Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/384f22a9-c932-3657-b15f-e4c3ea8f192f.roa
File:                     384f22a9-c932-3657-b15f-e4c3ea8f192f.roa (raw, json)
Hash identifier:          plZyp0mDOhIeTt93nr4OIdCtx/9DlKQn0uQoLiBfCXQ=
Subject key identifier:   90:AD:31:2D:E8:D3:CB:D8:93:82:6A:2D:57:B2:99:FF:7C:28:47:26
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D8EF5800FEB70C54FB7CFA600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/384f22a9-c932-3657-b15f-e4c3ea8f192f.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     2914
IP address blocks:        2001:418:1456:b15::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:80:0f:eb:70:c5:4f:b7:cf:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=25fc2ed0-25ed-42af-8b3a-c3cdfe7eaa49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:a3:b1:aa:9d:1c:de:81:f7:b2:7c:f2:46:
                    13:58:33:1e:7c:74:c0:85:07:10:7f:5c:0a:c1:7e:
                    0c:fb:9e:ca:e7:ab:28:f1:da:5c:f8:4a:9b:59:d4:
                    b7:99:69:8f:42:40:c2:7e:0c:e0:73:22:ff:4b:36:
                    39:43:a8:aa:97:78:81:1b:bf:59:a2:9a:29:5d:d4:
                    15:4f:c7:d4:b7:59:99:62:99:74:67:54:55:08:92:
                    b8:b5:f1:6d:5a:cc:d9:82:88:9e:a8:af:5f:f8:c0:
                    16:d4:7c:d2:eb:8c:68:53:8b:b9:e9:2e:81:8d:ab:
                    e2:cc:9c:78:21:c1:4e:3d:e0:3b:87:b7:97:14:79:
                    b7:6b:83:ee:54:30:aa:6b:2b:b5:00:33:09:5e:c5:
                    09:1f:98:dc:b2:09:9e:db:66:e0:2a:78:65:4e:f4:
                    92:6d:49:7b:8b:1f:77:67:c4:5d:82:3a:c6:27:3e:
                    c7:41:b4:e5:a5:5f:bb:2f:a1:f9:14:3d:1c:8d:5c:
                    e8:f8:a0:80:df:0e:0d:79:87:c9:3f:ff:a5:74:fd:
                    a7:8c:26:4b:f4:a0:35:7b:bb:30:37:9e:c7:7f:d2:
                    a1:0a:67:e2:a9:8c:91:e6:08:78:63:69:28:e5:44:
                    d8:0c:ec:3a:30:fc:de:c6:f4:a5:dc:f9:4b:37:95:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AD:31:2D:E8:D3:CB:D8:93:82:6A:2D:57:B2:99:FF:7C:28:47:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/384f22a9-c932-3657-b15f-e4c3ea8f192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b15::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:44:59:2f:32:83:c3:a5:42:7b:43:de:c6:51:c3:a4:93:c0:
         9e:3e:18:0b:eb:ff:d3:44:8f:3f:3b:ae:57:28:cd:13:73:3c:
         dd:c5:21:3f:ca:20:36:05:e7:1f:22:63:85:cd:01:8c:69:14:
         44:b1:35:c4:eb:b0:be:d5:65:13:8f:b2:72:a2:dc:d2:0f:40:
         3d:c4:16:c0:01:4e:1c:69:45:31:1d:21:3e:ec:79:53:dd:37:
         a0:63:db:a3:de:85:8b:af:8d:f3:6e:10:90:f9:9a:0e:4c:77:
         dc:1e:a1:ad:1a:dd:83:4b:1d:57:b6:b9:5f:3f:84:4c:72:40:
         3c:cd:29:86:27:17:a0:17:42:e0:72:68:7a:da:b3:d8:15:a6:
         b2:5e:48:14:06:be:e5:f6:8a:1c:68:09:23:7f:30:dc:28:7b:
         6a:15:76:47:7d:ad:be:ab:d1:64:8e:69:12:cf:d2:3c:67:d9:
         49:6c:97:60:ed:9a:a0:94:ab:4b:22:14:49:3d:30:fc:d6:eb:
         43:a7:60:73:24:78:75:6c:8c:3d:66:f6:94:f5:af:f3:53:d4:
         c4:72:d3:45:c1:1a:25:36:21:ad:52:f1:c4:53:9f:e1:04:98:
         32:f2:15:0d:e1:44:75:1f:ea:ed:8d:1a:b4:96:f0:4a:ae:54:
         ec:df:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 13:57:47 2026 by rpki-client