Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7298040a-70ca-3092-be6f-4a5fffcc89fb.roa
File:                     7298040a-70ca-3092-be6f-4a5fffcc89fb.roa (raw, json)
Hash identifier:          gCcBwIWVzaiXISGhgyMRyBu+bJjRDTV5EHWqVAeAWMQ=
Subject key identifier:   C6:4A:CB:1B:DB:1B:AA:B6:8C:B8:17:74:E8:12:E7:50:C5:5C:B7:3C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584DC4005BFA3DE25F645B8B3200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7298040a-70ca-3092-be6f-4a5fffcc89fb.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     15169
IP address blocks:        192.178.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:5b:fa:3d:e2:5f:64:5b:8b:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=00a746a3-c5d5-44d4-a384-282af5f6786f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4e:c6:8f:7e:0f:34:ef:f2:5c:0e:7d:63:66:
                    f0:e6:c7:56:0b:7b:6f:bd:c8:f9:2c:a6:71:d8:de:
                    5c:2d:ea:29:20:17:9c:da:d6:9a:32:a4:7e:1c:7a:
                    b4:e7:cb:80:1e:28:7c:1c:e4:e0:de:48:ac:12:7d:
                    f5:30:13:2e:44:df:25:eb:d5:51:a5:be:b0:3b:8d:
                    2a:3a:a1:02:64:9a:c0:66:87:4c:3a:22:2a:c5:4e:
                    ba:06:f1:1b:d0:4e:86:39:5e:ce:50:2b:cd:12:27:
                    96:f0:d4:5a:9c:5f:f2:c1:c9:37:ca:c7:47:23:bf:
                    ac:44:5d:83:67:1c:85:e6:20:48:a5:22:c4:c5:0a:
                    92:c0:17:eb:7e:b1:e2:b2:be:25:b0:1f:53:19:9e:
                    00:f5:2f:74:42:5b:2f:df:43:e9:bf:62:79:20:32:
                    19:d6:42:23:f6:ff:8f:35:51:fc:c5:02:89:43:5c:
                    b0:f9:94:0a:c6:5f:92:92:ad:9a:bd:4e:27:ed:aa:
                    14:45:52:40:53:1d:b1:5d:ec:d8:12:f4:5d:5b:13:
                    2a:48:ad:79:25:cb:39:d2:fc:0a:43:78:9b:de:9c:
                    c3:33:15:af:10:7d:a1:33:8d:ab:88:74:11:d8:22:
                    f1:6f:52:56:81:67:fb:2a:01:66:b3:cb:92:b0:13:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4A:CB:1B:DB:1B:AA:B6:8C:B8:17:74:E8:12:E7:50:C5:5C:B7:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7298040a-70ca-3092-be6f-4a5fffcc89fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:71:70:ef:a4:b1:01:9b:13:c0:98:e7:d8:d1:9d:42:b6:11:
         32:e7:3c:f2:dd:84:3c:74:86:9e:3b:b9:9e:b2:31:48:9d:29:
         b5:ca:57:54:52:f9:60:a6:81:c8:d0:a6:99:13:9a:a5:59:c7:
         d8:2b:e9:8b:30:3e:72:9e:65:cc:5f:1c:36:6e:8e:c8:d2:bb:
         94:a7:9d:25:7e:be:68:71:f7:f5:e6:b7:24:67:f3:26:d2:f4:
         3b:c3:0d:7c:31:76:bb:33:94:51:16:90:0c:af:f6:43:5a:eb:
         9f:f7:37:3b:c2:09:4b:18:55:66:8f:10:ca:38:80:f3:cd:bc:
         8c:2f:6a:bf:48:98:51:57:09:cf:68:69:19:ac:6d:ea:d5:aa:
         7d:9c:5d:99:aa:dd:69:da:2e:25:b5:2d:14:6e:41:08:44:b1:
         86:74:82:75:b4:6b:52:51:a1:8f:55:c7:0c:db:2f:5f:17:1a:
         6f:96:5f:30:4a:6a:52:c3:94:7b:ac:07:d1:48:7a:54:5f:d7:
         f9:4c:ca:06:39:a5:1d:e0:18:d1:8b:3c:99:0a:ac:04:ea:9b:
         2a:50:71:01:bb:33:3b:7e:d7:b5:9b:07:78:c2:09:24:0e:b1:
         ff:be:79:e7:fc:af:81:f1:e4:21:24:76:c9:48:cd:ae:93:11:
         92:6a:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:15 2026 by rpki-client