Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a1de7e91-9330-381c-8f90-d77fe3eeb4b3.roa
File:                     a1de7e91-9330-381c-8f90-d77fe3eeb4b3.roa (raw, json)
Hash identifier:          3nLTcER59yRb4XKf2gAZ+OCksx8rt/XQE2jNU6LPTMI=
Subject key identifier:   8A:8D:A6:25:AB:CB:89:4B:BD:4C:83:EB:83:5B:F1:8F:B5:13:90:18
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584DAF101CFAE8136699BEF47080
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a1de7e91-9330-381c-8f90-d77fe3eeb4b3.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        167.234.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1c:fa:e8:13:66:99:be:f4:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=37151812-dd9c-4729-9d48-631fc9171955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b9:3d:c8:f2:de:4f:6e:06:f7:99:78:82:46:
                    e4:0a:f5:56:bf:2c:b1:36:12:03:41:7a:2c:bc:5b:
                    e7:cc:93:0d:4a:df:85:72:d4:d2:b3:ad:b1:72:27:
                    ad:a2:52:0b:da:83:f7:c7:76:6a:f5:51:d4:70:5f:
                    d8:f5:39:d7:cf:f7:6a:93:fe:fe:37:2c:4a:8e:35:
                    70:15:ac:21:a6:ab:c2:40:e6:26:11:b0:67:dd:55:
                    89:09:43:17:d5:ff:46:9d:d9:5d:2f:ca:1c:20:f6:
                    59:a2:42:9a:c6:12:10:c4:a4:d6:8a:40:7d:63:e9:
                    de:52:d4:31:49:5b:39:61:4f:dc:f6:cb:1d:a0:55:
                    5d:71:8d:6b:bd:6c:c2:49:26:fd:7d:71:cb:21:fe:
                    b7:08:46:98:7d:7d:75:48:c0:bf:63:6a:e4:b5:b4:
                    8e:71:56:60:d2:60:e9:3e:b1:90:50:f6:ef:06:b9:
                    0b:72:7d:83:ea:b3:65:30:31:61:38:be:d1:6e:1e:
                    de:10:fb:53:07:a3:3f:b5:17:58:6c:83:24:ae:9b:
                    93:e4:96:0b:f9:de:5a:1d:83:37:be:e9:a6:fc:12:
                    9a:ec:02:e8:a8:08:67:40:24:65:b3:f0:f8:50:82:
                    9c:a4:80:88:ce:d9:1f:ad:aa:e0:cc:a0:78:57:b9:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8D:A6:25:AB:CB:89:4B:BD:4C:83:EB:83:5B:F1:8F:B5:13:90:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/a1de7e91-9330-381c-8f90-d77fe3eeb4b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:95:15:2f:05:30:d0:22:ec:87:4a:14:a9:fb:f7:2c:c1:
         dd:6a:6e:0f:69:ec:d5:4a:55:13:c1:e3:d2:3d:75:1e:41:5f:
         a4:22:0e:2b:e3:e4:59:a2:68:4e:2d:08:ea:2a:cf:cf:a3:89:
         8b:42:ba:e0:4b:0b:3b:e8:6a:2b:80:56:1c:44:9a:b6:5b:b5:
         d5:40:18:01:0e:68:3b:bc:7d:3d:d0:33:26:51:43:4f:e1:6e:
         63:3f:41:63:18:04:29:bd:e8:5c:da:b8:ed:7b:3d:8e:92:e5:
         d2:73:95:4f:7a:2a:88:0e:5e:3b:ed:00:15:9f:f2:ff:8a:ab:
         02:4b:c7:57:e4:da:8e:fa:f8:7e:83:4a:d7:40:e8:8c:6d:96:
         b8:68:3b:92:b8:54:e3:25:50:f0:d1:fa:4c:4d:1e:2e:a6:3a:
         ed:06:6c:68:59:15:93:68:fa:df:ad:74:83:2a:a5:47:27:52:
         a9:c8:03:23:85:99:64:74:5a:4f:f4:8f:d2:9b:4a:37:51:ce:
         b0:53:d0:0c:52:69:c0:b8:a0:a8:d5:59:84:95:b6:a1:51:ab:
         00:1f:ef:fc:f5:8d:7d:fe:e8:f2:ff:ee:39:02:97:a1:ca:a7:
         44:d0:fc:3f:5e:e8:cb:ef:9c:9e:a6:3f:b2:e8:83:13:2d:a5:
         de:a6:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:47 2026 by rpki-client