Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa
File:                     4c160dcf-ed33-3837-89e6-a5d92394601e.roa (raw, json)
Hash identifier:          J4xyeKy+CI0yoNRyCtoK4XQTAjKxozlHaWKcmXUbKjg=
Subject key identifier:   56:E9:34:13:1A:FD:EB:88:67:F4:91:90:61:BA:EB:01:E0:CF:AA:79
Certificate issuer:       /CN=d2584a20-171d-406f-91e5-a70a19be13b8
Certificate serial:       010D0C9F4328584DE15083E704BBAA765E848680
Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     18540
IP address blocks:        198.148.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:83:e7:04:bb:aa:76:5e:84:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=ce3fe15c-1a7f-48b8-a5a5-d9065e051782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:50:76:32:dc:71:0b:1d:7f:97:e4:29:0a:
                    09:38:40:97:8e:20:d3:39:a3:dc:0b:24:d3:a6:41:
                    51:d2:4b:c8:5e:b6:fa:0c:9c:c2:67:8f:c0:a8:65:
                    17:af:be:39:ea:06:d2:69:47:3c:ab:13:5d:e1:cc:
                    da:39:65:1f:2d:d7:a8:89:58:91:f4:f9:78:15:f7:
                    35:e6:69:2d:0e:c6:2a:f4:f9:66:49:ec:c3:f8:d8:
                    cb:52:b9:20:89:b3:3a:70:7e:ad:79:0a:e0:9b:77:
                    e6:3a:5f:22:a7:c5:8d:6e:a4:d0:74:7a:a6:d5:07:
                    4b:08:80:90:85:a1:7e:20:a5:c4:6a:56:e2:71:ca:
                    2a:f4:13:19:bf:50:94:59:80:4a:21:ef:e0:7f:cd:
                    d3:1b:97:61:58:a6:83:7f:17:4a:dd:96:1d:98:23:
                    fa:ae:28:7d:89:2b:b9:46:4e:97:5f:06:57:56:dc:
                    5f:25:df:ca:12:69:e2:86:b0:a1:ae:58:52:20:92:
                    ab:1c:4e:5d:9f:0f:97:04:b8:41:5f:58:d5:29:35:
                    2d:8d:c5:53:d5:7a:30:4b:62:04:d7:ab:02:1b:a4:
                    f3:3c:63:70:e2:4c:22:cc:b7:42:fe:bb:0a:4c:6a:
                    ca:fc:e8:df:c0:43:4f:a2:e7:df:fe:0c:7b:a9:c4:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E9:34:13:1A:FD:EB:88:67:F4:91:90:61:BA:EB:01:E0:CF:AA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl

            X509v3 Authority Key Identifier:
                keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:85:d3:79:f9:78:94:6f:49:14:e5:d4:d9:d1:d0:40:b3:d5:
         5c:3c:4b:1a:6a:83:40:36:8d:21:73:3c:05:93:88:95:02:93:
         22:4d:3f:91:32:16:08:8e:fd:dc:95:e1:66:b6:fd:96:61:8f:
         be:95:71:09:ea:56:8e:b9:3d:be:49:13:73:9f:22:ce:18:4f:
         68:04:d2:1a:d7:65:ef:b9:be:79:a9:5f:89:7d:36:ed:54:02:
         85:cc:f6:18:2b:ff:00:38:9f:0e:49:ef:8b:75:4c:e8:21:45:
         5c:0b:de:b4:25:7b:d6:aa:e1:2c:8e:ee:7b:14:14:81:df:e9:
         1d:22:94:59:63:dd:93:1c:44:2c:e2:91:51:41:5d:c8:d5:92:
         77:a2:5d:af:63:8b:2f:83:c0:e2:af:2a:42:0e:e8:65:57:48:
         08:4c:04:f7:e4:35:0d:aa:89:d0:4e:67:54:3b:63:28:af:72:
         53:d1:1f:e7:2c:87:02:b8:c2:62:19:25:59:31:77:c5:78:38:
         15:d2:7e:2c:bd:84:13:2f:27:90:d7:53:07:f3:bb:31:5a:c0:
         9e:70:a8:95:cc:9a:3f:da:c1:1e:16:62:6e:6b:39:fa:49:f5:
         22:1f:36:d6:c3:97:fa:62:d8:09:f3:40:53:59:19:3c:c7:6f:
         8d:ae:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:10:35 2026 by rpki-client