Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/5a2667f9-2e23-3a59-a76d-c730490b94da.roa
File:                     5a2667f9-2e23-3a59-a76d-c730490b94da.roa (raw, json)
Hash identifier:          wA2uSoOl8wFKIS8/H3dpeq59h+7BaAN1RaEMxGdhpTo=
Subject key identifier:   96:56:FD:BF:4F:2A:10:A1:82:5D:6A:65:B1:08:0F:53:B8:BA:F8:4F
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584DCF2B07BADC70331E9672D340
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/5a2667f9-2e23-3a59-a76d-c730490b94da.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     55195
IP address blocks:        149.112.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:07:ba:dc:70:33:1e:96:72:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=55b5173e-810f-4f75-bdd5-609e630fa9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c5:f9:f5:6b:cd:bd:20:b8:70:51:bc:5b:18:
                    b1:42:6f:38:40:25:d3:95:70:48:13:0e:8e:a5:35:
                    6b:19:b9:f4:50:ab:6a:c9:77:69:a7:1c:bf:8a:6c:
                    71:06:8e:27:db:3e:57:1b:63:aa:e5:4e:56:27:3c:
                    26:4d:93:33:65:0b:8a:37:96:64:b0:86:ae:fd:db:
                    37:1f:62:d6:c0:6b:57:c1:f6:67:52:35:c3:f2:e9:
                    1f:51:bf:55:37:33:7e:9c:60:5d:4d:4e:ed:ea:0d:
                    0b:97:15:c5:83:1e:b1:9f:26:b6:93:fe:0e:1a:f1:
                    82:d4:33:d5:21:7c:b1:27:e1:6c:e8:b8:72:15:c3:
                    80:fc:19:4f:3d:a8:e1:f2:dc:74:bb:1c:db:b5:c2:
                    a4:9e:42:f1:bd:b7:2e:57:bf:cb:12:c4:21:14:78:
                    a2:b8:95:e2:cf:32:ba:1c:06:83:f4:17:85:ed:2a:
                    c9:08:0f:d3:d0:cc:bc:4e:30:d5:c9:93:91:51:d0:
                    72:ca:9e:30:b0:c5:e3:27:fc:75:5f:c9:4a:fd:f1:
                    e3:39:3f:25:60:48:1c:38:d9:e0:ce:b7:c0:6a:4b:
                    6a:5a:47:07:5a:ed:e5:f5:5c:bc:9d:6a:01:51:c3:
                    6a:a5:2a:81:a5:c3:0a:3d:e0:cf:6c:26:a1:ff:ff:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:56:FD:BF:4F:2A:10:A1:82:5D:6A:65:B1:08:0F:53:B8:BA:F8:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/5a2667f9-2e23-3a59-a76d-c730490b94da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:fc:4c:fe:67:55:23:67:f7:82:fb:50:e9:a6:8c:b2:f4:
         d4:11:7c:a5:98:df:b6:ee:b8:15:c3:28:ae:f9:28:be:3d:72:
         b2:31:f8:15:39:8f:41:37:83:88:a9:50:10:2b:3e:48:36:22:
         d5:3d:d3:ec:6c:1a:47:fa:61:23:a9:ab:ba:45:5c:16:4c:cb:
         35:c5:f3:54:f7:4f:1f:39:a3:66:9c:14:55:cb:23:cc:f4:58:
         1a:14:8a:50:fa:e9:36:e6:29:60:8f:e0:cb:4b:1f:06:31:cd:
         7d:5c:61:ab:16:4c:6c:d7:08:ea:40:67:1c:7d:b5:19:c8:28:
         44:3f:c7:6a:f7:0f:5a:cf:f9:b3:6b:f0:3b:6d:5a:29:7c:f2:
         47:cd:43:48:a6:34:31:6c:25:9c:57:2e:94:bf:ee:57:60:46:
         98:5c:19:93:02:23:73:2d:ff:96:e9:98:dd:16:c2:37:2b:3f:
         10:4a:45:d1:36:30:c7:ab:80:78:37:45:20:33:ff:de:58:4c:
         d2:e9:62:92:46:ec:d5:29:07:1b:eb:b2:64:29:d1:97:89:7a:
         a5:c0:c7:f0:4e:7a:b6:39:ae:e4:42:78:de:b0:f7:05:45:76:
         ea:56:01:79:a5:aa:43:2d:4f:65:d0:1b:35:75:e5:f1:75:a7:
         2b:c8:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:43 2026 by rpki-client