Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa
File:                     9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa (raw, json)
Hash identifier:          NZk67kIO38IF0vyT05/XOtkNeQgYBsbQkXL1R3CEi8s=
Subject key identifier:   35:89:1D:4C:9E:C2:B2:17:20:5E:F2:FB:00:34:6B:0F:D4:AA:95:8F
Certificate issuer:       /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial:       010D0C9F4328584DD625B523D430F1B0CC1F4830
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        131.226.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b5:23:d4:30:f1:b0:cc:1f:48:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=48f2d26c-dd30-48d9-955f-136702d46ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:2b:63:0d:74:b0:a7:2a:99:f0:4b:d8:94:
                    a2:b1:6c:f8:51:61:3f:61:e5:f2:03:63:b5:d5:ef:
                    dd:ef:d1:3c:d4:67:4b:72:16:ae:eb:10:ca:65:8d:
                    96:5e:b6:d7:81:af:d5:9e:fd:4a:6a:0f:16:77:5b:
                    96:f8:1d:79:78:95:96:95:6b:85:7c:9a:17:53:12:
                    48:77:cf:15:ed:aa:fd:03:ed:21:da:5a:ae:99:c5:
                    f6:b5:94:16:d7:ae:a0:f3:a7:b4:b4:09:1a:29:85:
                    35:79:fc:e4:e9:dc:c0:92:1a:0e:86:70:25:ba:b7:
                    a9:ee:5f:b1:70:5a:d1:45:d8:9a:91:12:99:53:8a:
                    36:17:7c:1a:47:2d:c8:ee:ae:f8:bd:41:c7:10:0d:
                    c2:ae:d0:a5:77:a4:ac:52:66:f3:1c:4d:5d:c6:7b:
                    94:56:bb:91:e0:1e:86:46:66:c6:b6:90:49:d8:1e:
                    83:c9:0a:b2:06:02:42:c6:86:96:8b:cf:4e:c7:99:
                    32:b4:87:5f:37:5e:01:a1:86:69:b2:77:96:da:65:
                    1d:47:f5:3a:de:81:a4:10:22:9f:d2:7f:11:ec:6e:
                    82:c9:fb:ae:f8:85:8d:7c:2d:f0:be:bd:44:5e:5c:
                    16:a5:ab:b8:be:dc:de:80:5a:32:b5:26:51:61:78:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:1D:4C:9E:C2:B2:17:20:5E:F2:FB:00:34:6B:0F:D4:AA:95:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl

            X509v3 Authority Key Identifier:
                keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:86:5b:11:8d:96:6c:48:30:86:71:d7:a5:d6:e2:99:51:
         91:ac:46:45:1a:2c:24:5c:ef:6e:7b:fa:10:8c:cc:af:37:d3:
         83:d4:72:76:ff:ce:45:27:de:a5:b0:5b:0c:e6:86:b0:95:ae:
         1e:ee:00:82:1c:d7:61:09:95:7d:8c:9c:10:89:f0:c4:57:5c:
         48:d7:81:c5:e1:79:51:b3:ce:3f:8f:16:2e:25:1f:b8:4b:42:
         d4:31:30:2c:04:ec:e1:45:c8:ee:dd:b5:29:7f:83:ff:b9:39:
         9c:1f:3a:9d:03:46:0a:45:93:34:e1:fa:cf:03:69:6f:82:ba:
         a1:7d:83:fe:7f:69:01:37:97:5d:06:f0:d9:cc:0b:9a:33:60:
         6c:ba:99:df:ac:5b:e8:9b:b7:32:9c:f3:87:77:0f:1a:dc:53:
         4d:dc:36:b9:73:39:c8:e4:9c:93:6c:43:c5:4e:48:72:4b:8a:
         7a:4e:d5:38:12:dc:b0:72:e9:76:20:40:7f:9e:3e:8b:46:35:
         7c:db:3e:75:bc:03:27:0e:6e:b2:3f:60:ff:f3:25:6f:16:f9:
         5e:c6:d2:22:c5:d2:3f:52:84:0d:81:59:eb:36:ee:5b:47:f3:
         4d:26:04:68:fc:46:ce:cb:35:11:c6:bd:91:b8:a3:44:b6:11:
         f4:fc:4c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:39:10 2026 by rpki-client