Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa
File:                     4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa (raw, json)
Hash identifier:          az0ZvxmLsmlvtZ3nhhNItuyZBp1SENGmD97le/VQMKg=
Subject key identifier:   FB:88:97:F0:E5:C0:06:D1:5E:26:F0:D1:6C:78:61:DE:FC:57:52:B2
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584DA815860CE4C64BA680EFEB00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     394285
IP address blocks:        174.137.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:86:0c:e4:c6:4b:a6:80:ef:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=8b60bdd1-795d-4786-807b-d6cde303a7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:42:78:bd:62:51:3b:dc:96:f3:dc:1f:56:
                    da:cc:d8:6c:62:71:47:44:f2:87:8e:fb:2e:78:11:
                    9c:97:41:db:d2:69:27:e4:83:2c:57:7e:62:ce:2e:
                    2e:22:32:6d:7e:a0:64:32:76:a5:a8:63:f6:6d:00:
                    4f:27:1f:a7:4f:e4:2d:f9:ae:59:9f:a0:99:f6:e9:
                    91:fb:be:e7:92:72:53:dd:ce:7f:a5:f8:fc:df:d4:
                    26:33:a5:af:f4:c3:e1:1b:62:c3:68:87:03:f9:61:
                    d1:54:b3:0d:4e:76:75:f5:87:ca:4e:37:5f:24:a4:
                    3e:c9:e1:8e:38:bd:36:dd:3c:a7:87:97:bc:62:16:
                    9c:e0:c1:41:02:20:c0:4c:ff:45:2b:9f:a5:c5:1b:
                    a7:db:3f:5b:c2:54:66:e9:28:6e:2a:a8:5a:3e:62:
                    d5:e7:ae:8c:2a:d1:b7:9a:14:cd:df:26:90:09:08:
                    81:a2:88:6a:14:7c:c4:4a:de:78:84:48:fb:13:af:
                    fb:6a:f1:1d:06:bc:cd:2d:60:39:99:88:f8:16:3f:
                    bb:35:5e:e1:9f:d3:76:e0:0a:6e:fa:d8:10:3a:f6:
                    57:44:f2:24:7b:f3:dc:74:fe:6e:99:69:7f:6a:61:
                    66:a7:1c:00:d9:98:d9:29:da:03:16:01:9b:72:47:
                    c8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:88:97:F0:E5:C0:06:D1:5E:26:F0:D1:6C:78:61:DE:FC:57:52:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:8b:f7:25:52:bd:2f:78:03:8d:0c:d1:c5:3d:34:67:b7:
         0b:a0:24:a2:ba:1c:20:66:be:1f:c9:2b:5d:27:6f:dc:9a:cb:
         1b:b7:1b:4e:af:28:b5:6d:e0:2a:9e:35:62:ae:8b:59:0d:a0:
         e4:9a:1a:24:40:d9:01:f5:3e:2a:eb:4d:18:69:86:f2:ce:b5:
         fc:69:aa:71:fc:96:51:78:1f:1c:d6:b9:62:20:3a:12:ec:61:
         b2:ba:f4:23:44:9f:10:7c:6d:74:49:93:96:cd:c7:35:0f:b6:
         45:03:8d:1b:ad:5f:a2:c4:d4:e7:dc:8f:c8:85:93:7a:47:b4:
         0d:99:96:68:2d:a2:ca:f2:e1:ec:f9:75:16:1a:4e:13:9a:e1:
         ff:72:e5:2c:07:41:fb:c2:05:8b:39:fd:ee:99:34:f7:ce:af:
         76:12:9a:f2:fa:e4:e5:12:ee:22:a6:bd:8c:37:f2:96:e4:02:
         03:d4:47:28:ea:02:84:97:26:78:ca:48:9b:46:c7:a8:94:55:
         5a:7d:7c:57:46:6c:c1:39:57:74:81:9d:21:0c:2b:92:ce:ca:
         3e:6c:c7:04:47:07:c7:b3:e3:12:3d:c1:88:c8:28:e4:2b:30:
         e1:fd:e2:b3:09:25:f2:bc:7e:f4:46:0a:5d:ef:fb:0d:33:e3:
         ea:7b:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:02:26 2026 by rpki-client