Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c81e1806-34de-39d5-ba19-4254b0134177.roa
File:                     c81e1806-34de-39d5-ba19-4254b0134177.roa (raw, json)
Hash identifier:          2izICLbdEhCEVZh/ScAhIUS4tbwI/x+Yc3LW4ZA4wbo=
Subject key identifier:   58:F2:7D:94:C8:92:FC:C9:18:BF:99:44:E3:46:B7:3D:05:33:AA:31
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584D422F868A2015C19549CFEF00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c81e1806-34de-39d5-ba19-4254b0134177.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     54113
IP address blocks:        157.52.67.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:86:8a:20:15:c1:95:49:cf:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=a38270dd-32b3-47cb-bcbe-a86d43dbff46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:a0:e1:32:d4:8c:24:8d:06:4c:9c:42:98:
                    0b:66:8c:86:07:29:f4:37:59:2b:6d:c1:41:2c:17:
                    07:7e:da:0c:a6:17:f3:f0:22:3b:1f:c8:dc:6c:62:
                    29:9d:e6:54:3a:aa:d2:89:20:62:2e:42:07:20:e0:
                    e7:5c:42:98:44:0c:26:9d:27:4e:01:40:37:e1:15:
                    e5:ad:73:b6:4f:a5:d5:e5:d9:df:53:67:a2:15:00:
                    ca:06:46:ad:cb:10:ce:57:02:7e:c0:a4:d7:1d:e7:
                    31:3a:e4:9e:ca:40:a2:dc:60:ba:cd:7e:bc:7a:ce:
                    d5:10:1d:76:12:c7:dd:09:67:19:de:a9:a2:1a:e1:
                    2b:d6:43:18:d0:d7:92:2d:5b:4b:39:d9:64:e1:00:
                    8a:bd:c5:8e:cb:b2:cd:ce:aa:99:e9:43:d1:58:88:
                    ac:67:01:56:90:29:07:6c:90:66:2a:19:c1:d5:9d:
                    6e:3f:aa:1b:04:b8:37:18:3f:23:5f:b6:a5:f5:1e:
                    6d:bb:f4:7b:f5:c0:6c:57:b0:5d:fe:7d:79:8f:46:
                    57:b1:06:8e:1c:4c:16:3a:83:1c:50:b3:72:5c:4f:
                    b9:1a:46:d5:4b:b3:d0:14:a3:59:f2:82:42:b8:5c:
                    d6:ba:28:ad:03:ec:85:08:54:af:b9:47:99:49:35:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:7D:94:C8:92:FC:C9:18:BF:99:44:E3:46:B7:3D:05:33:AA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c81e1806-34de-39d5-ba19-4254b0134177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.67.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:6e:78:86:4c:50:13:d9:a1:80:02:01:be:1e:67:b4:64:0b:
         7c:0a:00:7c:55:43:d7:88:68:ff:08:2b:40:fe:f7:48:f6:b8:
         db:9b:cb:f3:ea:7a:53:42:9b:c4:f7:cd:4c:ac:88:16:9f:7f:
         e0:92:64:95:99:f3:a2:68:20:1c:12:bd:e8:5c:3f:17:28:6d:
         2d:e7:52:c0:c7:cd:09:46:99:3f:ee:d4:7b:c7:73:0d:37:cf:
         f4:ed:b5:c6:08:40:e8:54:bc:c1:2b:0b:ee:4b:66:eb:ef:e4:
         b9:11:ec:5f:92:62:0b:b3:6e:e6:4b:cb:a7:37:4e:ac:e7:ba:
         e4:7d:e3:9c:71:2c:10:ef:cc:94:75:25:82:cc:48:ac:0d:2f:
         2c:d8:27:4b:57:b7:b5:99:b2:df:25:bb:ae:25:ba:f4:41:20:
         6a:61:03:c2:b9:47:ab:c0:70:16:48:87:41:fa:f2:13:5b:fa:
         eb:dd:3c:84:41:27:58:53:e9:a8:7c:01:0c:fc:b8:28:ad:54:
         4f:ac:5e:a8:01:c7:6f:06:d3:40:bd:a6:9d:35:9b:27:73:7d:
         fd:41:5f:4f:09:2f:3b:ba:74:5e:1c:ad:0a:cd:72:4a:4f:62:
         5c:58:f3:70:32:62:1c:73:5c:60:70:b7:d9:81:fe:fd:ca:4e:
         f9:15:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:49 2026 by rpki-client