Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa
File:                     aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa (raw, json)
Hash identifier:          23taRVMBmZA29NHcH8XFNc6/2Gnmfm+jmq2f3dkKRWE=
Subject key identifier:   85:F5:A2:28:3B:8B:28:6F:71:5B:9D:5C:1C:DA:D3:A7:74:63:0A:D8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584DC6CB06DC742AA067C5FC2100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     11955
IP address blocks:        150.224.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:06:dc:74:2a:a0:67:c5:fc:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=14eab18d-7e5e-4cf7-a740-c451b58249e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1d:96:8d:49:e4:b4:af:16:73:d6:e7:52:55:
                    9e:77:7b:6a:d9:f1:00:7a:ae:60:58:97:13:17:f9:
                    88:5f:0e:58:71:3b:07:10:26:65:ad:01:10:0b:cc:
                    6e:78:41:b4:1a:25:ac:0a:b3:00:6d:49:eb:b5:80:
                    26:35:11:78:3e:c7:87:c3:f4:2d:b0:7b:6b:02:85:
                    9a:b3:1d:82:b3:f3:df:ef:61:ec:3e:05:f3:6f:49:
                    91:6d:a8:24:98:94:91:68:43:36:6a:bc:3d:59:cc:
                    f9:48:84:28:f3:43:58:99:95:8e:bf:22:03:1a:46:
                    80:59:a3:2d:64:e1:5e:f5:ef:04:9e:91:ab:11:c8:
                    3a:b8:c4:5c:66:2c:50:52:1d:8e:67:c5:29:2f:54:
                    e2:62:6d:97:57:c7:67:be:d5:dd:e2:82:87:84:7f:
                    e1:23:24:b5:eb:89:72:f2:34:67:87:1a:f8:9f:37:
                    99:c5:f3:49:8c:36:65:be:1f:3a:83:eb:06:ec:d9:
                    8a:84:0a:53:2a:df:13:19:46:59:43:a7:db:05:df:
                    85:9a:e7:b8:e8:ff:62:c0:10:14:f1:f2:cc:2d:f9:
                    2e:03:ef:59:d8:04:7b:38:a1:03:e3:31:6d:67:99:
                    6f:22:18:4b:91:a0:9b:64:c8:94:9c:77:30:74:61:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F5:A2:28:3B:8B:28:6F:71:5B:9D:5C:1C:DA:D3:A7:74:63:0A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aacc0def-d901-3428-af7d-04cf8ca3f5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.224.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:2a:de:48:44:ec:fe:c1:4e:6a:a6:fb:2e:24:6c:c7:36:79:
         62:2b:19:41:a1:aa:7c:97:63:51:bf:f8:b3:04:8f:de:38:c1:
         cc:69:7b:04:44:fe:0e:94:32:35:be:aa:32:70:bd:10:65:31:
         c3:4d:f2:91:fe:57:fa:19:a3:29:93:60:b1:f9:9b:be:4b:75:
         38:bd:62:21:c8:a2:c3:13:9f:fc:40:ed:64:bb:4e:9a:16:a9:
         fb:b3:12:02:17:42:4a:24:6f:84:c1:fa:ed:ac:d7:e7:11:0a:
         16:95:1b:bb:e3:f8:80:54:f5:13:21:03:46:61:97:2e:fc:16:
         6b:cf:ef:30:5e:0e:18:20:b0:0a:76:4c:b1:8c:79:6a:2c:40:
         d7:36:e5:5f:af:c4:c4:6d:13:b4:45:ec:4a:d8:77:d1:21:bd:
         3e:5d:d8:e1:23:61:4a:f8:b6:d1:36:51:73:90:6d:8e:1c:aa:
         b2:7b:d5:e0:b9:5d:ff:1f:d7:15:c0:27:26:42:a4:79:5d:0b:
         88:27:1f:64:01:6c:df:f5:73:de:cd:39:a4:07:12:d6:9f:df:
         05:05:26:50:0e:c0:fa:c7:25:f5:97:6b:a6:f4:8b:3a:6c:d7:
         75:e0:e0:5e:f3:ae:7a:48:05:11:f5:e2:51:e4:32:d7:a8:b4:
         6c:63:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:57 2026 by rpki-client