Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa
File:                     7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa (raw, json)
Hash identifier:          vjMhgl1idOGVqQQ/Lh1x+NCoZj/lTdpU+OSxr/mHMM0=
Subject key identifier:   0C:0E:F4:3C:C8:67:A3:64:C1:D5:A3:EE:48:25:91:EA:86:6F:FA:7A
Certificate issuer:       /CN=89ee541c-de14-47cf-b4d0-081e933fb330
Certificate serial:       010D0C9F4328584D9FB566C8992BABCEECCA5940
Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     53809
IP address blocks:        100.43.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:66:c8:99:2b:ab:ce:ec:ca:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=b3577252-fe13-494c-b20a-a6cb8160bc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:c8:1f:8e:7a:d9:cc:30:9f:89:97:11:77:
                    5b:46:94:79:ee:be:03:8b:ad:18:70:c0:77:b6:6c:
                    78:54:35:5d:10:7e:97:35:b2:80:6a:bc:8f:4b:ae:
                    81:36:83:bd:4e:27:9b:91:49:8b:6f:1f:7c:37:0e:
                    fd:e9:e9:c4:91:d6:d5:fa:26:64:b9:78:1b:42:80:
                    a2:b8:d0:eb:f5:9d:c2:ae:65:5b:08:9f:da:6f:13:
                    d0:d3:b6:9a:4f:29:71:7d:be:a4:56:0e:40:b1:cf:
                    88:ca:01:4f:88:c4:f7:be:02:48:76:a9:5f:f8:13:
                    cd:94:c2:c8:7e:c1:79:4b:da:48:65:58:71:55:4f:
                    25:25:de:b0:4a:71:8c:4e:6f:90:5a:89:51:ed:50:
                    48:76:ed:d5:f4:ef:8e:a3:23:75:14:17:b2:0a:2f:
                    8e:5f:03:56:94:63:06:fa:a2:b1:0c:49:63:80:41:
                    2a:69:99:71:df:9c:bc:5b:0b:f2:30:1c:96:2f:b7:
                    0b:85:5c:e9:c6:cc:d2:fe:7f:2c:1f:a2:0c:71:31:
                    db:88:86:6a:bc:3f:85:41:c2:93:e8:e7:3e:83:b1:
                    df:07:bb:55:c7:f5:d7:7e:8d:c7:f7:09:63:cc:8c:
                    3c:74:d4:f3:8c:ce:4d:18:e7:e1:7f:08:12:e0:43:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0E:F4:3C:C8:67:A3:64:C1:D5:A3:EE:48:25:91:EA:86:6F:FA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/7563aa26-c167-3e86-b7ae-dd9b4773aeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.43.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:58:3b:73:d7:34:54:c0:b1:6d:2c:5f:66:44:4e:0b:98:
         e8:bd:f1:6b:34:23:73:b7:2e:89:86:83:97:50:07:43:a0:46:
         87:e4:23:6a:c9:36:ee:2c:f7:5d:d0:36:04:52:9d:1c:b0:d4:
         43:6b:89:2f:0e:7b:38:6e:1b:49:39:f1:8c:e9:93:40:04:bd:
         b8:2d:3b:fa:c9:c5:28:9d:4b:d4:3d:46:51:b7:5b:06:62:01:
         9d:2f:25:95:16:79:f5:0b:7b:64:b1:bb:67:26:ca:99:e6:11:
         65:1c:d7:17:a8:92:af:0a:61:70:b3:f8:5f:71:6f:33:8a:d1:
         b4:96:78:28:a9:01:be:a5:cf:6c:49:9c:01:79:27:c7:da:39:
         7e:2e:6e:2e:26:c5:37:77:0e:5a:49:75:b0:32:b5:4b:a5:fa:
         11:49:5b:19:e8:9d:9a:7e:56:d3:d6:03:2c:5c:5a:37:87:cd:
         c0:72:1b:76:a7:6c:4c:6f:77:91:22:fc:d8:0b:c5:ea:40:3b:
         54:f4:c1:28:d7:d6:64:9c:c5:93:f3:d7:b4:31:50:07:61:4e:
         9f:06:9f:0e:f7:7a:07:72:9f:88:1e:26:cf:e5:19:99:be:8a:
         9f:d7:6f:89:83:bd:27:4e:f9:0b:ea:ea:76:a1:41:84:11:56:
         74:e9:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:06:07 2026 by rpki-client