Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
File:                     d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa (raw, json)
Hash identifier:          cie+INUhkA6YHrPkQ/gxDupknMEPA+XgLeddpIJo+v4=
Subject key identifier:   1E:3C:83:8E:A8:51:98:F4:C1:B5:73:1C:B4:06:C9:E6:17:47:AD:23
Certificate issuer:       /CN=6526224a-84e8-40af-a273-87e57f2e0cc0
Certificate serial:       010D0C9F4328584D5B4FA1D1E8619EAB700843C0
Authority key identifier: 65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     8075
IP address blocks:        144.203.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a1:d1:e8:61:9e:ab:70:08:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6526224a-84e8-40af-a273-87e57f2e0cc0
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=6ce1de38-e3b9-4083-9775-9e44e299269e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:15:6a:d2:9d:1e:83:2c:be:dd:96:4c:d4:8b:
                    0b:6f:8d:d4:87:e8:19:c5:f0:bc:f8:4a:2d:b4:9e:
                    6e:3f:df:d9:c9:5f:cf:5d:93:6d:23:13:23:7e:52:
                    d9:f0:c1:b3:54:71:19:31:d8:73:14:fe:b0:66:1a:
                    74:26:2e:fd:85:95:7b:72:1a:4e:ba:65:d7:ca:db:
                    b4:0d:26:f6:ee:51:4a:a6:05:d8:52:d4:3f:15:8f:
                    96:ce:9a:ca:34:6b:ce:f3:1d:ae:ba:bf:33:9b:4c:
                    84:f9:79:a0:b5:5a:39:69:e8:12:54:aa:9f:6f:d8:
                    f7:e4:79:ff:52:71:0f:46:b4:05:74:6a:da:af:f2:
                    d3:f4:54:a2:bd:ee:33:25:4c:e1:8c:2f:52:d2:c5:
                    aa:5c:3e:1b:55:84:84:bb:30:b7:96:87:d1:40:07:
                    b0:01:aa:ee:79:00:3b:e4:12:24:84:60:d4:e6:3d:
                    37:96:e6:9a:78:10:ac:6b:37:3f:87:30:a2:14:e3:
                    cd:5f:9a:e8:b6:e2:cd:b9:27:75:5a:d4:af:fd:54:
                    30:33:ac:16:73:48:fa:41:dd:e8:f2:08:98:df:01:
                    94:c6:6f:83:45:3a:fd:f4:03:60:8b:49:98:20:f2:
                    ee:cf:94:b7:38:74:03:0f:f3:fa:c9:fa:e8:78:f2:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:83:8E:A8:51:98:F4:C1:B5:73:1C:B4:06:C9:E6:17:47:AD:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.203.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:f8:9c:a1:4a:27:db:42:c5:91:c1:c2:47:41:3f:9a:70:
         a1:bc:7d:e5:f3:be:5f:bb:98:0c:01:e8:17:d4:ab:d2:b1:99:
         54:1f:9a:25:ce:c9:27:eb:97:3e:d2:1b:01:19:e3:1d:7e:04:
         6e:78:43:a9:c6:97:9d:11:bf:a3:05:f0:1f:a1:e5:cd:d7:32:
         d8:99:8f:11:4a:d3:a5:1e:6e:50:64:0c:d3:e0:11:f8:3a:ab:
         d6:f5:39:df:8f:42:f9:1d:92:5b:77:ef:d3:9a:45:9a:0b:da:
         c1:47:58:39:4a:88:20:36:f2:d5:b2:7c:24:27:ae:15:64:88:
         67:b8:06:b7:31:bb:0d:9a:ba:33:0b:62:51:26:80:d8:7f:d0:
         32:16:ea:67:6c:47:12:62:cd:a7:98:be:90:e2:8e:1f:fa:c5:
         85:b7:14:f7:21:0c:bd:34:09:1e:c0:ba:f6:80:75:f3:29:7b:
         cf:41:39:9a:a1:a5:8f:cf:ae:7e:87:80:72:7e:66:20:f8:a6:
         c8:5b:df:3c:ca:97:2f:9b:ac:1d:f3:a2:c1:32:ef:08:5b:0b:
         5b:cf:fe:3d:1f:33:52:7d:b0:e8:90:c7:19:4d:d8:2d:60:1c:
         ab:77:c1:2d:0f:60:8c:86:f8:4c:6a:bf:fb:42:70:b6:54:d9:
         5e:8c:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:32:05 2026 by rpki-client