Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa
File:                     e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa (raw, json)
Hash identifier:          5Hk/8E2n3CHqnZyn1IipSp1SLbyw3lg5f42SIycbtkM=
Subject key identifier:   76:95:A8:63:67:98:4F:2F:D6:C9:DD:F8:93:34:70:DE:F6:96:2A:5C
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584DADAADEB0DD9810D39501D820
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     11269
IP address blocks:        200.1.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:de:b0:dd:98:10:d3:95:01:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=98e61c72-9e6f-411f-969f-fd52e761c6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:92:c8:b5:aa:98:9f:7a:f3:4f:6d:69:e3:
                    d7:ac:a0:e0:9f:8b:ab:07:c1:18:e0:39:36:42:8d:
                    2d:a8:f4:78:1a:ec:d0:45:0d:8e:9b:f2:59:c3:17:
                    72:89:aa:91:fd:e2:f1:e6:9f:6a:8b:26:ff:fc:b1:
                    c2:3a:2e:74:11:b5:65:18:01:d7:d4:53:28:cb:3d:
                    44:c3:55:fb:c1:89:d1:02:d4:dd:83:69:b5:38:9e:
                    2c:a3:4c:bc:db:d5:b0:80:9a:1b:a6:e3:26:bd:af:
                    d0:69:5d:a3:84:12:90:ad:3b:63:fa:dc:22:5e:94:
                    d2:bb:5f:f7:e5:8a:e5:00:b3:f0:bb:7b:62:53:19:
                    ca:fb:d4:b3:45:ee:42:dd:ea:87:55:82:03:3a:89:
                    98:83:4f:e3:c7:32:7d:4d:6b:dc:0d:e5:08:7a:b1:
                    0f:fa:41:47:4e:90:14:d1:cf:7e:02:88:35:09:ec:
                    3d:b7:05:71:c2:18:48:46:cb:2a:7c:3a:29:78:73:
                    ec:36:4e:67:69:48:53:ff:fb:1b:11:2a:0e:92:a9:
                    02:ec:95:ce:3b:a1:13:f7:56:77:80:d6:61:00:88:
                    40:96:ac:2b:48:37:f5:7f:06:38:36:8f:d0:cd:eb:
                    c0:87:44:23:2c:c2:cf:a8:70:93:15:6c:1b:55:45:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:A8:63:67:98:4F:2F:D6:C9:DD:F8:93:34:70:DE:F6:96:2A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/e137a75e-e0bf-3df0-91cc-ef2ce429f6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:48:4c:9a:36:ee:ac:56:ab:38:7f:8c:6e:96:eb:2e:04:24:
         0d:46:dd:1b:cb:93:97:bf:3b:ea:d6:d7:00:75:50:14:2f:24:
         90:0b:62:b0:30:d8:be:bf:63:13:d4:b1:00:00:5d:b1:75:e9:
         b3:a5:cd:0c:55:be:4a:8d:46:73:fa:19:d5:cf:04:f6:1f:bf:
         41:fd:55:7d:6f:96:a4:6f:7a:9c:9d:7f:fb:92:b0:78:62:77:
         68:91:3c:75:a5:2f:c7:21:4f:e9:af:f6:36:43:76:5c:c6:6e:
         2f:54:08:b7:7b:e4:7c:e1:59:48:a3:05:6d:26:d1:44:f3:5b:
         2f:29:93:91:2e:7e:05:85:6f:9b:49:e3:ec:c8:26:9b:1e:e2:
         fb:21:ae:75:84:99:5d:2c:74:f4:61:52:fe:fb:25:ed:47:4f:
         6e:c8:21:d2:dc:e2:82:df:90:07:cc:41:fd:67:4d:70:ec:aa:
         42:a9:86:de:d3:a5:47:64:e6:e9:95:9b:7c:f5:75:55:80:a5:
         55:ce:52:60:32:f1:f4:2d:81:7d:47:5e:9e:e4:b4:3f:ce:dc:
         41:e0:ce:98:22:2a:90:62:59:58:17:16:de:67:9b:b4:05:72:
         21:a2:6c:f2:65:dd:2b:c4:17:87:74:bb:b2:fc:af:65:9a:2d:
         80:65:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:41 2026 by rpki-client