Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa
File:                     2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa (raw, json)
Hash identifier:          hsHi0FJP0Bh1B5HZ71Y+7B0r3nFUp3vaq9TU1TFu3+E=
Subject key identifier:   4A:51:27:A2:EA:6F:7E:1F:65:78:31:67:19:7C:39:25:95:4A:53:85
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584DC565901103579FD4D8091E00
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     18004
IP address blocks:        163.181.24.0/24 maxlen: 24
                          163.181.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:90:11:03:57:9f:d4:d8:09:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=27125fe4-6a19-49d3-802b-42d2f0ad7663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:27:48:6a:67:f3:00:8a:70:f7:cf:c0:e2:da:
                    0c:5c:cf:e0:03:84:ff:03:13:9a:16:4b:6d:55:52:
                    f5:bc:e0:88:8f:3b:62:cf:86:10:ac:6e:4a:25:07:
                    47:61:11:f3:11:94:2e:8c:56:9d:7c:94:88:43:42:
                    96:6e:90:89:da:16:37:72:f3:e4:35:2f:46:7b:b2:
                    90:7f:f1:07:aa:e4:b8:b8:8b:51:91:9a:b0:18:50:
                    ba:b2:89:0c:a4:27:e7:b0:50:ff:52:54:19:e5:a8:
                    16:db:cf:e1:08:17:ff:10:64:3e:24:42:95:9d:f4:
                    e6:55:79:b7:e3:9e:2b:11:58:94:3d:fb:d0:13:96:
                    6a:99:9f:bc:f1:82:0f:8c:ea:d0:17:ec:89:a8:b7:
                    b9:c3:00:d7:c3:9c:e4:0d:84:f9:29:a8:1c:08:c0:
                    23:d8:fd:d9:e9:67:a7:2e:c0:be:6e:b5:b0:69:8f:
                    66:2c:bb:b3:e7:3d:9a:80:d0:1c:59:5c:1c:1a:0c:
                    6a:6e:e5:4b:ba:93:5b:84:bc:d9:eb:24:75:39:de:
                    f7:f0:1a:41:ab:c8:43:67:5d:50:75:80:15:8b:96:
                    de:23:a6:73:f4:01:20:87:0e:99:c0:f5:af:00:4d:
                    57:4b:aa:9d:90:4e:3d:57:c2:01:a7:3d:6f:57:d7:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:51:27:A2:EA:6F:7E:1F:65:78:31:67:19:7C:39:25:95:4A:53:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.181.24.0/24
                  163.181.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:81:7c:11:ff:12:60:eb:f2:e2:19:4d:be:f0:6a:84:bc:
         cc:ee:20:9d:13:69:c1:75:b1:4a:e8:18:8c:b1:83:0c:29:fa:
         91:6e:7a:29:98:9a:8b:f0:87:a9:c9:a0:bc:7b:07:d5:98:2d:
         5a:3f:9a:54:40:f1:fd:cd:16:98:42:c5:67:50:4d:e7:7f:b4:
         df:df:13:42:6a:68:4f:3a:f6:66:c5:40:41:f2:65:90:93:74:
         82:41:26:da:e5:b5:5b:9a:e1:c9:f3:af:d0:24:60:63:76:ec:
         0c:27:e0:17:a3:d9:ac:36:b6:fd:c0:e0:dd:4d:9f:93:e9:a8:
         11:b2:54:a7:83:86:5c:94:ff:e6:03:de:18:aa:d3:d7:04:86:
         d6:27:04:06:65:29:3e:c7:b4:75:19:ec:a7:1e:36:3b:19:23:
         ab:9e:ed:df:5e:09:83:fc:8c:72:e3:2a:cb:e3:be:52:71:9d:
         b8:12:ec:bc:56:84:be:46:68:97:50:06:83:52:2b:18:fb:4a:
         58:48:67:79:09:a6:05:aa:b8:ef:16:a1:94:c7:97:93:ad:bc:
         7d:e9:48:67:68:6b:0c:45:f5:c8:a4:51:88:65:c2:30:f9:c1:
         84:0c:7c:42:8c:a9:7e:47:46:b5:bf:e0:5f:16:18:19:5f:5e:
         03:c7:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:36 2026 by rpki-client