Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e784080-aad2-39be-a4b0-ef7a5ec291a2.roa
File:                     5e784080-aad2-39be-a4b0-ef7a5ec291a2.roa (raw, json)
Hash identifier:          VmbEIKoypzTuJKyBEIq+p97FqGYXb6rJovmhreWfr7M=
Subject key identifier:   03:75:00:9B:B7:E8:FB:22:F9:1A:69:AA:A8:10:93:ED:B9:38:90:B9
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DA6B007A85D45FF2E60971400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e784080-aad2-39be-a4b0-ef7a5ec291a2.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     30058
IP address blocks:        198.255.44.0/23 maxlen: 24
                          198.255.59.0/24 maxlen: 24
                          198.255.92.0/23 maxlen: 24
                          198.255.104.0/23 maxlen: 24
                          2001:49f0:d03f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:07:a8:5d:45:ff:2e:60:97:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=48fc0d46-582d-4927-a0c7-ad19cd087bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:df:92:7e:57:ad:5f:56:2d:20:e7:db:4b:
                    14:6a:5d:2f:17:f4:4e:fe:e5:50:fe:22:6a:5f:96:
                    89:5a:41:95:72:47:1b:1f:48:2a:27:1d:ad:0c:0b:
                    42:cb:9c:53:87:ef:db:86:a5:a9:06:99:38:0c:88:
                    c9:3d:44:a2:5d:68:68:e4:eb:31:99:66:5b:f2:88:
                    be:0c:4a:e4:81:d1:1c:11:69:6a:9a:16:f8:15:4f:
                    e3:df:38:df:4f:0f:e1:3f:70:7a:32:d3:01:0a:0d:
                    07:bd:02:10:34:8f:ea:74:d5:d2:3f:e6:cc:bc:16:
                    40:f2:cf:ad:8a:be:89:b4:4b:60:d5:0d:08:31:06:
                    8f:ff:92:b9:ba:0b:53:25:89:01:16:21:e2:cb:da:
                    fd:ff:53:54:4d:b3:5a:30:1a:e1:4d:6a:b9:40:9f:
                    8c:59:53:76:2c:2c:14:11:38:99:51:7e:53:f2:1d:
                    b7:fe:7d:81:27:8b:70:70:87:3c:33:d8:8e:c0:9f:
                    0b:6e:6e:1b:38:b2:05:d1:7b:fd:0f:21:b8:23:14:
                    70:69:2a:43:4d:12:4f:57:31:cd:2a:17:64:4f:f7:
                    58:7a:78:db:01:a5:f2:5e:11:89:2f:0f:12:44:93:
                    cf:41:fa:4e:69:ff:a0:e8:00:14:19:cb:06:46:13:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:75:00:9B:B7:E8:FB:22:F9:1A:69:AA:A8:10:93:ED:B9:38:90:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e784080-aad2-39be-a4b0-ef7a5ec291a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.255.44.0/23
                  198.255.59.0/24
                  198.255.92.0/23
                  198.255.104.0/23
                IPv6:
                  2001:49f0:d03f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:a1:ea:43:cf:92:67:c8:d0:6f:3d:9e:f0:b1:c1:cc:e2:
         a1:c3:c7:6e:19:ab:bb:ec:dc:db:17:01:79:05:5d:cb:0e:95:
         39:62:e7:88:a1:dd:f3:4a:52:97:d9:11:44:e8:75:33:d1:43:
         92:39:8b:f7:f1:c2:d1:b6:b7:ff:35:d4:13:6a:e8:2b:d2:31:
         51:62:85:02:96:ab:80:c6:c8:4a:f0:66:f7:08:0c:8d:1b:2c:
         03:96:22:05:ef:27:d9:a8:90:8a:ff:92:e0:00:7e:fe:d4:74:
         9c:b6:c0:ce:21:5a:ea:6e:e6:52:54:4b:ae:61:c6:40:a1:bc:
         ab:06:16:59:4c:28:97:b5:e8:b9:e4:87:d8:0b:b4:33:03:40:
         63:41:a5:29:43:0b:0a:62:94:8c:43:89:39:c2:c5:e3:8c:bf:
         c2:90:48:f9:57:c5:79:fa:9f:1c:b8:4b:40:70:f9:56:5a:d5:
         91:c5:11:98:99:14:76:77:ae:25:47:14:21:11:01:0d:b2:c0:
         a7:eb:36:51:31:fa:44:c0:bb:34:5a:17:f1:37:99:8d:dc:b9:
         72:ee:2f:32:21:2d:ba:36:bb:5d:e4:dd:47:2a:3e:b5:26:50:
         73:97:e9:59:02:d6:0c:81:fc:7a:cd:b6:1c:24:b6:42:f1:da:
         93:18:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:05:01 2026 by rpki-client