Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
File:                     f15a33ca-7a2d-307f-98ec-5856967563b3.roa (raw, json)
Hash identifier:          cDAfCEk+5ehijNbtzbKDjjX92WvRpcIPBkYJYd4t5yo=
Subject key identifier:   67:31:D0:CA:05:F7:22:B5:29:4A:D4:97:1B:0F:2D:A6:B5:8A:8B:AE
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584D8EF582102B9E8F7A096E8FB0
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     54574
IP address blocks:        65.49.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:82:10:2b:9e:8f:7a:09:6e:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=4da0c664-4cfd-49c1-a566-02976674ceee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:71:60:84:7a:35:eb:85:c5:8c:3c:9d:13:
                    96:eb:51:c4:c2:94:21:10:aa:fa:0d:ff:ef:a9:f3:
                    9e:19:0b:82:02:3c:79:15:12:9f:1d:46:14:ce:81:
                    d0:45:e9:35:ce:a1:e2:20:bb:76:3d:80:0f:a5:c0:
                    ee:0d:3f:db:3d:c3:0d:b1:ce:cb:72:4c:c1:4b:0d:
                    41:ff:5f:72:9a:c4:67:33:b4:46:86:a4:f6:c3:5e:
                    d3:c4:07:d2:f4:f8:32:e8:38:91:46:63:c9:ce:89:
                    09:17:01:68:40:28:3e:8f:eb:cb:ff:cc:53:e5:af:
                    a7:71:7f:c6:3a:26:14:92:97:7d:b7:8b:35:e7:e9:
                    9d:af:8f:5b:2e:44:ef:c9:52:f4:a0:b5:61:49:58:
                    2d:95:75:f9:2d:7c:f1:ec:eb:40:d9:4e:9a:9f:61:
                    22:28:5c:f4:1f:b0:36:cf:33:4b:e1:c8:67:67:6f:
                    38:b9:85:22:30:62:fb:be:19:03:e6:11:45:bd:f7:
                    59:88:b6:b8:15:7e:d8:25:4b:8d:d7:0a:b1:d4:f5:
                    c9:e0:8d:b9:53:60:91:a1:e5:2a:53:a1:25:2f:57:
                    10:fe:c2:57:e4:fe:a1:66:e5:32:70:35:93:35:6f:
                    03:70:d3:8b:2b:86:ef:9a:02:a0:57:01:78:2f:40:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:D0:CA:05:F7:22:B5:29:4A:D4:97:1B:0F:2D:A6:B5:8A:8B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/f15a33ca-7a2d-307f-98ec-5856967563b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:28:69:69:1c:38:1e:41:b5:8c:17:94:2a:13:c4:c6:f8:9c:
         a5:1d:e5:c4:87:d2:e9:fc:48:33:4b:a1:d8:30:ef:c5:fd:6e:
         80:59:33:2a:20:04:e7:5b:7f:62:c7:ed:70:58:74:9f:43:31:
         05:9a:33:06:dd:cb:4e:a4:e3:55:70:ab:4a:15:61:9e:54:5b:
         e8:0f:b2:f3:66:b3:c2:bf:42:2b:cd:9f:02:d9:18:64:b4:04:
         a0:65:af:52:fa:63:89:3c:bc:b6:60:2b:db:ba:8a:04:c1:14:
         c1:ce:e7:c0:96:c5:a6:d1:19:45:73:bf:7a:08:4e:e4:63:64:
         83:82:f7:98:4b:a6:ea:83:8a:21:c4:2e:80:67:b2:db:13:7f:
         ad:92:7e:bc:99:ea:45:f6:2d:c4:00:0f:6f:0c:49:e1:05:73:
         ce:46:41:af:3f:7a:6e:10:f9:0d:bd:2e:61:f6:1e:9f:f7:80:
         78:ab:0e:38:64:4e:5a:97:12:9a:32:e5:87:38:86:63:71:68:
         df:21:76:ca:e0:f2:9c:e4:0b:70:5f:88:03:67:4b:09:58:79:
         ec:89:b0:06:69:43:42:50:c4:d4:0b:7a:8c:b2:f5:9c:0d:dc:
         6f:78:0c:c2:e8:e7:b7:d7:01:5d:fa:89:0c:20:37:01:af:24:
         5e:c5:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:09 2026 by rpki-client