Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/ab9a08bf-9e08-304d-aec2-b89baaff3131.roa
File:                     ab9a08bf-9e08-304d-aec2-b89baaff3131.roa (raw, json)
Hash identifier:          fnteF2YJdB2Dc77nYoGegpg7OWesfQ9V9S35JSHRg4I=
Subject key identifier:   8B:18:7B:37:B2:61:8B:BD:C6:01:40:63:D3:39:0D:DC:2E:96:A4:89
Certificate issuer:       /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
Certificate serial:       010D0C9F4328584D91BFF7BA52E57B529FDFFA80
Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/ab9a08bf-9e08-304d-aec2-b89baaff3131.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     49544
IP address blocks:        203.132.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:bf:f7:ba:52:e5:7b:52:9f:df:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=88edea6e-9b40-4cae-ad6c-4ad147ef1c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:e2:3e:43:da:91:8d:4d:65:f3:a7:5c:e1:
                    4b:42:73:90:43:cb:35:a7:8b:0c:de:4f:0e:00:d1:
                    55:5e:b3:62:c1:75:81:65:26:a0:24:97:b1:de:39:
                    7a:3c:92:3f:bd:73:a2:d2:a6:c1:d2:82:e9:38:ad:
                    02:81:eb:60:fa:3a:50:28:ed:93:1f:8b:d0:55:f5:
                    ab:fa:c7:7a:55:5a:fd:ae:37:c5:20:1c:1f:e1:e2:
                    00:cb:57:95:04:07:7f:88:54:85:a3:4b:e2:d3:71:
                    22:09:05:cf:40:97:05:c3:6f:fc:2d:40:2d:aa:67:
                    97:a4:d5:b8:9a:d2:21:b1:99:c1:07:7b:a7:62:e6:
                    b0:14:9f:11:67:fc:f3:c8:85:93:f4:3f:f8:38:da:
                    89:aa:ac:7d:fd:44:25:1a:fb:46:cf:5e:96:3d:44:
                    82:17:e1:13:f2:c4:da:5f:5b:e2:9d:bb:f5:d8:70:
                    20:6e:1e:7d:37:a1:b1:a3:38:67:e8:8f:5d:c7:9a:
                    bf:56:a8:7c:d3:85:2b:bc:84:2d:1f:14:ab:c7:65:
                    2e:cd:63:b1:08:9b:ed:08:f7:26:39:a1:08:e8:f3:
                    13:49:43:bc:9c:b8:00:22:f7:78:2e:19:d8:a5:5a:
                    21:22:1d:c5:3f:45:52:38:b6:bb:5c:bc:b5:50:0b:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:7B:37:B2:61:8B:BD:C6:01:40:63:D3:39:0D:DC:2E:96:A4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/ab9a08bf-9e08-304d-aec2-b89baaff3131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.132.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:70:1c:43:e3:9e:93:0d:d0:27:b5:2b:c8:39:a0:f0:26:58:
         a7:55:76:85:71:b1:98:58:3d:67:e4:cc:ba:e5:38:d3:13:d1:
         14:cd:60:5c:32:af:dc:53:90:47:5f:9b:73:76:6b:91:96:5b:
         9d:8f:3d:1a:f3:64:b2:de:7d:84:1e:0a:87:10:92:fe:c0:cb:
         08:14:ae:29:c6:50:dd:3c:07:00:a0:2e:6c:f0:65:52:e1:f7:
         e2:46:c2:78:3a:0f:84:2d:1f:c2:ca:fc:ed:c2:5d:4f:18:a8:
         a3:26:62:bb:9b:eb:36:c1:30:44:3b:17:38:1c:ab:b9:d1:12:
         fc:02:98:e0:89:05:2a:3b:7a:bc:67:fc:82:50:7d:a8:ac:cd:
         91:72:1d:0b:38:88:56:01:3b:c2:08:49:6b:4f:de:b4:0e:0a:
         4f:78:c3:0c:99:90:6a:bd:a0:01:cd:a5:5d:79:a8:89:f3:89:
         cf:09:42:24:d0:10:f7:48:d8:83:3a:ed:2b:49:3b:a5:b7:03:
         d4:c3:1c:20:2f:a4:ef:10:dc:60:5f:9d:7c:47:d4:d1:01:22:
         49:f9:6a:f3:78:4a:a8:94:7b:cd:84:75:18:6d:95:4c:d1:73:
         75:5e:8d:f6:75:66:2a:41:c6:42:63:a9:03:75:85:38:ff:58:
         ad:69:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:52 2026 by rpki-client