Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa
File:                     e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa (raw, json)
Hash identifier:          ObNLgI2qCWCA8AedCaF+F51ggaawvNFKHLfjdqOGyUM=
Subject key identifier:   7F:22:DB:32:5C:C6:FA:F6:9B:7C:F2:21:D6:3E:E5:29:1D:F0:CD:01
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F4328584D09126891B276912720172F00
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     26512
IP address blocks:        199.119.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:68:91:b2:76:91:27:20:17:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=cdc5ac87-4e5b-431b-a231-e90afa2a308d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e2:55:d1:a0:b2:94:99:87:74:45:62:11:e1:
                    62:29:60:82:54:30:b8:27:42:cd:63:07:ec:ee:8e:
                    4a:af:f0:6a:08:c9:b7:50:17:26:bb:13:9f:b5:26:
                    38:9a:46:e4:ce:3e:dc:e0:61:e7:e1:4f:73:5d:03:
                    a0:6e:a6:0a:e4:c4:91:05:57:e0:a3:44:5c:65:c4:
                    39:30:70:cb:0f:0b:d8:1a:17:33:29:d5:2c:54:4c:
                    0e:df:51:38:57:a5:81:85:eb:c6:52:33:43:3b:07:
                    37:d9:84:da:0f:e7:59:0e:9e:fa:d0:8d:86:c7:7b:
                    92:92:55:b7:82:64:96:9f:9d:8b:b8:50:80:a3:e1:
                    55:af:a0:84:95:16:0e:fd:60:6f:1d:40:f3:e1:bc:
                    c7:b4:a4:19:fb:85:77:71:74:f7:9f:6f:7c:4e:5f:
                    d1:7d:83:2b:50:29:f6:2c:45:c7:fb:7a:2e:1c:63:
                    03:ec:df:e6:46:e7:90:c3:2f:ec:fe:df:89:45:bd:
                    c1:59:49:fb:62:03:74:42:04:a0:38:5a:a9:7b:a1:
                    0e:05:3f:f1:46:8b:90:76:86:bd:f7:35:4e:ce:d8:
                    37:06:06:1e:45:45:5d:6e:39:cd:a1:2f:47:af:6a:
                    f4:60:b2:c2:8d:22:cf:3e:ff:8f:e8:ca:fe:37:29:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:DB:32:5C:C6:FA:F6:9B:7C:F2:21:D6:3E:E5:29:1D:F0:CD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:c8:28:6f:7c:df:3b:ac:2d:02:3c:85:6f:6a:03:4c:a7:
         d3:f1:74:8d:90:97:bd:e5:1e:8b:75:f6:46:a1:4f:c0:2a:4e:
         db:12:3f:33:a7:8c:1b:1a:cb:de:cd:38:8a:49:5a:5f:c3:54:
         db:75:c5:4b:95:17:fc:71:7e:36:b2:80:84:24:64:dc:38:ed:
         67:f8:c7:ac:e7:31:3e:20:50:2d:14:f6:f5:12:c4:7b:3b:0c:
         41:bd:97:8a:a6:a6:7a:b1:d9:4d:3b:38:33:f6:23:ce:2e:33:
         6f:8c:b3:31:b6:c6:ac:64:af:e5:43:4e:5f:ff:c2:86:6a:49:
         a8:bd:b9:25:ec:ac:40:db:5c:ae:a9:49:cf:bc:f1:1e:07:08:
         d0:60:ce:c9:74:21:f7:4b:79:96:1a:d2:ec:2b:98:56:3a:70:
         92:68:27:ae:db:3b:91:9a:3b:3f:21:2a:ff:bd:fb:7b:ef:58:
         0b:6c:b8:1c:36:05:12:1b:c6:95:38:3d:28:a8:73:dd:20:41:
         a4:d3:82:be:ab:7b:8b:f9:3d:47:52:2a:0b:bc:48:3c:bf:f9:
         62:fc:8d:53:67:83:0a:a6:d8:b0:b1:50:b0:b9:a1:ed:63:51:
         c6:19:3f:ee:cb:97:fa:21:37:2b:5b:5f:af:ac:da:2d:1c:30:
         89:28:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:19 2026 by rpki-client