Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/690736af-dc4f-39b4-bab0-e96be3281ec9.roa
File:                     690736af-dc4f-39b4-bab0-e96be3281ec9.roa (raw, json)
Hash identifier:          +HF5lj32+R2q7ARcmfF21dWrMvweS4qDVTy/P01dQNA=
Subject key identifier:   12:04:92:C6:98:13:31:A6:DF:AB:B8:2B:1A:DD:73:CF:CD:F8:31:B5
Certificate issuer:       /CN=46e29740-0c80-4bd4-9623-90d73a3fa618
Certificate serial:       010D0C9F4328584DCF2B01D153BB5360527BFF00
Authority key identifier: C0:5E:34:43:61:80:08:8E:A8:73:FC:BD:F0:83:F8:86:54:12:2A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/690736af-dc4f-39b4-bab0-e96be3281ec9.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     198949
IP address blocks:        129.95.0.0/16 maxlen: 24
                          137.53.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/46e29740-0c80-4bd4-9623-90d73a3fa618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/46e29740-0c80-4bd4-9623-90d73a3fa618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:01:d1:53:bb:53:60:52:7b:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46e29740-0c80-4bd4-9623-90d73a3fa618
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=a50ae088-0f21-4d41-9af0-a1cc435be5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ac:0a:55:66:6b:93:f4:6d:02:be:79:ed:32:
                    28:da:d0:a6:66:7e:d4:93:c6:00:3e:d4:6f:54:bf:
                    b9:3f:b7:ed:14:c5:25:60:dc:c6:6e:cb:20:f1:d8:
                    2b:9b:8b:d3:fb:f7:cc:17:a9:4e:fe:9a:6f:80:54:
                    5e:44:2a:c5:33:7e:fb:7f:0a:58:6e:9f:bc:25:cf:
                    bf:b1:8a:e6:75:ae:ee:ec:f8:f2:80:6e:48:3a:03:
                    1e:11:8b:d5:46:de:d3:f0:f5:99:5c:6a:74:63:9e:
                    56:c1:77:fc:e8:1a:63:71:da:3f:75:eb:13:8f:11:
                    5e:96:18:b0:f6:c7:3a:bc:4d:a1:9e:4d:cd:25:9b:
                    5f:c5:6a:2c:a0:d5:f6:8c:c5:aa:56:6a:9a:e6:1d:
                    1d:33:7f:72:fc:e8:43:e4:ee:a9:f8:c8:30:d6:6e:
                    68:f7:f5:7c:25:af:d1:6b:53:98:cf:75:b5:61:6b:
                    64:19:07:91:5d:93:a5:f4:68:7c:10:40:d0:bf:c8:
                    11:41:5f:f4:14:c6:4e:ae:f9:22:77:c3:ed:9c:1c:
                    d0:12:f7:89:24:61:28:b1:fd:26:b7:dc:6f:46:b4:
                    dd:88:f1:45:80:f9:a4:14:06:3e:78:34:9d:06:d1:
                    e4:83:9e:8e:86:68:ea:2f:3f:09:00:27:17:52:23:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:92:C6:98:13:31:A6:DF:AB:B8:2B:1A:DD:73:CF:CD:F8:31:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/690736af-dc4f-39b4-bab0-e96be3281ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/46e29740-0c80-4bd4-9623-90d73a3fa618.crl

            X509v3 Authority Key Identifier:
                keyid:C0:5E:34:43:61:80:08:8E:A8:73:FC:BD:F0:83:F8:86:54:12:2A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.95.0.0/16
                  137.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:36:07:99:23:8c:fa:db:da:61:c6:44:60:ca:c7:c0:f9:
         7e:f1:9b:52:b8:26:da:18:47:8c:ce:ed:8d:ee:c6:27:5c:2f:
         60:a1:28:ad:3c:6f:17:4c:84:6d:d8:77:26:a3:ef:6e:51:ca:
         a2:bf:ce:21:4f:38:d6:36:26:bd:db:77:af:40:4c:18:30:54:
         59:fc:64:bc:9c:e3:1a:08:65:22:3b:b6:bc:93:c6:65:6b:6a:
         6d:55:94:f8:00:36:09:f4:8c:08:85:fb:4c:c7:e1:c7:57:62:
         0f:f7:a0:95:1b:13:88:c7:85:49:af:8b:ea:5b:95:db:cf:ba:
         9b:f9:64:64:71:12:c3:45:70:2d:f4:4d:77:bb:a4:36:a5:1a:
         f0:fe:64:d9:8a:29:7d:6c:b4:60:f4:4d:95:b9:d9:f4:b1:86:
         ef:b3:1c:1f:2d:bb:9d:16:f7:c8:3b:cf:5f:a3:04:11:11:ce:
         81:7d:c1:54:a2:5a:55:5f:4a:0d:24:12:8e:61:62:25:69:11:
         6e:f2:be:49:ea:15:1c:7f:26:cf:a9:e5:07:64:fa:b9:3f:7b:
         b0:9f:ce:f0:5a:c7:95:ba:94:ee:20:98:12:ad:b8:14:06:8a:
         77:f2:45:f5:31:33:0b:b6:02:8c:f2:77:c9:a1:6d:28:93:6c:
         80:43:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:30 2026 by rpki-client