Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/e97728b0-f49d-3778-a155-5799b5b534da.roa
File:                     e97728b0-f49d-3778-a155-5799b5b534da.roa (raw, json)
Hash identifier:          EWD4HNwIMYWxyUS8r/PupzDmgbf/8cB5nCsL3jPVFrQ=
Subject key identifier:   D2:21:A6:19:C4:4A:F4:EA:FB:CA:83:DD:D2:CD:98:29:8E:54:A2:A8
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584D8EF56277835BE82308976D00
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/e97728b0-f49d-3778-a155-5799b5b534da.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     395987
IP address blocks:        130.156.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:62:77:83:5b:e8:23:08:97:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=08e43ecf-72cc-42d4-8324-896b1f923a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:44:13:76:94:5c:44:68:45:57:a8:d3:f1:
                    5e:6d:05:aa:d6:25:16:23:d1:ae:d6:d3:e2:89:d5:
                    85:79:62:49:a5:f0:21:a1:02:ad:28:e8:2a:24:44:
                    c9:da:38:4a:6b:4d:2d:df:ad:98:76:d2:7f:b2:e5:
                    45:a6:21:a6:52:ea:71:52:0e:9b:f5:4a:c6:91:ed:
                    6d:d3:6f:e8:d8:c8:d3:f0:5f:24:b0:a7:3e:66:3a:
                    9e:7a:5d:fe:95:ac:39:36:0f:fb:e6:d5:29:66:a7:
                    e3:f4:18:6c:4c:62:9e:93:f0:c1:cd:d8:b2:c0:c8:
                    0f:d5:ab:3a:4e:f4:95:17:6e:d5:98:4b:be:5f:ff:
                    5e:9c:d0:a0:58:6c:ce:7a:ee:62:fc:ad:be:bf:f6:
                    de:f2:5d:1c:69:5a:45:76:8d:4a:24:f5:3b:45:34:
                    00:c2:23:db:5e:aa:ce:ce:6c:d1:8c:66:fe:d1:90:
                    43:b9:5a:5e:a5:d2:ff:8a:c1:2f:45:da:f6:9f:cc:
                    b9:a2:5e:e0:68:f9:36:07:b7:18:7e:56:74:94:ee:
                    bc:07:f8:1b:84:03:98:b7:74:83:44:6d:b7:d6:78:
                    a0:a8:8b:c9:34:3a:ef:d8:38:08:a7:d8:70:65:0e:
                    ed:4e:5c:a1:7a:45:92:55:ed:54:fa:e3:94:7e:32:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:21:A6:19:C4:4A:F4:EA:FB:CA:83:DD:D2:CD:98:29:8E:54:A2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/e97728b0-f49d-3778-a155-5799b5b534da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:44:fa:1b:a8:95:88:78:62:a3:cf:27:d9:a3:60:1a:e7:d3:
         3d:ac:35:92:67:6e:ed:99:57:68:b2:0d:82:54:34:fe:9d:da:
         aa:d4:26:67:38:66:7a:64:04:1c:1d:9d:a3:a3:2a:fe:43:78:
         d3:26:9c:b9:e2:ec:e0:ec:47:47:cc:28:8d:c2:65:2e:22:bc:
         81:0d:5f:35:ae:d0:b6:b7:80:a7:1c:f0:53:4f:e8:f2:ee:a0:
         ab:1b:77:2b:77:69:29:7c:81:1a:a4:4a:ef:86:8c:c6:9b:3a:
         c5:57:d6:1c:f2:d1:72:25:8d:74:9e:4c:4c:63:91:5e:b7:b0:
         e1:58:d2:3b:39:d7:91:e0:3e:a8:ef:93:dc:e4:59:78:fd:e7:
         9d:42:60:ba:1c:96:74:7a:2f:d3:5b:ce:0c:b2:17:ac:69:75:
         ea:c8:c6:2e:a1:8e:a5:e7:34:00:19:b0:de:f8:4c:b4:0d:13:
         37:6a:6e:cc:32:94:eb:5d:e6:84:eb:99:3d:f5:b2:08:50:37:
         49:0e:09:15:b3:c6:0c:8e:33:5d:44:b8:cf:73:eb:c7:9c:7f:
         4b:9e:29:08:53:ab:72:dd:3c:a9:c4:e5:ea:c4:11:0b:96:e9:
         a4:f0:88:b8:25:18:1a:5a:8d:98:4c:d8:fe:a4:67:c1:4d:f5:
         ec:65:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:30:02 2026 by rpki-client