Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/d27c6a54-5eff-32ab-8958-78066da62636.roa
File:                     d27c6a54-5eff-32ab-8958-78066da62636.roa (raw, json)
Hash identifier:          qkUdhJf0P3yRiW5uB6Xs4qiX3V4Fs6ihGc4nkwlOX9U=
Subject key identifier:   22:40:1C:82:03:D9:DE:BC:07:53:00:A7:A5:8F:11:10:86:DC:A4:1D
Certificate issuer:       /CN=91139fba-bc78-41c4-a070-4191dad6091c
Certificate serial:       010D0C9F4328584DA2800CC4E49CEE3C49183EC0
Authority key identifier: DF:24:39:F3:9E:C7:8A:AB:4D:93:76:DF:BB:1F:92:9F:11:36:AF:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/d27c6a54-5eff-32ab-8958-78066da62636.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     18742
IP address blocks:        199.83.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:0c:c4:e4:9c:ee:3c:49:18:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91139fba-bc78-41c4-a070-4191dad6091c
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=a6e38a9b-1e1c-41c1-b02d-fd846f0aafe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:b5:b3:3a:92:9a:78:78:35:57:d7:b5:47:
                    24:28:cb:87:8f:be:ee:23:68:c9:92:69:f6:8b:25:
                    a0:33:a9:f4:59:3b:d9:a1:e1:e1:bb:66:bc:d3:f5:
                    ac:1a:27:bd:17:c8:31:86:2d:67:7a:7f:74:47:6f:
                    ca:a1:39:dc:d9:66:f0:dd:1b:a6:71:dc:73:e5:e1:
                    ec:83:ca:5e:90:44:ad:f4:ee:a3:7d:60:34:e3:29:
                    ed:ac:46:6b:d0:12:cf:07:9a:3a:0b:92:3c:8c:02:
                    19:58:8d:85:30:09:ae:46:83:d7:c1:f4:83:16:1c:
                    7a:43:20:33:49:62:8d:70:e2:fa:74:f9:34:be:18:
                    c5:96:e6:ae:b3:fe:15:9d:3a:f0:15:2b:df:22:90:
                    84:95:71:ef:76:08:79:6d:c0:77:12:2e:b2:2a:91:
                    ef:f3:0f:c5:d3:83:e7:2b:b2:09:29:a4:27:c6:db:
                    8f:69:bf:0c:7f:a3:2b:0a:2d:67:28:56:8d:48:1b:
                    28:d9:d9:87:5c:e2:65:40:88:ef:f8:ad:b1:3e:16:
                    40:c8:42:dc:b8:e0:3e:8f:a6:1b:94:bc:0b:8a:79:
                    8b:7e:96:27:c8:c6:1e:df:16:31:96:da:e2:a0:59:
                    db:e3:62:ab:27:6d:d3:a7:64:3c:0d:9b:68:cb:84:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:40:1C:82:03:D9:DE:BC:07:53:00:A7:A5:8F:11:10:86:DC:A4:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/d27c6a54-5eff-32ab-8958-78066da62636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c/91139fba-bc78-41c4-a070-4191dad6091c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:24:39:F3:9E:C7:8A:AB:4D:93:76:DF:BB:1F:92:9F:11:36:AF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91139fba-bc78-41c4-a070-4191dad6091c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:99:8b:29:d9:08:6f:9c:36:8f:df:7f:74:d6:5e:91:51:c8:
         d7:e1:85:a9:64:d5:61:bc:93:6d:98:c1:00:73:1b:31:1b:7d:
         ab:9b:c7:c6:4b:13:e7:ca:23:92:a0:90:b3:e2:ab:7d:0c:e7:
         6f:7d:31:55:eb:ea:1e:56:56:20:69:85:c4:8e:e0:00:f6:26:
         ce:65:91:b3:f4:4c:a1:94:bb:f1:bc:58:b6:38:7f:00:54:c4:
         80:38:6d:57:64:8e:05:e3:fc:24:fb:bd:b4:37:28:34:0b:09:
         99:9b:08:d3:40:52:6e:31:3e:67:3a:65:c5:11:a9:44:45:36:
         c3:b8:ec:62:4a:ca:51:46:82:f2:b9:a0:77:8f:31:f6:bd:26:
         74:36:4e:b4:98:fc:78:4c:c0:d3:c4:a4:61:91:58:1c:15:b2:
         4a:67:dc:11:47:4c:48:48:c8:ad:0a:a6:9b:b5:04:b7:43:4c:
         76:19:db:8c:ff:f7:60:1d:e4:f2:cd:2b:97:37:f5:59:12:bf:
         15:2b:44:f2:f1:4d:87:fb:60:ef:f2:52:e7:cc:d2:43:12:47:
         c7:93:eb:a5:08:2b:c7:9a:1d:fa:e5:20:86:ae:06:52:0e:ad:
         a5:a5:e5:d0:fe:06:97:9c:46:bc:26:43:17:08:e2:ee:26:16:
         1d:7d:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:19 2026 by rpki-client