Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c860a78-e212-3990-b15d-0e50435e2423.roa
File:                     5c860a78-e212-3990-b15d-0e50435e2423.roa (raw, json)
Hash identifier:          AdKeyZ3HoKyOQO2rwvblLzY943on9ooh5qDTWUhZY9E=
Subject key identifier:   DA:51:22:7F:01:7D:7A:00:C1:E3:98:BA:75:D0:9A:1A:4E:5F:DD:C9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DCFA856AD9ABDBB43B2D63640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c860a78-e212-3990-b15d-0e50435e2423.roa
Signing time:             Tue 12 May 2026 17:13:05 +0000
ROA not before:           Tue 12 May 2026 17:13:05 +0000
ROA not after:            Mon 10 Aug 2026 17:13:05 +0000
asID:                     0
IP address blocks:        154.17.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:a8:56:ad:9a:bd:bb:43:b2:d6:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 12 17:13:05 2026 GMT
            Not After : Aug 10 17:13:05 2026 GMT
        Subject: CN=c8b0a866-5137-4035-a154-3220a42beacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:15:f1:b8:8f:86:5e:8b:81:eb:b5:29:8f:95:
                    02:9f:0b:84:93:6f:b8:91:3b:b6:c6:ad:fc:7b:b3:
                    d9:93:06:c5:16:4c:c1:cc:a6:4c:7e:b2:f5:bc:c5:
                    89:3f:f3:f8:ad:c3:73:41:a2:ba:8b:8b:f8:4c:eb:
                    ee:9e:c3:6f:08:0f:b1:38:1d:16:d0:46:15:9a:11:
                    be:99:f1:d2:65:06:b4:04:da:e0:a2:9e:55:e9:9e:
                    a7:8f:06:14:31:78:1a:75:19:14:aa:f2:8b:e9:a5:
                    a9:04:7f:cc:ec:e0:8a:5f:37:ed:0b:09:b7:9d:00:
                    b1:b6:65:ec:f0:18:a1:a4:f0:11:1d:da:5e:1c:3f:
                    69:d3:4d:9f:a1:49:bc:8c:a0:6f:2e:12:14:7a:74:
                    ae:7b:77:51:c2:20:ae:f4:49:09:d8:97:e3:6e:04:
                    7d:cd:64:79:9b:d9:4a:bb:14:bf:16:1d:a1:67:a8:
                    3e:e9:f3:d3:dc:38:21:fa:83:97:f8:7a:51:e1:e2:
                    ab:a4:f3:e3:06:8b:96:e7:ef:2a:34:77:f5:c4:71:
                    63:25:55:82:3f:e7:84:a3:b6:b0:e8:3e:c8:de:3d:
                    6a:d9:70:eb:e7:71:7b:a3:8b:ec:61:2a:db:3c:b3:
                    88:dd:9e:01:10:59:ba:02:7b:3f:56:65:04:e7:28:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:51:22:7F:01:7D:7A:00:C1:E3:98:BA:75:D0:9A:1A:4E:5F:DD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c860a78-e212-3990-b15d-0e50435e2423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.17.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:8f:ab:08:38:7b:6d:7e:c2:79:29:e4:bd:ed:ff:e5:72:
         cf:52:8a:cb:30:f8:0f:e1:42:1c:b8:14:15:86:99:9e:0d:1f:
         84:9d:4e:f0:ef:4b:56:0b:51:c3:d3:5f:b6:da:93:e3:12:2d:
         e3:ba:15:03:af:21:36:b8:e9:d4:27:8b:8b:7e:7c:af:86:bc:
         55:83:e8:2b:e4:3a:08:e9:a9:69:9b:c6:13:2d:42:7d:67:37:
         c2:2c:40:66:62:22:1f:72:df:b2:b4:a4:e4:be:30:c8:b9:93:
         7f:aa:e1:72:d9:b2:f5:20:8a:56:5c:55:4d:0b:0e:1c:c6:53:
         8d:d1:39:f0:c6:79:23:f9:04:09:fc:38:1c:b1:ef:50:7e:83:
         06:54:3a:ca:24:35:81:68:d2:07:71:cf:c1:26:2a:a5:5b:5a:
         74:d1:11:eb:f3:25:52:36:e3:84:98:e0:5a:2a:0c:64:f0:43:
         04:c5:eb:a5:b9:b5:5a:14:0b:8d:d6:4b:bc:24:8f:72:76:66:
         e1:08:d8:de:fd:95:1d:11:f1:aa:29:a3:17:49:48:0c:a4:45:
         ec:d0:fa:0a:36:e0:a9:21:ef:5c:59:58:8d:5c:f0:59:7a:17:
         37:d1:77:b5:01:1f:6c:3b:7b:ce:3a:dd:2b:4b:bb:26:53:01:
         27:bb:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:24 2026 by rpki-client