Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa
File:                     eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa (raw, json)
Hash identifier:          ETwUpdyVmQjRegk/DRIQtoqrAmxSK+z2BCi3ScC15GU=
Subject key identifier:   40:90:3E:D9:77:A3:1B:E4:F5:57:1A:93:83:C0:01:DC:95:69:70:81
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584DAF102C1873E9519BACBD5580
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     32983
IP address blocks:        152.55.144.0/21 maxlen: 24
                          198.29.20.0/22 maxlen: 24
                          2602:f9e7:2e::/47 maxlen: 48
                          2602:f9e7:38::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2c:18:73:e9:51:9b:ac:bd:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=8b0461ec-9240-4a7a-9a92-db209e9e8f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:da:d5:c1:54:e3:ed:bf:7c:27:ad:e2:a1:
                    a4:3e:de:44:ec:80:a1:35:99:76:0f:44:d3:9b:14:
                    92:7b:64:73:df:ef:aa:cc:e7:2a:71:36:8e:9c:de:
                    f2:b9:b9:fb:14:4d:2b:d4:b4:bf:bf:5b:d3:22:35:
                    63:3c:8a:d9:45:ba:fb:26:11:5d:e1:f6:e9:df:24:
                    cf:3b:59:4b:94:44:2a:51:3e:7d:d5:d9:28:d9:80:
                    94:52:9c:fe:34:bf:97:91:06:c1:c0:64:99:9a:60:
                    60:c8:a9:93:3d:38:1c:84:63:01:b6:9f:cb:25:dd:
                    5e:de:69:bf:70:a3:79:23:d0:1b:22:ce:49:b0:8c:
                    b3:d8:81:8b:28:0d:7f:a6:16:e1:56:72:8c:f5:a8:
                    dd:29:29:4f:a1:4d:86:d4:c3:56:87:6a:18:93:e7:
                    02:82:24:7e:fa:96:7e:aa:71:21:bf:e6:88:ab:8b:
                    db:32:67:fa:84:e9:97:9b:f5:5c:d6:93:d8:22:eb:
                    ae:f4:ae:96:80:51:3b:2a:65:ee:86:a9:95:bc:e0:
                    1b:b1:c7:43:4f:39:ed:fa:84:a8:1e:cc:eb:e2:e4:
                    b8:48:12:4e:a0:a9:37:2b:88:9c:83:eb:cb:7b:a6:
                    82:1b:e9:51:1d:90:d1:6c:9e:fe:53:05:ed:ca:d1:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:90:3E:D9:77:A3:1B:E4:F5:57:1A:93:83:C0:01:DC:95:69:70:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/eac23a77-4cd9-3842-a74f-1f07fb0b8625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.144.0/21
                  198.29.20.0/22
                IPv6:
                  2602:f9e7:2e::/47
                  2602:f9e7:38::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:35:51:14:54:d3:3d:11:08:44:c8:80:2d:c6:07:bb:f2:b6:
         5a:df:46:11:bd:40:a7:24:de:94:01:f2:5d:37:ae:cd:20:38:
         ca:f0:48:2f:01:ea:01:48:69:6e:52:39:e5:c6:a3:74:97:06:
         00:2b:67:23:c9:e7:91:61:e8:15:41:86:b3:02:6d:5c:10:2a:
         6b:30:5d:03:34:34:31:75:d8:bb:34:f2:3f:2f:9f:8f:73:30:
         24:2c:8b:ec:92:67:c8:70:17:0d:c8:1f:c9:f9:53:d2:f4:dd:
         05:a0:19:d7:79:f6:c8:bb:b4:c2:c6:34:14:30:95:53:96:d1:
         c7:e8:88:14:5f:3b:89:41:12:99:8a:43:f8:7e:66:e2:af:29:
         53:a9:bb:7d:36:a5:df:f9:c2:58:fd:e4:6c:17:1d:4e:93:f5:
         7d:fa:3a:bb:7d:88:57:fe:47:f1:63:4d:92:55:62:21:38:ad:
         56:8c:06:91:8f:05:80:02:57:7e:ae:b0:9a:fa:8d:39:8f:a7:
         61:0e:65:b8:b5:a4:a2:84:a4:a0:32:95:6b:d0:87:e0:f1:62:
         b1:9a:92:f6:b6:79:a4:3c:99:bc:0f:0e:e0:77:9a:ac:f5:e8:
         35:c1:55:f3:b2:b6:a5:5a:4f:dd:b4:80:3a:2c:b9:7a:71:86:
         c7:a9:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:57 2026 by rpki-client