Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/e3c8eb65-5995-380e-9c40-7d02136e19ea.roa
File:                     e3c8eb65-5995-380e-9c40-7d02136e19ea.roa (raw, json)
Hash identifier:          qsUYGR71751d/XDAUYUuMX3Ih0Ugjmn0VIJwbE8BXCo=
Subject key identifier:   D8:73:F7:B1:0F:82:D5:DA:E8:52:CE:79:F4:95:28:91:76:69:DC:8D
Certificate issuer:       /CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
Certificate serial:       010D0C9F4328584D703FE50217A3DD228EBFB200
Authority key identifier: A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/e3c8eb65-5995-380e-9c40-7d02136e19ea.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     40716
IP address blocks:        192.234.159.0/24 maxlen: 24
                          192.234.160.0/24 maxlen: 24
                          192.234.161.0/24 maxlen: 24
                          192.234.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e5:02:17:a3:dd:22:8e:bf:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=950b23a0-b21f-421a-a504-a610bc8ba944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:94:61:70:e8:8f:15:4f:b8:56:19:d8:e8:
                    c1:95:82:91:6a:28:d9:56:ff:62:52:7a:de:ea:99:
                    65:25:4b:3b:30:92:df:b5:5d:97:56:a3:a1:8d:a3:
                    46:57:65:00:99:4b:eb:2a:dd:d3:b7:c0:a5:88:dd:
                    b1:2d:9c:1c:24:e1:3a:82:0a:44:bb:12:5a:5d:29:
                    4a:1c:9d:20:34:3b:8f:cd:c2:1d:e0:4d:8e:95:af:
                    3e:77:c8:90:e6:45:4f:32:30:7a:38:7c:1e:c6:55:
                    c1:19:53:a4:9f:b9:21:e2:8b:26:5a:80:2a:ff:ce:
                    d2:04:5a:47:bc:7e:57:92:33:c6:26:d4:ef:da:9c:
                    38:1f:de:89:7a:80:33:7d:a5:1b:3e:42:2a:75:ae:
                    e2:d7:b1:b9:25:e3:49:0e:f6:d6:25:08:a4:7c:c9:
                    4e:d0:15:e1:a1:b6:d8:d5:d8:80:1b:61:55:13:ea:
                    f0:3f:86:3d:5d:04:85:51:88:f3:6c:cd:ac:27:b9:
                    51:58:61:dd:08:cb:8b:18:1d:c8:9d:41:c7:3a:a7:
                    fc:5a:0c:81:51:50:61:65:9a:af:84:88:f8:fd:8c:
                    04:69:fb:b5:bd:3c:75:85:d9:76:c6:9a:2c:cc:a8:
                    cc:0c:4e:ba:25:95:e3:42:5b:4e:8c:65:c8:71:ef:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:F7:B1:0F:82:D5:DA:E8:52:CE:79:F4:95:28:91:76:69:DC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/e3c8eb65-5995-380e-9c40-7d02136e19ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl

            X509v3 Authority Key Identifier:
                keyid:A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.159.0-192.234.162.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1a:9d:81:ab:9c:72:3d:78:41:29:af:4b:17:5f:6d:8a:2a:
         f9:86:b5:6d:a0:7a:7c:3d:06:fe:fb:2b:85:cb:8c:e7:4a:af:
         62:05:9e:f1:22:9b:3b:1a:05:6e:5b:fd:c1:53:fd:6f:8a:de:
         e6:48:d0:42:89:e8:8f:77:e7:7d:d9:3e:94:69:b6:c6:6c:66:
         1c:1c:11:74:a3:5e:81:85:45:03:a5:68:f6:df:00:8d:ed:1c:
         14:38:d6:dc:2c:be:18:25:b6:04:81:2b:67:d5:da:15:75:2b:
         e8:80:c8:2c:54:57:b7:56:8f:83:eb:8a:b9:fc:84:9b:c8:d6:
         21:8f:64:a1:70:fd:40:e2:d4:23:d0:6d:e8:c0:dc:91:48:95:
         c5:6c:8f:f6:24:07:a0:f0:4c:05:29:23:8a:80:61:1b:eb:a3:
         c5:1c:c0:b5:fe:1d:94:60:86:11:d8:75:ae:76:6f:b3:c2:b3:
         b2:9a:d9:b9:93:46:44:0e:f7:76:13:60:75:12:bf:ae:dc:a4:
         02:d8:8e:25:5a:e1:9e:7f:14:7e:3f:e7:4e:fa:99:ee:d2:ed:
         1b:c8:83:c7:dc:a4:5f:c8:4d:a1:6c:5f:89:59:b7:59:13:93:
         3d:08:93:d3:fb:81:52:62:44:05:df:46:29:52:fc:5a:1b:08:
         e3:c1:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 23:44:45 2026 by rpki-client