Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa
File:                     30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa (raw, json)
Hash identifier:          iBHEAHUZJEceixfEmnN10WUt4Z8QaAYBMKCqpotrYQ4=
Subject key identifier:   8B:CC:07:EB:70:C3:EB:22:4F:FA:68:F9:C7:DD:87:D6:D7:5F:EA:D7
Certificate issuer:       /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial:       010D0C9F4328584DB4A5B6E27D65979CFDE488C0
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     399938
IP address blocks:        131.219.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b6:e2:7d:65:97:9c:fd:e4:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=ef516fd1-b225-42c3-a700-f9225c1650bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:c6:9f:24:25:b1:be:d3:35:21:51:06:c4:
                    30:79:7b:89:eb:ac:3f:f7:71:bb:d6:a2:9d:0e:51:
                    78:b9:da:0d:32:be:67:d3:bd:38:80:6d:95:f2:7f:
                    c4:fa:f0:4f:fa:a1:9d:cd:53:76:3a:9e:6b:55:7d:
                    a0:26:59:3c:1e:6e:43:d6:23:46:44:f4:38:66:23:
                    6e:74:a1:85:d4:ca:5b:a2:51:71:14:d4:09:b6:2e:
                    8c:34:1c:39:dc:77:ba:d0:58:cc:77:76:89:bf:9a:
                    b6:83:da:a7:ee:96:9d:b4:43:55:72:0a:e7:82:5f:
                    32:19:72:c1:e3:d3:86:eb:19:f0:0b:4e:7f:fb:39:
                    7c:58:96:41:a3:59:22:cf:81:7a:51:3e:50:f6:fd:
                    18:47:e5:83:28:6c:4a:44:b5:d4:78:af:70:9e:27:
                    72:94:1e:8d:e9:e7:39:6e:d3:a9:21:1c:35:93:1d:
                    47:47:1f:fc:47:05:dd:ab:ac:e2:c2:6e:a4:cb:17:
                    7c:54:8a:a0:5e:e3:ef:15:c3:cb:0a:b9:52:d6:f9:
                    e7:4b:04:b1:e2:1b:44:4e:fa:34:58:02:8a:7a:aa:
                    97:0c:8b:10:f8:19:8a:a1:34:5e:e7:e6:f0:9d:83:
                    f6:de:67:0d:46:2c:5b:33:e7:b2:f4:26:5d:dd:11:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CC:07:EB:70:C3:EB:22:4F:FA:68:F9:C7:DD:87:D6:D7:5F:EA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/30bf18f4-d7a4-3592-bdda-af7a2314dfee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl

            X509v3 Authority Key Identifier:
                keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.219.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:5b:18:f8:3a:d5:ac:ff:41:ef:2a:cc:af:7c:da:ad:27:
         5c:51:f1:67:89:e1:8c:06:67:2e:08:dd:b4:61:6a:01:cd:de:
         85:c6:fa:bd:2e:d5:f6:be:cd:5e:6a:20:30:05:64:cf:c8:6b:
         50:c3:79:54:4c:be:11:17:a9:12:b6:fb:fc:e3:25:26:00:f5:
         b8:3f:7c:d6:91:26:ed:b0:61:2c:3a:f3:3c:1e:1a:44:b8:be:
         57:ee:2f:12:b9:a8:8f:5e:d6:93:c7:b4:21:5e:5a:17:3d:3e:
         b9:eb:18:19:68:d1:9e:e6:94:8e:97:5f:0c:b2:0c:23:27:cf:
         f8:88:87:ff:42:d0:02:00:1d:0e:55:1b:0e:e9:01:35:eb:fb:
         43:26:6e:17:72:ac:c6:ef:07:61:9f:b0:27:33:37:8a:17:a2:
         81:e6:bb:56:ad:ff:39:57:e5:e1:ae:b0:7c:eb:55:5c:f5:84:
         5f:3a:70:a1:96:75:6e:a2:a8:44:34:89:68:e4:1e:48:7d:40:
         2a:58:b2:aa:22:15:29:b2:01:77:dd:bd:dd:5c:4a:b8:24:ff:
         b1:3b:76:a0:f6:85:2a:75:88:14:62:59:12:84:d8:01:ec:c1:
         49:df:f6:68:57:b8:d0:e9:c4:3f:bb:27:49:d3:89:e2:3b:c3:
         19:41:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:30 2026 by rpki-client