Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/a447c3b4-c844-34bc-a5db-4b1ff925c005.roa
File:                     a447c3b4-c844-34bc-a5db-4b1ff925c005.roa (raw, json)
Hash identifier:          z6sMHI7uIh1q+3fICnaT4wRLqjQQITiXOIbD3HfCjvk=
Subject key identifier:   22:BC:A3:31:F7:2E:7A:99:AA:94:81:EE:4C:2C:87:C9:FD:D2:44:8A
Certificate issuer:       /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial:       010D0C9F4328584DC6CAF2B9A13D097B4952A600
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/a447c3b4-c844-34bc-a5db-4b1ff925c005.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     1613
IP address blocks:        168.100.254.0/23 maxlen: 24
                          2605:e740::/40 maxlen: 40
                          2605:e740:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:f2:b9:a1:3d:09:7b:49:52:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=6f0646fa-96c1-4370-b899-cc481bfa0e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:ac:3d:ee:ee:66:bc:a8:b0:d9:82:13:22:
                    84:fd:af:f9:25:f6:27:f0:50:e3:20:fa:83:cb:40:
                    af:10:ed:20:db:51:7c:ec:47:6f:7a:e3:8b:9c:64:
                    ad:73:28:51:07:30:20:c4:1b:b2:ab:92:8b:4d:e7:
                    37:ae:af:47:0f:14:aa:33:0b:a0:0c:1e:17:30:a9:
                    b0:91:c5:f4:87:76:64:be:47:75:da:95:22:7e:3b:
                    32:4b:81:43:a1:dd:93:d8:51:41:d4:10:0e:b2:c3:
                    51:2d:d5:d7:d0:c9:91:6b:15:52:28:c7:0a:c8:47:
                    d6:b6:06:a8:b1:1b:19:68:f6:e3:48:e4:b6:34:28:
                    49:0a:0f:06:26:5f:15:fb:99:48:cd:20:b0:d3:02:
                    78:1d:d7:55:43:3b:3e:9d:7b:05:12:ca:ce:97:8e:
                    cf:3f:5c:f4:8a:d5:ec:4e:e5:2a:2c:04:f3:80:ad:
                    91:ca:73:eb:0b:9a:45:03:6f:63:c5:9f:fe:4d:71:
                    f0:6b:69:43:3c:cc:21:55:28:4d:93:c8:61:72:17:
                    78:72:aa:00:1e:ff:0b:dc:da:55:59:e8:68:84:4a:
                    73:3c:ba:a9:cd:1a:04:96:55:7a:c1:d8:ad:c3:05:
                    4f:0b:b4:54:f7:3d:96:f0:c4:8e:d9:a5:7d:06:02:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BC:A3:31:F7:2E:7A:99:AA:94:81:EE:4C:2C:87:C9:FD:D2:44:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/a447c3b4-c844-34bc-a5db-4b1ff925c005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl

            X509v3 Authority Key Identifier:
                keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.254.0/23
                IPv6:
                  2605:e740::/40
                  2605:e740:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:66:94:26:a0:c7:b7:c8:f6:25:ac:9c:92:dd:76:e0:37:83:
         85:d4:0e:58:3d:1a:a4:94:fc:38:f7:a2:fa:40:af:cd:1b:78:
         4f:15:06:3e:35:27:49:7a:74:16:0e:a2:2d:8c:dc:34:1d:84:
         68:a3:52:30:11:b4:4a:0a:ab:b0:5f:a1:b1:17:80:04:08:b9:
         5d:10:e9:63:5d:df:55:6e:b2:78:17:bd:65:e2:5f:be:64:84:
         43:75:2f:13:5f:6e:8a:17:12:90:bd:e9:10:ec:4c:bf:38:ad:
         ce:ce:d2:8f:93:0b:52:42:a3:cc:f7:63:f2:1e:7f:47:0d:ff:
         86:76:1f:49:24:7f:ed:79:7b:6e:63:96:7c:8e:06:39:99:d0:
         ff:46:bb:bd:02:a2:d2:1a:f3:25:bb:62:01:04:e7:a0:7b:34:
         5e:9f:f8:f9:f8:fc:69:03:8c:f3:d6:38:bf:54:c9:8d:9c:1c:
         70:29:64:1e:c6:42:53:42:63:88:f5:e6:ae:6e:ff:7d:b5:90:
         67:3f:18:e7:bf:64:fc:86:1d:98:88:36:21:72:7d:24:91:97:
         77:04:ae:dc:19:fa:98:c3:d5:8d:b8:d8:cc:26:fc:39:35:ed:
         69:ee:06:7b:59:a2:64:73:87:e1:38:1b:96:78:a3:fb:89:ce:
         c8:08:57:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 09:07:31 2026 by rpki-client