Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa
File:                     1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa (raw, json)
Hash identifier:          y9KOngHK13iOXqBH39cLZ7tZ/iXmhYArDT5jQ2SVOSQ=
Subject key identifier:   34:06:A2:73:BA:2B:40:82:FB:5D:3C:9B:ED:65:8E:78:6E:ED:34:D1
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584DC56598B9A62E7B049417D880
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     394354
IP address blocks:        149.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:98:b9:a6:2e:7b:04:94:17:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=3ea26bff-ba64-4c06-8d7c-3b9ddbe79e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:f4:15:c2:48:91:f0:e1:3b:73:fa:a7:54:
                    24:da:d1:ed:72:68:3e:bf:52:33:32:12:85:72:35:
                    5a:d5:3c:c7:91:d9:2b:60:1d:c4:10:1e:78:28:ec:
                    81:2b:4c:c1:25:ff:64:c4:b6:a8:ce:8c:9b:be:fd:
                    cf:26:94:02:15:3d:7c:71:53:50:60:42:4b:63:e9:
                    24:30:73:9a:d7:9b:81:e0:90:6c:f4:79:28:d6:85:
                    0b:2e:00:1e:5c:38:95:64:2b:92:83:23:42:87:30:
                    36:da:27:48:be:b7:d1:52:52:2a:8e:9d:d7:3a:b2:
                    16:96:42:63:d5:5c:4b:2c:c7:3e:1d:6c:f9:de:1a:
                    36:95:41:8d:3b:97:de:8a:d1:a6:7f:76:6b:79:d0:
                    88:03:e5:b9:3e:4a:c2:ce:a6:b4:24:f7:6e:b6:16:
                    7a:ee:c1:f3:7f:8f:79:0c:bc:49:ce:09:d3:49:83:
                    eb:30:f2:1a:40:85:1d:dd:51:59:69:26:c5:4e:bd:
                    6a:f7:8c:f6:e0:62:82:6c:b7:fc:c1:01:5d:60:d6:
                    92:2b:88:29:58:a2:ce:02:26:6d:72:41:44:91:c3:
                    b9:73:84:b0:f2:37:25:30:ed:49:ec:32:ca:ee:af:
                    42:f2:ce:32:20:8b:6c:6b:81:d7:34:10:12:42:33:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:A2:73:BA:2B:40:82:FB:5D:3C:9B:ED:65:8E:78:6E:ED:34:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1ff2d823-777c-3db0-b8d2-ce56f99f9c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:92:49:0d:d8:6c:60:65:92:86:04:6d:cf:50:ef:6c:4b:
         66:da:88:34:3b:be:5c:6c:e6:02:1b:6e:5c:db:c2:19:82:0e:
         cc:42:e1:17:eb:2e:75:2e:15:8a:c6:3f:03:77:74:96:e2:04:
         7f:7d:38:0b:e7:31:3f:d5:6b:92:8d:a0:b6:41:ad:ec:93:c7:
         f3:91:d8:fa:b6:7f:9e:47:6f:56:f4:67:fb:be:f5:58:ff:22:
         e7:b7:ac:4a:d0:67:49:6e:97:24:1e:d5:b5:84:f6:54:92:e0:
         e5:5c:bb:10:6a:f8:43:56:f5:83:1a:39:83:e2:ad:2a:fe:5d:
         03:de:61:d0:f4:53:bd:b5:a0:0d:32:ca:b0:5d:e7:14:98:77:
         5a:5d:8e:53:00:86:19:69:8e:8a:79:f7:16:58:67:77:4d:ca:
         d8:73:9b:71:aa:e5:5d:91:5c:08:0a:bd:1c:fa:84:60:87:31:
         55:04:f5:49:a9:ec:7f:f8:20:82:12:2e:ce:e0:73:92:3a:47:
         b3:fd:ec:be:d2:3b:ee:26:9c:e9:80:4c:b9:e7:1f:5c:61:28:
         50:52:27:4d:09:50:38:55:39:ec:f3:99:a1:e9:a2:25:03:2c:
         da:48:50:96:c2:d4:da:5b:31:17:00:02:07:34:f4:d0:60:07:
         76:db:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:24 2026 by rpki-client