyrlP+X/ZvCo4RTy+3AcFrXd/Cgzak=
Subject key identifier:   A7:4B:C4:7C:D2:9E:A9:30:15:B3:5C:18:8B:0D:0A:34:2E:9B:63:A5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DCAFB14E02379C1D876536200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     20001
IP address blocks:        158.62.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:14:e0:23:79:c1:d8:76:53:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=7a4de24e-ec50-4343-af6a-fea70810dae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:60:8e:55:6d:f5:71:25:02:77:0c:f5:87:
                    ba:94:36:de:d2:2a:dd:98:cd:69:43:cf:86:91:cd:
                    1d:b0:9a:ad:07:f8:ba:69:04:0b:a9:1d:52:7a:88:
                    12:36:5d:cb:52:3b:27:3d:dd:f3:0d:89:83:fa:de:
                    39:a3:fb:da:51:b1:4f:47:0a:1e:30:b3:0e:db:c2:
                    cb:ed:15:30:12:d0:e9:a1:b6:b0:0f:9e:60:c8:b8:
                    95:9b:9e:41:bd:99:66:ff:37:e8:b7:98:df:4f:d8:
                    11:e4:f0:17:0f:1b:48:08:c5:13:39:27:39:c9:c4:
                    44:c4:9f:d0:83:63:de:7e:41:9a:ee:2b:5b:1c:0e:
                    91:46:ff:45:70:3d:1b:32:9e:10:f2:59:60:e1:8a:
                    68:44:e5:26:41:d3:81:5c:c4:60:b6:53:02:a1:7a:
                    fd:36:43:50:43:a7:86:87:4e:70:cb:41:52:bb:e1:
                    30:cb:72:a5:f1:01:9f:51:6c:ff:0e:a5:44:7f:5c:
                    5c:1d:79:d7:71:36:82:fd:d9:93:3e:83:7b:61:ab:
                    6e:74:5a:c9:15:2f:c9:37:96:f9:d4:75:3b:9a:a6:
                    6f:80:61:39:c6:15:72:71:b7:14:51:27:c2:39:1e:
                    9d:ac:e3:ee:bf:aa:54:92:04:10:00:33:ee:0c:e5:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4B:C4:7C:D2:9E:A9:30:15:B3:5C:18:8B:0D:0A:34:2E:9B:63:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:66:29:99:34:22:b6:cc:e6:8d:48:64:00:bc:e5:2d:e5:c0:
         2f:af:4b:84:bd:94:50:79:d6:5d:53:e4:74:00:f7:17:ee:f3:
         86:9e:c1:d5:10:9e:7a:56:be:dd:eb:5f:ff:c6:13:b8:26:22:
         7a:87:ba:0e:d5:fe:2f:6d:54:59:9d:e0:d4:1d:3e:72:6a:90:
         d8:bb:2b:e1:a8:1b:e7:dc:92:40:a5:54:1f:66:cb:89:a0:85:
         d4:af:6b:64:48:fa:50:4f:0f:9a:9d:17:ac:62:93:9d:80:df:
         54:6c:e1:c0:38:33:34:de:48:86:90:8a:ab:b9:45:a3:38:06:
         d9:61:50:22:81:ef:d7:89:9a:e6:b2:c6:1a:79:a5:12:55:8e:
         68:42:70:25:11:b6:b3:28:eb:13:ac:b6:d1:39:32:9f:f3:1c:
         78:b6:c0:66:01:75:63:21:76:db:8b:c0:83:ba:9c:0a:04:8d:
         2a:fa:bc:67:37:90:84:60:89:77:69:e4:f2:d3:26:9d:10:fd:
         1a:55:0c:b7:df:2e:b7:78:7d:84:84:08:25:e4:78:e7:f5:25:
         2d:6e:56:79:37:0d:b8:43:72:09:52:47:0f:13:45:eb:bc:c9:
         ef:cb:61:64:dd:f6:a2:2c:b0:d9:9d:4d:0b:67:e4:3e:e5:7c:
         a3:82:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:47 2026 by rpki-client