Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c4c1f54b-0164-33fa-be80-c5e79da03241.roa
File:                     c4c1f54b-0164-33fa-be80-c5e79da03241.roa (raw, json)
Hash identifier:          190LvKu8eD/A86y/QxoUPJzguPkrQ1nmfuyLUtE0Qo4=
Subject key identifier:   4C:BF:95:F1:AD:65:91:8B:40:40:72:05:56:B7:5E:EC:64:E6:07:35
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DC4004FAE4C2FF87C8B26A700
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c4c1f54b-0164-33fa-be80-c5e79da03241.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     40411
IP address blocks:        204.195.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:4f:ae:4c:2f:f8:7c:8b:26:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=b8ed163c-4069-45c3-8918-53b2e5dbb2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:dc:a0:eb:b7:25:f7:9f:3e:76:0c:a8:96:
                    5b:22:5d:c4:5a:fb:69:1c:29:44:1b:51:b2:dd:b0:
                    c9:8d:1f:36:dd:48:42:cf:d0:fb:d1:35:af:e8:9a:
                    c1:67:e9:79:52:93:43:2b:ea:42:23:48:ce:49:fe:
                    57:dc:ad:ea:b5:6b:54:f3:1e:53:d2:c3:ac:53:9b:
                    82:22:f2:90:1d:0c:7e:2c:dc:a3:da:29:43:17:e9:
                    0d:c4:fa:44:a6:ac:ab:20:7c:98:b3:b5:a4:0f:69:
                    31:ac:89:25:ec:e8:8b:de:bd:4b:41:34:f8:1e:52:
                    7d:75:de:80:ce:51:99:dc:58:9c:45:3a:48:3b:18:
                    53:31:b6:3e:b3:e5:94:e7:a7:44:d5:67:74:10:de:
                    d3:e3:da:3c:c0:d1:95:1f:1e:a9:eb:2b:3f:a2:47:
                    a9:cc:9c:bc:fa:40:0a:ec:d2:3a:06:7b:b4:1b:30:
                    9a:58:b0:ff:0f:2a:68:99:8c:1d:e6:cb:5d:24:e6:
                    cb:a9:1d:6a:fc:92:18:b5:48:f4:41:46:4c:d8:5f:
                    bb:da:33:73:47:2f:d7:4e:11:ee:d5:25:49:10:48:
                    de:b7:6a:6d:58:8d:01:33:19:e4:e6:1f:00:2b:6f:
                    8a:f8:54:e1:c1:37:f4:97:3d:09:05:85:67:55:bb:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BF:95:F1:AD:65:91:8B:40:40:72:05:56:B7:5E:EC:64:E6:07:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c4c1f54b-0164-33fa-be80-c5e79da03241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:7e:e0:d2:aa:79:7c:65:2a:9b:25:8c:7e:b6:c3:87:44:
         ea:f1:fc:25:71:cf:c7:31:06:d7:3a:31:86:de:cd:f6:4e:b5:
         32:9a:5c:f8:e0:1a:88:f9:2c:45:17:ca:01:61:2b:83:48:b4:
         14:14:51:10:6a:ea:a0:f7:48:42:b7:29:5d:bb:c0:c6:29:26:
         2b:94:83:ae:0f:26:92:8d:b5:13:6c:e6:d3:74:47:5f:94:a0:
         1e:e5:90:d4:78:eb:f2:ea:0b:0a:6c:b3:d6:46:9d:6f:e7:3f:
         ff:a3:27:b6:e0:b5:3a:da:53:5b:77:85:bc:cc:dd:f1:66:70:
         45:d3:30:ad:f3:b0:d7:68:61:eb:96:a6:f4:1b:d5:d6:8d:8f:
         7f:8c:e6:11:9c:b3:0b:a3:31:15:f8:46:d4:1b:e5:af:b9:2a:
         25:63:46:24:ca:0d:19:28:79:1a:7e:fd:e7:fa:90:dd:28:71:
         c3:c7:45:76:bd:94:e0:60:cb:8a:bd:13:3d:2f:8c:1c:84:38:
         a4:90:83:82:fb:5c:8c:a2:8a:72:36:5b:55:e7:63:fe:36:d3:
         8c:7d:f9:c8:b4:2b:07:b1:63:6b:aa:d7:57:7a:fa:f5:73:c7:
         a8:b1:33:9d:0f:71:e5:81:b5:12:c4:c0:3d:b9:f0:94:16:48:
         59:74:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:14 2026 by rpki-client