Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
File:                     577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa (raw, json)
Hash identifier:          LevEfReRF3JJnFM1IuMDkcG8GpivsuNRaA3NKfTHp/o=
Subject key identifier:   7F:BA:5A:22:47:F1:88:AD:A5:1B:54:51:D9:E5:49:F7:5D:D6:0C:35
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D7F9A8CD3843997EF93C10000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     22006
IP address blocks:        165.254.238.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8c:d3:84:39:97:ef:93:c1:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=1e692065-30c5-4c74-9e05-f5cd490ac0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:63:fb:e9:72:ec:b7:fd:1e:8f:ed:f9:29:
                    34:24:b4:e4:40:78:4e:00:c0:89:13:4e:d5:d5:51:
                    b8:13:34:58:59:45:8b:09:ff:6f:b8:ae:f4:d0:fc:
                    d7:5c:5b:12:71:ea:b3:f7:30:9d:bf:42:4a:06:6b:
                    13:1d:57:86:b8:9e:aa:2f:50:2b:c3:15:cc:41:1d:
                    58:c7:56:45:3d:31:bc:55:7c:6e:b6:54:6a:ef:17:
                    c3:01:95:c5:d0:85:e0:ab:74:26:8a:6a:8c:90:dd:
                    70:71:e7:00:76:33:12:ba:17:03:cd:0d:da:ae:46:
                    22:06:8a:76:cf:e3:e6:58:c7:94:2a:ad:53:3b:a7:
                    b5:6e:4d:45:d2:2d:f5:c8:8d:b9:53:e0:54:56:72:
                    fc:1d:82:8c:da:0e:7f:88:91:88:0e:62:a1:84:a5:
                    52:63:c4:52:19:cc:2c:bd:bf:3d:55:9a:c3:49:5c:
                    60:29:60:c2:40:10:83:21:ea:e2:34:78:c2:6a:0c:
                    16:bc:fd:5b:71:13:d7:dd:e5:e5:8c:3e:28:1d:87:
                    98:90:eb:0e:ab:b3:9e:d2:71:73:8c:fe:b7:1a:54:
                    c4:d3:b1:08:50:e3:95:21:09:26:cd:e8:63:c0:1e:
                    06:84:97:f5:a0:2a:ad:d1:e1:d3:77:0e:ff:35:82:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BA:5A:22:47:F1:88:AD:A5:1B:54:51:D9:E5:49:F7:5D:D6:0C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/577c4ec1-42a8-36ba-a2d2-10b106f8a878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.238.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:73:54:09:a1:7c:4c:41:bf:8b:52:94:7e:da:3c:05:e2:0a:
         89:91:cc:f9:72:bf:53:04:ef:1e:80:70:b1:7c:17:aa:cc:e5:
         8b:1c:14:b0:c7:fa:47:2d:71:4c:34:bf:73:9c:48:df:c1:89:
         84:df:ac:60:49:b6:44:55:85:f5:66:78:76:a6:e9:3c:0d:5f:
         bf:ac:bf:52:69:ee:b1:93:d8:5c:c3:9b:a4:87:f2:bc:44:2d:
         b8:3a:c6:89:21:15:9c:a4:2c:bb:62:f1:77:c4:32:0f:8b:69:
         78:40:d2:53:27:10:51:93:87:bf:6c:3c:97:dc:ee:31:12:c8:
         c6:59:d1:83:79:7d:13:50:c4:ec:2f:d2:4b:72:38:30:30:dc:
         50:3a:33:a6:98:c8:fa:ac:e9:7f:61:c2:11:21:90:8b:84:b7:
         67:11:bb:69:29:b5:6e:7b:e8:22:ed:0c:9a:9a:a2:09:06:0e:
         70:6c:de:79:85:48:d1:83:b4:05:c1:3b:8f:b1:6e:8e:a8:48:
         7e:a8:4d:b6:5a:96:9f:b8:05:7a:21:88:00:1b:fc:30:bf:2e:
         cb:1b:7e:76:42:aa:09:f3:6a:fb:cd:7a:56:26:4e:29:ad:62:
         88:d6:0c:21:16:66:45:c0:71:d6:c7:75:91:48:04:a4:42:f1:
         fa:e7:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 19:11:53 2026 by rpki-client