Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/9e749995-0e23-3d0b-8321-ff9dcf6fe58d.roa
File:                     9e749995-0e23-3d0b-8321-ff9dcf6fe58d.roa (raw, json)
Hash identifier:          yRvAht9Z6GTtVn3oqNVcykAI2J75RZ1Z/gKg7baa/DA=
Subject key identifier:   61:FF:C4:54:71:FF:EA:28:83:FD:8A:00:88:14:E5:7F:BD:8D:05:EF
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F4328584DAF1017EA3D8BF51B612FDA00
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/9e749995-0e23-3d0b-8321-ff9dcf6fe58d.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     16796
IP address blocks:        198.163.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:17:ea:3d:8b:f5:1b:61:2f:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=6b61dab0-8ca1-43a3-8852-ba928e1f5e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:d2:c4:fa:15:37:a4:ab:57:5b:89:de:95:
                    a6:29:63:de:a5:45:45:ff:ef:cb:49:fa:62:be:36:
                    98:1c:e7:0c:0d:fb:46:cf:e5:af:d6:d8:05:bd:cf:
                    9a:91:38:df:44:16:3e:c9:11:55:61:15:12:b2:a3:
                    76:9a:87:08:0e:63:27:2b:9b:1d:d8:24:9b:84:63:
                    30:04:29:5c:e4:65:bc:8b:1c:50:50:a4:49:04:5a:
                    4a:1a:17:f9:e9:a8:f5:36:6c:f4:0a:fa:4c:73:9c:
                    f2:16:51:c8:15:7c:df:a9:b1:6b:f6:17:9c:0f:eb:
                    ed:bb:b7:cb:e9:4e:e1:22:d4:5a:40:08:40:c6:ae:
                    8d:9f:65:c3:d6:fe:1f:2d:f0:99:6d:f1:bd:a6:62:
                    f6:70:77:2e:ef:b4:69:b4:79:b5:db:2d:3d:d5:e5:
                    bc:78:ce:26:d0:5a:ea:d1:e3:b2:75:f2:0b:31:78:
                    59:f8:77:ed:5d:94:50:df:f7:15:6a:41:8a:9a:26:
                    5c:fc:1e:02:15:b7:59:6a:09:52:28:e5:f4:23:31:
                    e2:18:81:10:94:94:b0:03:9a:81:31:e6:9d:6d:be:
                    b5:61:56:21:36:db:f2:72:92:93:bf:e4:ef:42:7e:
                    ef:93:44:7f:37:ab:c2:50:5c:ea:23:ce:49:20:53:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FF:C4:54:71:FF:EA:28:83:FD:8A:00:88:14:E5:7F:BD:8D:05:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/9e749995-0e23-3d0b-8321-ff9dcf6fe58d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:d6:f9:46:ca:87:d7:66:d0:34:41:cf:c4:55:4d:90:ea:
         e8:81:17:ba:e7:db:96:d1:29:c3:ff:8f:ac:27:b8:68:a0:ea:
         61:22:31:3c:e5:fb:07:8c:50:30:3b:f6:6b:9b:fd:be:8d:ea:
         52:11:9d:27:1a:2e:f6:8e:e3:56:07:b7:fa:a1:f4:f7:be:da:
         f2:58:bc:5d:9f:fc:74:8a:26:d4:df:b9:f1:9d:00:3c:f7:5e:
         9f:8b:39:b2:69:2e:a3:a6:b8:86:e8:92:35:a3:87:a4:5e:38:
         db:13:74:65:ef:bb:c6:bb:46:ed:67:67:00:fb:d2:17:3e:37:
         a1:0a:b8:3a:da:8d:c8:49:76:b7:23:ba:16:17:70:05:70:9e:
         57:13:05:cc:82:15:99:1c:67:78:bf:c3:ba:d0:99:a9:de:af:
         8b:13:81:e1:ce:26:84:e9:a3:ac:94:77:7b:bd:fe:c2:62:d0:
         34:7e:8c:8e:4c:28:1a:f8:cc:2f:41:66:0b:a2:6c:ec:ed:f5:
         76:cf:f6:c3:0d:0e:71:c1:68:62:87:fd:42:db:62:41:7a:0f:
         b0:40:ce:37:cd:c1:dc:4f:3d:7c:d5:f0:8c:94:39:1a:46:f5:
         87:3f:bf:6f:bf:0d:ab:ac:79:c5:8a:37:6d:9f:6e:a5:fc:4d:
         7a:8c:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:21 2026 by rpki-client