Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/e5243efb-e03b-3d00-b86b-6208d15b0295.roa
File:                     e5243efb-e03b-3d00-b86b-6208d15b0295.roa (raw, json)
Hash identifier:          qHGku9zpIUoe2A7nNAFOfrlt1YdMhHOfm82FaGf9d3c=
Subject key identifier:   E4:C2:5F:B7:CF:FD:A9:18:12:A3:5F:24:1B:12:35:8D:E4:A3:82:58
Certificate issuer:       /CN=4884cca8-e13a-4d48-82af-7839862b6341
Certificate serial:       010D0C9F4328584DC29AEF64C990CD7E2E7D9BE0
Authority key identifier: 5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/e5243efb-e03b-3d00-b86b-6208d15b0295.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        192.68.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ef:64:c9:90:cd:7e:2e:7d:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4884cca8-e13a-4d48-82af-7839862b6341
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=5bbb7e4d-c3de-4e7d-b625-422772c14b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:61:a5:b9:2f:61:09:ba:bf:47:9e:7a:4f:
                    ff:6c:c3:0c:e4:ab:a7:5f:e2:d5:28:92:51:13:02:
                    3a:17:d1:4d:78:bc:63:51:fe:6c:96:d0:47:13:5f:
                    da:c8:2a:93:17:00:04:03:42:ab:dd:cf:c9:dc:bb:
                    12:76:51:02:34:32:74:8c:71:d5:71:e4:f1:fd:96:
                    8b:97:66:8d:ad:ae:48:3c:b1:fb:da:e5:4a:4a:94:
                    cb:bb:28:43:d0:a0:6c:ac:56:a4:c5:c7:69:6b:a7:
                    32:d0:a5:d5:5b:03:ab:50:79:da:c8:da:d7:22:79:
                    9b:5b:c2:2e:6c:f0:52:24:16:ce:63:7f:f1:c5:98:
                    51:6b:1c:30:65:b9:80:25:11:55:1b:7e:7e:e5:3d:
                    7a:cf:04:64:8c:f4:7a:a9:9a:00:36:8c:f1:10:38:
                    de:12:6a:a5:0e:b4:05:86:6e:4d:4a:c6:2d:62:83:
                    59:fb:f1:dc:29:ed:15:89:9a:d1:4f:29:29:3d:f0:
                    05:fe:21:5e:c1:f3:36:da:80:5d:33:61:ae:d1:00:
                    4a:93:eb:70:be:21:d5:ca:16:78:70:c4:76:e8:cd:
                    6e:71:cb:aa:61:4e:df:66:ee:69:6a:d3:b7:0f:13:
                    c8:11:57:84:c4:cb:a4:de:4b:ad:9c:2b:ca:1a:a6:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:5F:B7:CF:FD:A9:18:12:A3:5F:24:1B:12:35:8D:E4:A3:82:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/e5243efb-e03b-3d00-b86b-6208d15b0295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:64:43:05:2c:99:22:51:1c:29:d8:f8:ad:1f:a5:bc:01:
         ac:e3:31:50:9f:96:38:88:af:a5:bf:26:14:63:76:e6:66:be:
         59:cd:bf:08:09:cd:e4:be:df:3d:a2:5b:ee:11:51:70:c8:b2:
         5e:cb:3a:d7:21:d7:02:77:f2:ed:ad:3f:b3:8d:64:85:6d:40:
         7b:f8:59:30:76:2b:93:5c:9a:bb:69:c0:f8:66:08:a7:dc:f5:
         bd:50:15:2e:31:a4:92:35:6e:da:b0:73:d6:3f:4b:9e:04:44:
         83:1e:d5:12:f9:66:ce:59:7a:23:a2:1e:30:0a:a2:3d:cf:6e:
         f1:45:09:7f:56:36:93:ef:94:c7:87:39:7b:85:4a:41:66:17:
         f9:98:ac:32:99:0d:93:1c:e5:d9:6b:d5:74:fe:39:53:7c:97:
         6e:e0:b4:91:5b:f2:14:dd:2e:0c:59:bc:73:be:c7:f1:fc:c7:
         e1:8c:75:a2:49:1d:84:2c:1b:fc:76:7e:e3:ba:95:ec:36:be:
         c6:b1:53:ef:66:f3:de:1d:4f:82:78:9c:7c:55:a5:aa:42:f8:
         5a:88:95:a2:e5:11:af:89:75:17:2a:5b:04:8f:1d:d3:79:cf:
         aa:22:66:cd:61:ad:28:ff:7c:2d:36:db:f0:24:46:e9:cf:ca:
         39:8f:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:15:50 2026 by rpki-client