Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/55345ae6-01d5-36ed-a163-49104fdaaad3.roa
File:                     55345ae6-01d5-36ed-a163-49104fdaaad3.roa (raw, json)
Hash identifier:          kBgOOyv6lM4dV430UynHx9Lg/SGVKqPJr+cv32qYsU0=
Subject key identifier:   FA:73:11:C5:03:85:6A:B7:2F:D8:92:5C:C8:64:FA:95:3A:4D:EF:BD
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584DB0757A7EC228B6D4CD07B080
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/55345ae6-01d5-36ed-a163-49104fdaaad3.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     55081
IP address blocks:        192.241.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:7a:7e:c2:28:b6:d4:cd:07:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=a753ae2c-a7d6-4b5e-965c-cf6ee4005d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:d7:d3:0e:3a:cd:63:0f:cc:24:70:40:54:
                    33:63:1c:bf:a5:26:df:c3:c3:b7:fa:f0:9c:40:3d:
                    ac:2f:29:81:cd:f3:2f:01:e5:ce:be:3e:41:54:c9:
                    a0:a9:f6:65:dd:00:78:9a:a8:72:ee:6a:ae:fb:80:
                    66:c7:1a:2d:58:f1:f5:5a:91:3f:83:34:b0:6d:88:
                    83:f2:a4:c7:3a:a1:12:17:6b:c3:71:53:63:89:49:
                    fa:9b:54:ac:86:99:45:63:6b:a6:66:b4:57:7e:69:
                    05:8d:a2:9e:e7:aa:7f:e6:4e:8d:ff:5d:4a:f6:84:
                    0a:de:f7:52:e7:16:4d:8a:92:aa:a2:70:f4:7c:fe:
                    d2:0c:eb:f1:16:54:01:74:af:7c:10:fa:7b:80:45:
                    5b:35:18:5d:eb:92:79:d6:c6:26:50:0a:e4:f8:fb:
                    22:4e:c6:b6:0f:82:5e:df:aa:98:aa:f8:81:31:30:
                    e5:95:df:ab:71:0c:f0:96:75:69:97:e2:e7:88:0a:
                    05:50:71:77:01:b1:e5:8a:2e:3e:11:5c:fc:ad:8a:
                    93:5d:5a:fa:94:0c:3c:60:e2:e0:30:09:4a:28:bf:
                    d2:46:6b:8c:0c:52:d5:cb:e4:80:6c:15:9e:5a:92:
                    c5:12:f8:5a:7b:6e:52:c8:c0:34:bb:95:21:f5:30:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:73:11:C5:03:85:6A:B7:2F:D8:92:5C:C8:64:FA:95:3A:4D:EF:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/55345ae6-01d5-36ed-a163-49104fdaaad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.241.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:b6:d7:86:d7:da:d8:55:78:08:5e:22:5d:07:ae:05:73:73:
         b2:03:78:5f:a7:12:86:22:d8:c1:71:69:be:54:aa:1f:d6:b8:
         44:b9:e8:87:14:55:8d:3b:9e:e1:e7:5b:e3:eb:74:32:4e:e2:
         94:6e:84:79:ad:61:fa:78:b3:0e:f1:44:c7:59:9e:08:a6:34:
         38:c1:4b:fa:37:dc:82:ac:3d:e0:29:b1:e3:96:bd:a8:8d:c8:
         ca:71:cd:74:b2:7b:bb:ac:d1:6f:a1:7c:c1:b2:9e:db:38:23:
         7e:2e:c1:2f:4e:8e:b5:26:e2:64:fd:55:ac:d1:a6:51:b1:12:
         3a:4c:00:9f:35:0a:a3:2b:fd:13:f6:79:30:1b:a1:d3:3e:9c:
         0f:2e:8e:60:89:07:ce:24:61:7c:b8:61:fb:4f:12:d5:4a:df:
         e6:c0:63:2b:1e:43:26:a3:91:4e:23:10:cf:9b:01:47:76:9f:
         06:b3:d5:da:fe:ec:10:46:d1:92:6d:39:ad:83:aa:26:19:7d:
         45:96:d8:39:e1:8b:a2:12:29:80:14:79:bb:0c:d0:b7:d5:02:
         25:fc:03:aa:1b:77:fd:54:96:f2:76:59:eb:05:2c:f6:8d:c3:
         74:eb:3b:b2:a4:c5:58:f9:f7:e4:6c:03:ea:5d:55:49:3f:af:
         4e:3c:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:33:15 2026 by rpki-client