Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/526cb66a-9285-3724-8398-31801d71add0.roa
File:                     526cb66a-9285-3724-8398-31801d71add0.roa (raw, json)
Hash identifier:          Rm0u0eHmNIc+4SKt94k7kI00FnbblTLF9h1KQL28Vng=
Subject key identifier:   04:76:54:99:97:1E:B1:FD:13:53:22:39:9C:AE:E1:D2:4F:8B:48:C0
Certificate issuer:       /CN=a66c9316-dcc4-4df1-a7eb-e47a07e90a6a
Certificate serial:       010D0C9F4328584DA280165ED0BCCC27D5356800
Authority key identifier: 3A:27:B9:0D:E5:50:B2:FA:F6:5C:E5:F6:38:AB:79:26:D3:5C:01:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/526cb66a-9285-3724-8398-31801d71add0.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     393292
IP address blocks:        204.154.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:16:5e:d0:bc:cc:27:d5:35:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66c9316-dcc4-4df1-a7eb-e47a07e90a6a
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=d89f0ef1-82cb-4781-8bce-e3c371bdd553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:dd:27:2a:51:8b:6f:47:0c:5d:63:a4:13:
                    3f:0d:74:b5:76:ed:6c:87:8f:f2:d3:5b:ce:f2:c6:
                    00:fc:43:04:0d:0b:1c:85:2c:9d:36:89:66:f4:4d:
                    6b:b8:17:de:6d:9f:6f:86:92:79:32:6f:92:f7:92:
                    f6:ff:22:2e:ff:34:dd:21:9e:75:f1:63:0d:98:33:
                    e7:91:e6:e0:c8:15:ea:31:c0:c5:4d:95:23:9f:4d:
                    c2:d6:b9:9e:79:03:44:0c:46:65:b2:57:b1:9a:02:
                    86:02:eb:c1:8d:49:89:43:a8:38:f0:ad:39:54:f8:
                    28:1d:b1:ff:29:ea:77:ab:12:0d:2c:8f:c3:8c:ef:
                    d8:58:04:16:02:63:df:ad:b8:6a:e0:e6:4e:4f:b0:
                    b8:e7:fa:89:00:25:b7:e8:be:e1:b8:19:26:96:fa:
                    9e:da:ad:73:ea:bf:f9:a3:c4:ff:ea:fa:8d:92:6d:
                    e9:56:9b:ab:a9:8a:a6:a4:cb:f0:a0:29:6e:9b:96:
                    4c:1d:ce:4b:00:d3:63:47:db:0f:25:94:89:d6:1a:
                    64:9d:c3:3f:a2:07:29:79:25:0b:30:15:24:4c:b0:
                    c8:0b:06:56:e6:1e:95:58:24:ee:0a:26:97:f7:8a:
                    18:72:53:d3:40:23:73:1e:00:cb:f4:d1:cd:d7:a9:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:76:54:99:97:1E:B1:FD:13:53:22:39:9C:AE:E1:D2:4F:8B:48:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/526cb66a-9285-3724-8398-31801d71add0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.crl

            X509v3 Authority Key Identifier:
                keyid:3A:27:B9:0D:E5:50:B2:FA:F6:5C:E5:F6:38:AB:79:26:D3:5C:01:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a66c9316-dcc4-4df1-a7eb-e47a07e90a6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:20:25:40:24:16:a8:dc:9f:8b:18:cc:e2:87:ed:65:26:77:
         c5:3b:d3:f9:b7:e0:e2:37:e9:3b:3b:ac:f9:19:fd:b2:82:7c:
         53:2e:7a:93:d9:b5:9b:ce:40:d0:9f:ed:ae:e8:b7:27:fb:c0:
         7d:c3:f6:0b:50:e8:8d:d7:69:f4:a6:9e:22:80:84:2b:2d:22:
         41:75:ea:f8:2b:a2:c5:94:43:1f:23:5e:e2:9c:c0:47:56:55:
         0f:e4:f0:27:15:6f:1e:80:06:44:86:44:27:06:34:da:82:17:
         14:7d:db:49:8d:6d:78:7a:49:52:74:1f:6b:8d:1f:9f:a7:bc:
         23:9f:7f:2f:b4:c4:ae:00:10:b8:8d:e4:f6:a3:02:9a:d6:4c:
         24:4e:d0:30:9a:36:6d:d4:fc:ee:5a:2d:d9:be:da:29:ee:ed:
         32:60:03:31:aa:d2:97:1e:4d:ce:f3:dd:ca:b9:39:f0:1f:e5:
         f2:63:77:4a:5a:98:e8:06:49:71:ed:62:25:8b:64:15:0b:9c:
         35:64:43:13:76:c0:78:32:6e:e6:f9:c0:e0:b1:04:17:7c:20:
         e5:29:3f:c4:8b:80:66:53:9b:88:41:85:81:a7:94:59:81:cb:
         08:4e:01:49:2e:40:16:2a:36:14:e7:6d:8c:6b:37:04:4e:f7:
         d0:0f:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:25 2026 by rpki-client