Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa
File:                     0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa (raw, json)
Hash identifier:          dVN7MXBERREns53gn0RzTfrgBfEGgCJMSA6gWAhqFLo=
Subject key identifier:   42:B8:E2:90:F2:65:05:48:7D:3C:3E:0B:17:25:4D:36:6A:EA:85:F8
Certificate issuer:       /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial:       010D0C9F4328584DC4004547797DB45FAAE73280
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     2914
IP address blocks:        199.115.82.0/23 maxlen: 24
                          199.189.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:45:47:79:7d:b4:5f:aa:e7:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=8bc2011d-5d93-4a0c-a38a-949a0c909195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:5e:3b:25:3d:4d:ac:39:d8:7c:48:5f:32:
                    eb:a8:ca:06:6e:01:8b:b3:a1:f8:dc:bc:a7:8f:0e:
                    55:a8:79:13:42:4b:f2:70:e0:21:b2:a0:85:fb:a2:
                    7b:e7:03:74:6c:33:1c:fb:86:31:de:62:ec:0a:0d:
                    70:7d:cc:29:55:98:31:49:41:d8:e1:a3:f2:f9:55:
                    34:62:89:3b:b7:48:f2:96:f9:9b:5d:5e:2b:e6:1b:
                    49:cb:1c:b4:bc:6a:c3:1a:9b:d3:49:1a:b0:1f:97:
                    4a:11:27:00:18:b4:a5:d4:c1:ec:9d:98:cd:a3:f5:
                    c5:5a:0f:d9:5c:c0:e4:67:4d:1d:bc:c5:3c:fa:a7:
                    d3:14:e2:cd:fe:7c:c1:ab:f6:bd:f1:ac:23:c2:db:
                    56:ba:71:1f:f3:14:dd:53:6c:00:3e:f3:60:fb:ec:
                    18:08:1c:81:59:f4:b7:3c:9c:e8:72:6b:a6:07:05:
                    e5:6c:0f:12:7c:ac:4c:32:4d:bb:4b:a0:4a:b8:85:
                    7f:ac:bb:01:ac:92:eb:db:cc:cf:d8:cc:0c:f3:bd:
                    ff:78:31:b7:69:f4:a1:49:e2:85:1f:68:b2:83:cd:
                    ad:9a:e2:df:77:90:1c:19:10:f0:78:a7:da:78:48:
                    61:1d:01:71:88:a1:7d:e4:be:eb:7d:50:5c:cc:e8:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B8:E2:90:F2:65:05:48:7D:3C:3E:0B:17:25:4D:36:6A:EA:85:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.82.0/23
                  199.189.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:2e:5f:61:bf:12:7f:3e:23:f8:4c:89:a5:ad:78:71:47:
         2b:d4:62:77:ad:0d:3a:86:4d:fa:ff:f1:b4:9a:2f:8f:31:86:
         7c:23:dd:21:ca:c0:62:7f:8b:e8:ca:ee:b7:f9:bf:5b:ba:90:
         bd:ea:a3:a5:fb:1c:2d:b5:a0:01:05:c7:9e:95:f9:b2:50:a2:
         8b:81:91:b3:f6:84:f4:1c:5e:8d:a6:d3:e3:30:fc:27:ff:b5:
         68:ce:3e:b2:1c:23:b0:bc:80:06:3d:a9:5d:71:39:d1:2c:c6:
         fd:28:e4:fb:d1:f1:77:85:69:2f:cc:73:e5:db:c9:e1:3b:0c:
         92:e4:61:d0:70:2f:ad:45:7e:23:8e:35:9d:26:f2:c7:f5:c0:
         3b:9e:08:96:59:98:82:c2:53:52:b7:b6:4d:6a:89:c5:fc:22:
         24:17:bb:7c:76:1e:4e:df:2f:3a:06:af:74:5a:7c:97:6f:ae:
         dc:32:34:a1:0f:ad:23:54:d4:53:21:d8:34:4d:19:96:f8:4d:
         3b:bc:6d:4f:db:de:a1:ed:72:3e:bd:fe:49:df:2e:2c:97:9e:
         9c:04:38:84:da:9f:87:fe:88:99:a9:df:67:72:b6:f0:36:89:
         8b:2d:8e:37:97:14:42:42:b3:ee:72:40:54:34:8f:b3:03:67:
         90:ec:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:15 2026 by rpki-client