Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/acd915b8-4bc0-3c7c-83a9-1a26d88c02d4.roa
File:                     acd915b8-4bc0-3c7c-83a9-1a26d88c02d4.roa (raw, json)
Hash identifier:          ddOatf3gYkBsul6PNPYgw5xuHCLZbVStDN5cl2/50Xw=
Subject key identifier:   CA:E0:7B:B8:2A:D9:51:A2:08:A9:8A:D9:7D:F3:6A:EF:DB:9D:FF:F6
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DC135C43ECD1CFA96DFEEA144
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/acd915b8-4bc0-3c7c-83a9-1a26d88c02d4.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22652
IP address blocks:        184.95.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c4:3e:cd:1c:fa:96:df:ee:a1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=4ec963b4-50ca-461f-b48b-f6e4094f0ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0d:86:e6:ff:a7:84:63:6b:bd:3f:1a:cd:c4:
                    6f:8f:71:03:98:77:21:4b:c0:ae:a8:8a:76:ac:8a:
                    8f:39:c8:9b:4a:44:f1:8c:72:80:9b:c9:e8:cd:31:
                    1f:49:eb:b7:fa:1b:4b:af:f1:cf:47:f7:5a:5d:87:
                    8f:18:c8:b5:ca:9e:b7:6d:e5:6f:91:4c:45:11:c2:
                    2c:08:7b:75:2d:7c:f3:3b:08:72:e8:0f:dc:02:60:
                    48:54:c5:ef:92:7b:c9:00:bf:18:32:54:b7:59:d2:
                    b3:e6:6d:e7:64:bf:dc:dc:79:8c:72:7b:ba:ac:ff:
                    a5:e4:ce:d6:f3:09:13:7c:aa:57:8d:72:da:81:5c:
                    d0:e1:1c:6f:55:d2:de:22:e4:77:48:e7:ee:af:34:
                    05:6b:d5:0d:1f:dc:fd:54:1f:ce:68:bf:30:4d:e5:
                    48:42:21:5c:7a:e2:c1:b7:08:32:10:8a:fc:61:b2:
                    33:c2:af:25:b2:cd:90:a4:af:77:09:a9:05:e1:0d:
                    1d:17:f4:a9:8c:bf:aa:af:29:b3:f7:bd:9f:58:ae:
                    4c:93:77:44:09:85:f0:f1:ca:ec:b2:7c:58:39:a9:
                    81:88:1f:bf:ae:dd:fe:fe:31:c4:37:67:2a:bc:23:
                    f7:81:01:9e:94:42:07:4c:61:72:ca:36:52:50:dd:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:7B:B8:2A:D9:51:A2:08:A9:8A:D9:7D:F3:6A:EF:DB:9D:FF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/acd915b8-4bc0-3c7c-83a9-1a26d88c02d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:eb:44:69:c0:bd:cb:e5:62:a1:e8:21:62:6c:f8:5e:88:
         5e:3c:33:03:6f:0d:34:5b:dd:d1:a6:82:77:70:e3:3e:57:40:
         24:15:20:34:23:cf:6c:8f:1d:80:b8:54:6c:41:bc:b0:b2:88:
         c9:a5:9f:60:10:cc:14:b6:c8:52:dd:a5:7b:8b:3e:59:f7:e9:
         6e:65:bc:04:05:7d:c2:19:28:71:44:6b:81:c0:24:59:18:80:
         d2:30:5e:c5:c0:22:ea:7a:94:b1:fb:1e:86:77:c3:d4:2c:cd:
         ea:ac:b6:ba:7b:4d:dc:3c:37:4c:e2:f1:68:a5:cb:15:62:a9:
         37:67:34:74:48:2a:2a:b0:8b:82:aa:3e:27:d4:97:a6:9b:c6:
         23:80:eb:9f:9e:54:03:bd:2b:84:fe:52:b9:57:8e:d8:bc:76:
         46:e0:17:15:e0:43:17:ab:3a:25:8f:31:9e:05:17:a5:f8:d3:
         d2:49:3c:ac:86:e9:df:3f:b8:7c:28:56:f2:52:ca:d0:22:4c:
         74:db:5a:16:07:a8:09:30:e3:c9:de:35:de:0c:15:e5:a1:c3:
         cb:ab:14:95:d7:e0:3a:38:13:56:f2:3f:34:cc:cf:86:ba:a8:
         33:e8:97:3c:c6:f8:db:a0:03:0f:96:f0:2d:81:3d:1f:09:eb:
         bc:54:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 19:33:07 2026 by rpki-client