Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
File:                     459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa (raw, json)
Hash identifier:          +HotIBBPb7mxEFgy3U8DMHreGEXbyGqZKI9N7dRFOzE=
Subject key identifier:   3E:A3:F7:7E:2B:17:B0:0D:39:55:B9:B7:E3:0D:82:AE:60:B0:7B:E1
Certificate issuer:       /CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Certificate serial:       010D0C9F4328584DBBA05485E2FC05E37F72C644
Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        204.122.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:54:85:e2:fc:05:e3:7f:72:c6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=e4c37a43-5ce9-4d26-ab5b-61543308b995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:a1:a1:a2:30:4b:f6:4c:fa:8d:8b:16:9c:
                    84:51:9a:b1:3a:c1:35:8e:c0:de:61:ef:14:4a:ee:
                    bc:55:20:db:fa:d8:88:05:a2:81:28:91:31:58:f3:
                    21:fd:b4:27:ba:85:d0:92:7f:a0:5a:f4:04:d9:fd:
                    9f:6f:7a:74:84:73:f5:f2:7e:49:c5:59:ad:49:44:
                    87:43:a7:6c:f7:0f:30:29:c3:be:24:17:34:0a:9d:
                    14:99:b4:73:31:b4:0d:f1:9d:99:16:ca:2c:2b:f8:
                    7d:ba:0a:82:de:47:72:80:98:1e:5b:29:cc:1f:d0:
                    b4:cd:bb:c9:76:fb:1b:f7:70:13:4e:b7:f5:fa:c0:
                    d9:2c:22:0c:8d:cb:f6:09:c6:57:10:7b:a9:22:3f:
                    1d:f5:fb:7c:2e:08:40:86:a7:65:34:4c:e6:8f:5a:
                    1b:d9:3b:b3:75:76:78:5c:c8:2a:f8:93:a4:14:3a:
                    7e:bb:cd:88:4a:67:db:ce:0f:7b:33:9d:b8:08:57:
                    8e:df:cd:de:e1:b5:aa:8e:5a:1b:07:86:a3:b7:14:
                    86:42:e6:7d:b8:34:c5:f7:24:4c:42:6c:1d:5f:a6:
                    b6:14:89:51:60:ff:29:b7:48:88:b9:14:9b:36:18:
                    46:a7:c7:ae:77:df:7a:45:42:c4:48:86:77:5d:e3:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:F7:7E:2B:17:B0:0D:39:55:B9:B7:E3:0D:82:AE:60:B0:7B:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl

            X509v3 Authority Key Identifier:
                keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.122.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:9c:64:e3:3a:fc:ef:63:cc:9a:32:f1:e3:f8:f8:6f:e8:88:
         b7:3b:4e:53:1a:6b:99:6f:99:16:9d:d2:82:21:d6:0d:8b:17:
         f0:7b:41:a8:5a:5e:23:a1:80:1f:bf:bd:09:44:15:86:5e:a1:
         34:9e:51:b1:08:20:7b:80:71:dc:e3:80:a8:03:f1:43:d3:e6:
         38:36:03:fd:f1:b8:53:ed:23:80:49:99:ba:1f:be:8d:93:68:
         73:23:d5:91:1e:20:de:ce:3e:40:65:d9:c2:cd:a9:aa:6d:ca:
         66:9a:e0:8d:40:fa:4f:96:23:17:a8:28:df:56:66:70:c7:3b:
         e0:ed:9e:0f:e3:f9:9f:08:9d:a0:21:00:cf:3f:3a:bc:19:31:
         95:f9:90:4a:15:f1:76:c6:9c:d7:1b:a7:0b:03:a4:d8:de:54:
         1b:ff:48:1b:3f:d8:8d:7a:25:15:bb:5b:d0:f1:72:3a:79:69:
         c7:b7:dd:4d:01:11:a7:5d:41:aa:41:8a:18:9c:e2:f3:b3:a3:
         28:1f:55:65:00:27:36:5f:0d:20:b8:19:e4:91:1f:a2:bd:a1:
         16:a5:40:e0:d1:2f:a9:c0:c0:94:7a:bb:d4:da:f9:81:c1:b7:
         5a:bb:a3:8c:0f:e7:50:ae:b7:ea:ff:d8:ac:a1:32:52:39:76:
         84:53:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:13 2026 by rpki-client