Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/510f148b-aec5-3d0a-aec4-29707be362c0.roa
File:                     510f148b-aec5-3d0a-aec4-29707be362c0.roa (raw, json)
Hash identifier:          NYbSyTvFdh9wqEzDhts81G0X4tG4NEdeJfFj55s21Wk=
Subject key identifier:   39:CD:83:8B:70:E5:B2:8E:40:7E:4B:B5:AA:C4:B7:C4:E6:91:9C:5F
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584D6EDA625BED37C334F4475200
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/510f148b-aec5-3d0a-aec4-29707be362c0.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     46566
IP address blocks:        96.2.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:62:5b:ed:37:c3:34:f4:47:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=e4d6c489-cedf-4aa9-8843-2ffef2bde04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:8a:6b:79:7b:e6:c5:da:df:79:c2:f2:7e:
                    45:15:92:97:6a:42:39:8e:fb:06:2a:b5:af:f6:f4:
                    86:1f:8e:3d:ad:b5:af:fd:3f:8e:b5:65:fe:3b:39:
                    3b:d6:50:87:7a:6f:9a:eb:81:91:66:cc:5f:61:a9:
                    76:bb:71:10:99:5a:06:74:f1:af:59:cd:77:51:81:
                    e4:18:b4:9c:4c:00:ab:82:b9:bc:e4:f1:4c:9c:9d:
                    ae:a4:12:de:b1:30:b1:8d:f7:2f:6a:f7:15:c6:9e:
                    7d:8c:94:67:43:b3:76:a5:28:a9:d2:6b:f1:e2:ec:
                    24:a6:4d:0c:c1:4f:07:34:9a:b4:4c:5d:90:27:4d:
                    c0:4b:b8:9a:70:fb:f0:0c:81:fd:44:4b:97:57:6b:
                    fc:c2:f8:5f:e2:b4:06:2e:9d:a9:fc:73:89:a8:e9:
                    23:f8:6c:ea:c2:d0:a4:ed:ee:a5:c5:d6:33:db:85:
                    cb:dc:5f:ee:21:e0:13:bf:be:95:37:56:8e:86:52:
                    07:0a:b5:32:ae:d4:c4:c1:12:53:f2:13:6b:10:f6:
                    95:45:84:89:85:f4:97:53:df:39:75:02:e5:ac:d1:
                    f1:73:2b:01:ef:95:3f:1b:32:a5:89:fc:9b:9c:53:
                    26:92:64:f7:b8:00:30:a7:6e:c4:42:44:06:25:4e:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CD:83:8B:70:E5:B2:8E:40:7E:4B:B5:AA:C4:B7:C4:E6:91:9C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/510f148b-aec5-3d0a-aec4-29707be362c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.2.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:ba:50:d8:33:50:de:aa:96:18:f4:8d:c2:4d:2f:c8:67:
         99:5a:67:59:d5:6a:2f:96:93:21:64:fa:ae:05:10:b6:15:10:
         b6:fd:a1:79:54:fe:48:bd:62:a9:89:1f:22:3a:23:bf:4b:49:
         f5:8f:8f:5c:02:fa:3b:cf:aa:8e:92:15:48:ab:60:2b:57:a7:
         30:36:6e:4b:2f:e2:54:c5:76:46:97:d0:00:6a:90:4d:69:4a:
         80:43:c9:b3:44:a7:81:89:d4:28:ac:68:25:52:27:a1:c1:8e:
         11:cc:57:bf:82:d5:6a:c0:9c:8c:64:98:6d:04:47:01:5b:16:
         42:7a:29:8c:b9:21:d1:bd:1e:ad:38:55:d7:ba:9b:69:51:63:
         0b:50:df:f3:bc:50:77:18:ca:a4:cf:75:cf:63:d5:f4:c1:c9:
         06:05:50:2c:fa:29:57:48:9b:9f:1d:8b:6b:64:b7:b6:3b:8d:
         40:fe:be:eb:c0:66:f5:42:d4:e1:a6:9b:28:6d:6d:a5:07:41:
         2e:36:31:88:57:a6:21:3a:9e:8c:61:b4:b7:c1:60:a7:a0:be:
         c3:2f:59:fd:b4:74:43:00:03:12:e2:0b:79:a0:a5:50:b2:83:
         45:d6:68:a1:5f:4d:d0:5e:90:2a:ab:98:cb:2d:0a:98:f5:84:
         d1:ce:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 08:28:43 2026 by rpki-client