Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa
File:                     4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa (raw, json)
Hash identifier:          YcXnqHUrxJZ8UHfhA9/vHolV/D5FjBQ/iD9Io+TASWY=
Subject key identifier:   CA:8D:31:23:59:40:4E:70:67:95:FB:79:2B:5A:41:8E:76:0B:59:E6
Certificate issuer:       /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
Certificate serial:       010D0C9F4328584D8EF55EF6598E829309F58C00
Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     22851
IP address blocks:        198.180.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5e:f6:59:8e:82:93:09:f5:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=129fbef6-cbbd-4cac-be7c-fa3cb517b91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:b4:1b:0f:16:a2:5a:4a:90:7f:5c:c3:41:
                    d5:b5:78:2a:bb:ca:aa:1c:e4:c5:eb:39:44:ee:db:
                    99:46:d8:0d:f0:cc:5e:ff:5d:86:f5:6e:b4:9a:b4:
                    0b:15:29:84:3b:12:86:ba:8a:1c:0f:90:e1:e5:3f:
                    55:db:4a:3c:70:03:6a:aa:28:d0:93:79:e2:4e:a5:
                    4d:5e:03:2b:1c:e1:3a:a9:e6:06:2b:0e:a0:0a:ff:
                    d0:d9:90:60:35:76:85:83:b9:ca:10:c4:a6:f4:4b:
                    2f:7c:97:75:d7:f3:40:6f:69:fa:a1:2d:38:36:1d:
                    a8:ac:03:dd:01:b7:11:31:23:28:f8:7c:0f:f4:0c:
                    60:08:88:d1:3d:31:b3:4c:34:30:9c:c6:8c:34:31:
                    99:a0:bc:ac:12:dd:94:b7:b2:39:bc:9f:cd:ff:bf:
                    a0:7a:b3:4b:50:4d:4d:b2:51:ec:f2:51:75:49:eb:
                    d4:41:10:6b:33:6a:d4:f4:54:84:e1:db:01:6d:05:
                    04:17:57:9c:f6:28:da:da:16:92:39:e6:c9:59:47:
                    d2:db:05:d0:8b:bd:b1:f0:9b:69:20:da:73:9f:28:
                    64:fe:8b:90:3f:71:48:3e:ad:9a:ac:b3:35:c6:92:
                    5e:8f:22:f7:14:61:12:93:9c:02:91:5f:fd:ff:ab:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8D:31:23:59:40:4E:70:67:95:FB:79:2B:5A:41:8E:76:0B:59:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl

            X509v3 Authority Key Identifier:
                keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:54:cb:c8:69:fd:66:eb:23:6b:2d:18:33:db:54:28:be:
         25:74:a0:42:a0:8b:fb:6f:1a:d1:27:72:de:11:46:eb:c0:f8:
         08:00:fe:07:45:03:cd:2c:5c:82:f9:ef:a5:74:e3:95:f6:45:
         06:33:61:2d:0c:44:3b:33:0d:9f:bf:8b:c4:92:70:f2:ac:d6:
         45:67:0a:a2:63:c8:77:00:76:ae:e2:87:cd:7e:f6:c3:ae:4f:
         f6:a9:73:59:41:0a:72:4f:ed:fc:76:7a:3b:48:a1:d4:d3:9d:
         21:8c:21:e4:71:69:33:f6:c5:5f:8c:ae:f3:5c:6d:dc:ba:64:
         14:67:1b:10:d0:73:71:51:cd:2b:2b:17:da:e8:ec:fc:3f:b3:
         c9:7c:ad:fd:cf:2b:4c:c7:0f:e7:77:b7:ab:42:ec:89:bc:b6:
         5a:de:e2:d3:0a:c3:d4:71:e4:f5:c2:55:42:43:a3:fe:6e:9c:
         f6:39:5d:a3:b3:e9:97:74:0c:05:dd:93:d5:a1:4d:16:ba:1a:
         7b:e2:e3:25:e3:62:5f:07:48:06:6e:40:e9:c1:2e:45:9f:22:
         10:2d:3b:b9:0a:86:de:92:39:42:6c:4e:df:38:e5:36:b6:9b:
         b4:fe:5b:8b:c5:da:2a:2c:78:dd:e6:09:74:ef:b2:17:1a:a8:
         39:1a:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:27:41 2026 by rpki-client