Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/22406bce-d6a3-30e1-891e-d104b9b3955e.roa
File:                     22406bce-d6a3-30e1-891e-d104b9b3955e.roa (raw, json)
Hash identifier:          hLgPimv655V+KUXKYrzT4icymmx3Dryt/fbjXuyUcQk=
Subject key identifier:   E9:29:AD:1A:11:E6:BE:9B:6F:DE:08:F1:1A:C3:0C:C8:AE:A0:46:03
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584DB0758ED7CCC733F080764D28
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/22406bce-d6a3-30e1-891e-d104b9b3955e.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     4543
IP address blocks:        170.149.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8e:d7:cc:c7:33:f0:80:76:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=7d011a3d-2d3b-4354-8b54-ada561c8dab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:0e:c6:b6:66:a9:3d:ae:38:53:28:3a:1a:
                    08:a6:cf:29:f2:21:25:41:21:a2:eb:ba:0f:b4:1d:
                    ca:69:96:3c:80:39:85:7f:f7:e7:12:c6:3e:67:27:
                    0f:dc:a1:cc:45:18:74:ed:ab:16:e1:c9:fd:3c:a5:
                    81:fa:3f:d6:d5:cb:85:3e:d6:aa:56:0e:dd:a6:a5:
                    3f:4a:10:e9:f8:cd:81:7e:5e:61:85:d6:5e:40:45:
                    23:dd:9f:47:90:52:9e:be:5a:bd:61:07:da:73:a7:
                    06:12:b5:23:28:09:b0:2c:ad:3a:a5:fc:fa:d3:5c:
                    bc:99:be:84:53:fe:3e:44:e6:06:8a:f9:f5:30:3c:
                    c9:14:1b:4e:35:67:d1:ec:99:d2:3d:bc:2b:36:5f:
                    ba:e1:cb:1e:42:4a:03:d2:b4:fe:c3:90:cf:5b:24:
                    e0:dc:1b:b3:f6:0f:da:dd:bf:87:9f:44:61:64:e1:
                    ce:d8:ac:69:32:a3:da:04:c2:c6:1c:04:d3:fb:9a:
                    9c:4a:fe:ae:46:33:81:97:1d:25:4e:7d:32:8c:2a:
                    b9:e9:d0:98:60:d7:bf:dc:a0:af:f4:26:da:93:c4:
                    cf:15:2a:ac:99:7d:40:53:f2:36:b9:57:bc:54:0f:
                    00:70:6c:4c:7c:ad:aa:09:a7:fa:24:48:e3:58:68:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:29:AD:1A:11:E6:BE:9B:6F:DE:08:F1:1A:C3:0C:C8:AE:A0:46:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/22406bce-d6a3-30e1-891e-d104b9b3955e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:31:6c:a2:24:62:e4:3f:98:96:09:b3:4d:fc:5f:0a:c5:
         d1:92:ff:a7:1f:be:56:63:87:10:b0:e5:7e:76:92:dc:29:0f:
         3a:b6:92:c2:32:84:ba:3d:ce:11:ec:97:51:51:a0:1f:95:62:
         03:f4:9d:b8:63:c8:39:0b:f8:b8:1d:dd:fd:c4:c0:52:8c:b7:
         a7:2f:e3:f6:aa:8d:22:e2:86:5a:2d:6b:7e:a2:e6:c1:bd:d5:
         ec:73:8f:a4:cd:79:4e:53:bf:f4:99:de:c3:5c:06:ad:49:78:
         ac:f2:d2:b5:d7:66:e8:2d:ca:a1:2d:3f:dd:79:21:f7:3e:25:
         21:38:82:d6:73:e6:09:4c:1b:19:bb:f3:83:1a:d2:e6:c9:38:
         eb:c4:f8:35:79:6a:3a:18:ba:9c:5f:aa:ad:52:3a:17:78:b2:
         07:4c:38:71:ff:c2:3c:48:1d:a4:41:21:01:dd:62:69:11:cf:
         8d:8a:74:76:d3:6d:10:8e:7d:39:2a:46:e7:37:92:4f:de:d5:
         eb:84:00:2a:f3:80:76:60:d5:3e:f1:3f:4b:a2:f5:cf:a3:32:
         a2:9a:58:20:48:16:ae:2e:b1:c5:0d:93:ad:2f:f7:9a:56:f4:
         5b:d3:05:57:4f:69:1e:c1:6a:ed:0e:03:43:6a:b0:39:f7:63:
         35:34:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:05 2026 by rpki-client