Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6452fc1c-0c2d-3c2a-9f83-ce85033affba.roa
File:                     6452fc1c-0c2d-3c2a-9f83-ce85033affba.roa (raw, json)
Hash identifier:          +6xHSrB/Qk7H9PM+xUabou7tm0o6AKdL55/t7/vXFj8=
Subject key identifier:   26:7C:83:F6:97:32:A2:17:71:31:20:2D:DA:A7:98:7B:FD:A6:E8:99
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D8EF9A00D3F70A231BA8AAFC0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6452fc1c-0c2d-3c2a-9f83-ce85033affba.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     54994
IP address blocks:        153.43.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:a0:0d:3f:70:a2:31:ba:8a:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=95a32bb0-7b73-4dac-83bd-3b72f70fd777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c8:93:45:41:3b:25:b0:29:00:90:06:7c:9b:
                    fc:b1:46:4c:c2:61:30:8d:06:5d:f2:62:ac:22:df:
                    21:8c:28:b9:94:81:6f:13:ec:fe:e8:5b:04:ba:0b:
                    a3:a1:98:22:db:03:f2:b7:9b:b6:71:71:aa:a7:2d:
                    bb:fd:db:af:af:e5:b0:a1:bb:26:00:d5:bb:ae:3a:
                    f6:28:52:c5:78:8e:c2:6d:53:7a:54:27:98:0b:e3:
                    e7:83:6e:85:0f:05:77:85:d1:51:23:48:33:a5:99:
                    32:83:12:55:a9:00:ad:e7:f8:c6:21:a9:18:a2:fa:
                    73:72:ac:bf:3a:e8:ba:bc:d6:8d:ec:7a:7b:6b:19:
                    88:6d:70:e1:cc:c8:b5:b4:78:11:3c:61:63:fe:91:
                    d6:f3:ce:53:77:08:11:87:a0:84:7d:85:e7:89:5b:
                    5c:ff:f6:6e:a1:1f:ae:4e:a1:f5:09:48:da:a0:00:
                    a2:de:20:8c:be:5f:6c:ff:9e:ed:a0:7e:9f:58:26:
                    35:20:bb:59:67:20:3f:6c:7c:59:2d:a1:30:e5:b4:
                    61:60:d7:f3:42:cd:e9:30:9f:a6:be:a9:3e:b2:c4:
                    71:df:52:9c:cf:ca:7c:23:1b:1d:07:d7:05:2a:51:
                    b4:2b:b7:da:cf:70:59:e5:a3:37:f2:59:04:32:c8:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:83:F6:97:32:A2:17:71:31:20:2D:DA:A7:98:7B:FD:A6:E8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6452fc1c-0c2d-3c2a-9f83-ce85033affba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4c:58:98:fb:c1:e0:ba:82:c7:b6:ab:b5:ca:54:fd:aa:f5:
         d6:84:b0:36:ad:a1:86:cd:30:26:2a:3c:c0:2e:bb:c0:45:f1:
         31:a2:fd:c1:fa:6e:0d:b4:12:ae:c9:39:77:98:9f:e2:e0:76:
         1f:e7:bc:6d:b3:5a:85:18:1c:30:ca:fe:f3:77:d5:62:f9:06:
         71:22:f9:92:e5:17:35:aa:06:fa:99:08:ec:21:e6:c3:d0:bd:
         18:cc:a3:0b:8f:ce:76:3e:0d:52:61:07:57:49:5b:ca:d6:95:
         98:b6:5c:66:01:72:c2:7a:e5:bf:6d:dd:a2:41:68:2e:eb:51:
         0e:c4:61:09:9c:2c:c5:c5:87:70:0c:03:8e:11:0b:b0:b2:02:
         89:fa:83:d2:74:5a:c4:fb:dd:f5:02:cd:9d:19:1a:52:2f:c8:
         d5:3a:d0:f1:03:88:c0:4d:8f:40:4a:b6:5f:23:40:21:00:bb:
         9c:1e:fc:9e:48:d9:41:c2:8e:75:38:21:06:d6:1e:85:29:57:
         75:47:e5:ad:d1:8c:0c:cf:39:fb:c9:ed:89:2e:d0:35:8a:a7:
         1c:bf:d3:d6:2e:89:cc:96:82:86:db:00:c7:a1:73:27:88:ae:
         32:dc:e4:e1:24:dd:30:02:47:60:bb:6c:84:35:b6:56:29:e9:
         6c:d9:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:07 2026 by rpki-client