Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/413ef40e-9cf0-3178-86cf-a53904635005.roa
File:                     413ef40e-9cf0-3178-86cf-a53904635005.roa (raw, json)
Hash identifier:          EC9j45yDm1Un1oQ4kA9qwekaiEunvztXiQd38THYF24=
Subject key identifier:   ED:97:4F:7A:09:AA:31:4C:53:23:CD:8F:1A:BD:5A:03:2C:6B:6E:91
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584DC4005C9D6C073454637D5A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/413ef40e-9cf0-3178-86cf-a53904635005.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     15169
IP address blocks:        192.178.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:5c:9d:6c:07:34:54:63:7d:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=9552198a-ed7e-4308-a9e0-3a5a7dc92281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f5:fb:af:76:ee:be:11:e9:ed:64:92:df:1c:
                    d1:33:62:4d:12:1b:e7:77:c9:05:cd:7d:9a:38:c3:
                    66:6c:55:00:92:f8:2c:fd:84:19:36:f3:30:a9:4c:
                    f3:a4:48:da:ed:cf:85:2a:22:0d:27:ed:cb:b9:5e:
                    67:51:55:22:b8:95:d4:b2:d8:aa:4d:37:22:92:2a:
                    73:91:5f:64:aa:f9:01:a3:84:37:3e:4f:c4:0c:29:
                    dd:a1:d1:ad:2d:c5:e3:be:26:83:dd:85:d9:a5:8f:
                    10:3e:72:3b:a5:e9:60:9b:1b:df:ea:b6:7c:ad:28:
                    33:55:1a:6d:aa:0f:d3:23:21:a7:d0:38:9d:c1:bb:
                    5c:d4:5a:0a:e9:3f:7b:17:95:44:c7:49:a4:4f:18:
                    dc:d6:2c:43:02:ae:70:f8:b7:05:d7:2e:47:df:57:
                    c6:13:67:05:fa:45:1b:77:e9:ea:23:a3:5b:48:ad:
                    b0:09:ac:6b:91:c7:7c:4a:6d:a9:db:54:a2:71:fd:
                    1a:99:4d:24:7d:73:06:65:f3:32:96:ec:77:ed:f0:
                    6a:70:4d:6d:ce:6c:12:28:0c:2a:38:13:ff:08:f6:
                    e0:e3:49:0d:96:4e:6d:9d:b4:b5:b4:80:24:63:2e:
                    f8:db:09:8f:93:a6:0d:1b:0d:35:04:e7:9f:1c:9a:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:4F:7A:09:AA:31:4C:53:23:CD:8F:1A:BD:5A:03:2C:6B:6E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/413ef40e-9cf0-3178-86cf-a53904635005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:8f:a7:1d:c5:18:99:7d:1b:1c:5a:5c:ad:68:bf:11:7e:
         25:65:41:ee:9b:12:53:cb:d8:a7:ed:5a:5b:7b:bc:7b:3a:bb:
         37:cb:14:5e:ee:1d:4a:17:45:1c:ec:a2:3e:52:17:97:4f:95:
         b6:12:b3:48:4b:ee:d3:a5:1c:cb:5b:f5:c2:3d:89:6d:5a:57:
         e6:bc:f2:3e:c8:1b:7d:91:90:b2:68:3c:1f:9c:7d:4b:d2:40:
         f5:44:28:b9:a6:a9:bc:16:db:74:f6:3f:75:41:ae:a8:ab:72:
         ca:13:75:ca:ea:e8:78:9b:db:51:56:59:e4:96:20:7b:a5:66:
         b6:5d:0c:86:e1:4d:27:c3:a3:33:a4:45:b9:af:f5:b2:93:fd:
         38:5b:be:06:d7:5d:17:a2:c8:04:37:1a:29:a7:72:a3:24:63:
         d1:9c:89:76:c6:4b:88:5c:29:4e:4c:e6:d7:34:fa:d7:47:68:
         65:52:71:bb:a4:7d:f3:61:80:31:10:41:40:f7:ad:e9:92:45:
         6b:24:7c:10:f8:f4:b1:bd:79:17:a2:f4:7d:d1:77:13:5b:77:
         04:e6:12:15:35:0a:cc:bf:c6:8e:a0:a2:9a:66:16:23:fb:db:
         cf:e8:5b:95:9f:4d:7f:33:f7:25:07:dc:6b:0a:bb:6f:27:1a:
         66:21:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:32 2026 by rpki-client