Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa
File:                     e5e6aa31-b14a-31f9-a13b-828a710daada.roa (raw, json)
Hash identifier:          EQuFUcTsa280b9wzrO/Jhjdpm6P1GyyplT/tR9tH5Og=
Subject key identifier:   6F:F9:26:BC:B0:B7:71:07:DD:FB:71:2B:D1:98:EB:5E:D7:6F:1D:71
Certificate issuer:       /CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d
Certificate serial:       010D0C9F4328584DC135B106B399DFD8E31C4DA0
Authority key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     0
IP address blocks:        192.195.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:b1:06:b3:99:df:d8:e3:1c:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=8bd45334-0a39-4d31-b83e-6ac3887c0d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:c0:95:75:77:b7:46:07:21:bf:51:b3:b6:
                    55:d4:13:72:25:af:37:f6:28:c5:43:7f:1b:ee:e4:
                    ec:c7:6a:7c:f3:8d:ab:59:3a:87:ba:5d:7a:03:f3:
                    5f:41:c5:d9:ec:30:06:97:de:84:5f:3a:cc:1c:d1:
                    04:f7:0d:fe:34:0b:d9:7c:c7:83:17:e5:36:09:35:
                    1c:d2:31:eb:7b:60:a5:3c:04:f9:55:22:17:76:6b:
                    bd:0a:79:17:c0:65:2b:a4:52:87:14:5d:29:ad:7b:
                    59:ce:ed:21:7f:02:09:f2:cc:4f:43:57:89:7f:a5:
                    27:13:33:42:ae:fb:a3:df:3e:7b:d7:98:81:b6:4b:
                    88:bb:32:42:0d:d5:03:f3:ac:42:0f:d7:fd:e7:45:
                    ae:12:9e:47:d5:c2:71:16:14:b8:33:3a:21:7d:89:
                    0b:f1:45:f2:4a:ef:15:01:bc:cf:d8:45:d5:17:5c:
                    23:58:7d:8c:8e:cc:da:c3:3c:b8:26:78:77:06:ed:
                    80:68:c9:a0:73:3f:41:80:6f:e2:83:5a:9d:f9:34:
                    96:95:08:61:42:a9:53:e7:31:20:5d:e7:34:42:6b:
                    78:88:44:d8:b6:4f:2d:8e:ca:6c:01:81:b0:60:7d:
                    d3:bd:d2:c2:83:2b:70:c0:19:ec:f2:0d:4b:28:9a:
                    64:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F9:26:BC:B0:B7:71:07:DD:FB:71:2B:D1:98:EB:5E:D7:6F:1D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl

            X509v3 Authority Key Identifier:
                keyid:71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:34:65:e7:d5:b9:42:d2:2b:1c:28:bf:16:f3:e0:de:35:
         a9:11:79:96:83:81:65:28:36:01:e8:36:3d:98:88:93:9e:78:
         fc:7b:c2:0c:0c:63:89:ad:cd:fe:33:41:45:08:5b:9c:e5:8a:
         23:35:52:2a:a8:16:ec:5e:f4:5e:17:d4:a9:a4:a5:01:7f:ed:
         f2:40:12:d5:c8:d5:6f:22:24:15:a3:81:1e:82:4f:19:61:6f:
         e0:8a:ba:38:f7:36:f0:b6:c9:74:59:29:28:66:44:d3:1d:29:
         0a:ed:be:a3:bf:2c:49:5e:cb:a6:80:76:ea:97:4f:5c:d4:55:
         61:a6:e6:da:0f:4e:48:1d:f9:17:bd:dc:88:74:f3:28:55:ba:
         a0:58:ab:b3:c1:df:95:c2:93:1f:aa:35:de:aa:70:2d:5f:18:
         08:f5:14:bc:5f:5a:35:e7:eb:ed:df:0e:7d:29:40:31:a4:14:
         c4:95:79:e7:03:76:78:f2:61:93:b1:eb:b4:5b:4f:3c:c2:e6:
         60:35:8b:a2:67:37:3b:f6:ab:47:81:94:b8:7c:03:3d:bc:4c:
         f9:73:9f:9c:d6:47:ef:f0:08:26:74:66:df:07:22:90:6c:4d:
         76:7c:95:23:44:d3:ed:1b:75:b5:47:a6:ba:ff:0d:22:8a:b1:
         04:b7:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:04 2026 by rpki-client