Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa
File:                     5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa (raw, json)
Hash identifier:          GUUl0e/Xz4pGK8hqpUfGIHB55X6aSfM3YBSLAjgvrLs=
Subject key identifier:   69:C8:AC:0C:59:62:2E:3A:B4:F5:B7:DD:5C:DC:34:E1:89:4E:CD:F9
Certificate issuer:       /CN=f08438f2-f343-4b2c-b0be-ac56b734d48d
Certificate serial:       010D0C9F4328584DC9ACCAC724EB907509BC1440
Authority key identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa
Signing time:             Sun 10 May 2026 13:47:12 +0000
ROA not before:           Sun 10 May 2026 13:47:12 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     17303
IP address blocks:        74.188.240.0/22 maxlen: 24
                          185.212.4.0/24 maxlen: 24
                          195.85.116.0/24 maxlen: 24
                          206.55.212.0/24 maxlen: 24
                          208.67.108.0/22 maxlen: 24
                          216.250.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:ac:ca:c7:24:eb:90:75:09:bc:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08438f2-f343-4b2c-b0be-ac56b734d48d
        Validity
            Not Before: May 10 13:47:12 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=b14ceab7-54eb-4cac-b684-1929a4323ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:b5:cd:4f:2d:c3:03:b3:c8:d9:fd:fd:01:
                    aa:05:9d:f8:16:e1:26:c8:82:d3:4b:24:14:97:98:
                    dd:40:ba:f7:00:02:d8:7c:71:e6:c5:91:e7:c3:66:
                    7d:48:27:dc:79:b2:69:e0:cb:5d:fb:e9:1f:33:a3:
                    7c:96:76:7c:94:0d:0e:c9:4d:ed:5e:fa:3b:b0:14:
                    9f:aa:1a:a7:39:f6:de:80:8a:ed:ab:36:d5:9f:f5:
                    39:98:b9:9c:90:6b:f8:b1:20:17:1d:71:ed:c0:0a:
                    d9:de:0d:a6:c2:e9:3e:0e:7f:9b:f4:b4:7b:34:44:
                    58:f0:62:2b:8a:37:d1:a4:7c:75:0e:d3:ea:fc:1b:
                    8e:f6:e5:13:08:8c:f8:fe:23:3e:f4:1b:c3:60:dc:
                    6a:7b:29:54:1a:b3:8a:2d:fe:80:3e:f3:0a:2d:fb:
                    b1:ed:a4:e6:e9:16:1f:c9:c1:bd:34:44:aa:64:c0:
                    2a:27:2d:5f:9f:1d:57:0f:d7:51:77:bb:dc:d1:5e:
                    e0:e4:3b:22:43:10:f1:d7:d1:a4:f5:d3:c0:e4:8b:
                    7c:6c:ca:97:79:df:8f:5d:4c:4b:04:ad:f0:4b:fa:
                    e7:0d:98:a3:52:ed:ff:3d:40:b5:96:a4:66:80:bb:
                    76:bf:8e:4c:51:0a:f6:57:4d:3b:35:52:2b:78:00:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:AC:0C:59:62:2E:3A:B4:F5:B7:DD:5C:DC:34:E1:89:4E:CD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl

            X509v3 Authority Key Identifier:
                keyid:0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.188.240.0/22
                  185.212.4.0/24
                  195.85.116.0/24
                  206.55.212.0/24
                  208.67.108.0/22
                  216.250.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:81:ba:20:2e:55:8c:55:18:ee:0c:f4:dc:95:80:0c:8e:56:
         63:74:9a:f2:53:ab:f2:b0:cf:22:f3:f0:6e:f3:20:e4:7c:b7:
         39:41:1b:be:54:a4:24:9e:a9:d4:12:a4:2d:e2:cb:b8:44:ec:
         33:eb:4c:b6:0a:c4:fc:28:28:c1:1b:42:fe:27:30:c6:d1:6b:
         43:9a:be:3e:25:24:31:05:b3:2d:3a:c0:30:41:e9:af:29:5c:
         8e:5e:14:ad:f9:2b:b3:57:ef:e6:c6:d8:8f:b9:87:69:76:c5:
         f8:6b:94:a2:b8:8a:39:57:ae:55:4c:ab:bb:a9:fb:42:82:6f:
         0f:92:42:1c:dd:01:a9:dc:66:0d:b9:c9:be:ba:10:d7:83:47:
         2b:81:9c:ae:8c:db:f8:cd:9a:e9:27:15:62:d4:32:cf:d7:0e:
         3d:65:7e:90:ec:c5:39:b4:ef:ae:cf:3f:be:c4:a9:ba:9e:51:
         b8:07:df:3c:71:f4:52:81:9f:87:ca:69:d3:00:5e:6b:cb:86:
         1f:43:16:52:ed:16:84:84:08:55:e4:a1:84:2f:c1:fe:5c:74:
         0d:22:47:4b:a9:d3:75:44:48:b5:e1:66:a4:ee:7f:ce:3c:52:
         ca:c4:c8:25:0b:f8:97:97:fc:5a:de:12:f1:2b:a2:7e:42:14:
         00:39:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:57 2026 by rpki-client