Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa
File:                     16699af0-ce09-3ab9-9da5-515174dfb7ac.roa (raw, json)
Hash identifier:          RnE9usgoEPDqiAnVoFnA0lkfX3O9zpCNHoqm14k1nDs=
Subject key identifier:   22:DF:4B:0C:98:FC:9C:01:B7:6D:81:E5:F2:AE:BD:95:9A:9A:EE:2F
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584DF7A5D4BEC40E1E04F268A480
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     395201
IP address blocks:        151.123.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d4:be:c4:0e:1e:04:f2:68:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=b1adf7e1-5673-4369-9cfb-b4f4174d6b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:da:92:64:a7:cb:35:88:18:ec:38:3b:3e:
                    fa:9e:95:74:23:2c:25:e7:9c:e0:cf:d7:44:ac:2d:
                    f7:c2:9f:cd:6e:35:b7:c4:db:58:92:bb:07:48:75:
                    50:ed:a8:2b:ec:39:c0:e8:1e:a1:1e:6d:f9:cc:cd:
                    51:65:d4:c4:14:aa:2b:ba:b2:57:22:07:96:d7:03:
                    53:1c:f6:9f:48:f7:1e:c1:c7:50:53:82:d4:2f:5e:
                    a5:a3:2f:6a:37:0f:c4:b4:e5:51:78:f9:a1:16:f8:
                    b1:e5:07:c0:83:ed:e1:b6:9d:93:8c:0c:55:75:51:
                    a2:13:c0:06:a4:30:fb:bb:23:18:4c:c0:d0:bd:cc:
                    77:87:4c:d1:a5:21:64:b5:a9:45:15:3c:4b:c9:8e:
                    5d:5f:7e:80:21:d5:4a:67:d0:ac:fc:af:cb:36:45:
                    00:86:e6:b4:ec:76:6c:86:c3:4f:ed:0d:14:91:ef:
                    52:10:09:b5:db:c4:f1:ba:10:9b:ba:0d:4d:fe:14:
                    e7:6a:30:20:38:38:da:14:44:ef:9e:8d:9a:07:60:
                    cf:18:7b:c0:9f:26:17:e4:de:5c:e0:97:dc:d5:3c:
                    27:15:36:ee:65:71:44:ea:6a:fa:21:cd:f4:ea:37:
                    fe:3b:85:b7:d3:44:de:86:0c:9b:aa:72:90:6f:e2:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DF:4B:0C:98:FC:9C:01:B7:6D:81:E5:F2:AE:BD:95:9A:9A:EE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:f3:5b:5d:ee:a3:56:ab:57:8d:9e:d2:0d:cf:b0:ab:b0:
         fb:95:e6:94:a7:df:b7:e0:b8:b8:ec:01:d0:91:87:9e:64:ee:
         53:ec:61:38:d0:8d:e0:68:71:99:23:e5:da:5c:f4:cb:41:98:
         2e:aa:25:32:e1:7a:b6:83:fd:29:d7:21:02:f7:a4:1a:63:e5:
         26:ab:bb:29:2c:a8:75:3d:61:a8:78:dd:be:c7:29:83:51:19:
         ad:7a:80:70:9a:26:f3:c0:b8:12:1c:66:b5:94:64:85:d5:fd:
         38:3f:89:c1:c8:8e:f1:87:94:1c:78:ed:57:8a:5e:c3:6a:63:
         24:59:f0:6a:01:c9:9e:f8:a2:e0:77:5f:03:a4:5c:ea:64:dc:
         09:b0:f2:65:93:27:60:a4:cf:6a:e3:f2:8a:ce:f8:18:38:82:
         c3:fd:73:3b:15:e4:7e:58:2d:7c:ee:06:27:be:8f:18:9b:e9:
         36:ea:3d:e0:d1:41:04:8e:d3:39:26:a2:5a:71:4f:78:23:91:
         13:45:f7:59:3c:35:92:17:b8:35:f7:0b:0c:e2:bb:43:e6:03:
         ec:0c:28:b6:35:73:60:bd:5e:54:a9:1d:41:12:41:0d:b3:a4:
         a7:df:68:98:7d:ed:34:7c:88:62:a2:f6:74:de:a0:d1:c0:1b:
         64:17:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:16:58 2026 by rpki-client