Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa
File:                     7de7fc63-8c26-337c-aa22-39f433f6354f.roa (raw, json)
Hash identifier:          EU3fkDErhbgFDRlp83MDXlu6SeZMLNjZXvJW+uy88nY=
Subject key identifier:   D6:65:89:AB:76:2A:B1:14:0A:B3:E4:F1:AF:20:7E:FA:B8:AD:50:AA
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584DAAE02C32E97B32D68FF08AC0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     1239
IP address blocks:        172.84.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:2c:32:e9:7b:32:d6:8f:f0:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=8a8d6d7c-3d0c-4f8a-9e4b-928a050bf302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:87:49:02:5e:95:83:25:b3:02:ae:92:4b:
                    aa:f6:71:58:a6:f7:ff:90:b3:21:ba:e6:bb:45:a2:
                    4a:e4:bf:dd:f7:56:b6:0a:e5:2f:f3:6a:6d:6c:ca:
                    c8:f7:11:b8:03:70:38:18:87:97:f3:37:8d:c1:2a:
                    42:2c:a8:09:83:4a:da:8e:81:0b:a9:65:47:c8:9d:
                    24:80:93:52:7b:1a:22:d4:15:89:a5:e4:1e:a0:85:
                    ff:68:32:4c:b6:dd:0e:c5:c8:d2:c7:54:4b:aa:8b:
                    63:4c:e0:e7:4a:ed:67:22:42:e6:e4:ca:d1:91:5f:
                    70:48:bd:78:29:cf:8c:30:aa:92:9a:0b:ed:b5:e7:
                    75:37:c3:aa:17:13:50:87:18:6e:c7:d9:5a:29:aa:
                    65:cc:62:bb:f0:89:5b:7d:d5:fa:4d:9c:08:b3:42:
                    c0:90:d0:81:10:5d:af:d6:fd:09:39:57:60:16:9b:
                    b7:0c:ee:a2:02:65:12:60:94:8c:45:30:4a:6b:f6:
                    22:45:80:7a:1e:09:a5:77:52:c1:59:76:1d:49:e7:
                    80:e2:f3:42:b1:25:4a:f3:d1:a4:37:78:a0:b0:c8:
                    91:bc:5a:53:8f:f8:7a:4f:c0:0e:85:35:19:54:28:
                    cc:0b:80:3a:0e:25:5b:71:69:fd:f0:53:38:d3:4c:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:89:AB:76:2A:B1:14:0A:B3:E4:F1:AF:20:7E:FA:B8:AD:50:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:38:2b:9c:0d:90:97:2b:74:9f:23:fc:2f:28:e9:d5:65:
         33:c8:31:09:b6:e0:d4:a2:8d:cb:c5:93:7e:6d:da:37:17:ee:
         c1:cd:8d:cd:ce:c4:8b:35:72:92:a9:18:f5:9f:a3:44:9e:9a:
         2b:de:1b:07:82:5b:38:6b:ff:af:7a:66:8a:a2:da:68:37:ee:
         17:ea:0e:72:0c:a3:df:e3:3e:a5:ab:36:d7:dc:bb:f0:56:03:
         fe:ee:cd:e7:5a:5f:78:96:31:81:1f:3b:7e:ad:e1:43:34:c7:
         a1:d9:d5:f8:98:d3:9f:24:b2:ed:4d:6b:73:95:ac:3d:55:b0:
         53:60:99:e6:d7:a5:ef:aa:f3:09:4e:48:d9:2b:f3:a0:6f:5e:
         1f:d4:da:85:b4:8f:88:0d:8d:db:f7:6a:ce:5c:dd:c1:9b:3c:
         89:f5:7a:15:aa:7f:54:ea:b7:c8:a0:56:86:b1:9b:9c:aa:cb:
         b8:47:17:de:74:c3:b2:60:f4:74:4c:0b:1a:9f:ea:7b:c7:c6:
         4b:a6:86:c6:ef:29:54:de:67:e7:a6:c0:e1:ef:26:cc:7c:87:
         38:a7:1a:47:59:3e:61:5e:5c:e2:a4:e8:33:8a:c8:94:27:40:
         fd:94:fb:75:6a:6c:17:50:10:8f:e2:8e:fd:44:b2:e5:18:65:
         20:82:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 07:13:26 2026 by rpki-client