Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa
File:                     0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa (raw, json)
Hash identifier:          b4VoklmwclyVrG62ElGJALF3F3lE7+iM4+KecrErsCY=
Subject key identifier:   87:83:7C:FF:BB:69:F3:AD:BC:63:85:7F:1C:C0:2C:C5:A3:0D:F1:F7
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584D8AC559A84B13BFA3427ED680
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     21713
IP address blocks:        104.160.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:59:a8:4b:13:bf:a3:42:7e:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=c93fa564-34e5-486a-b414-9d138fbb1a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:1f:f2:f8:af:b7:c2:b7:42:b0:b4:7e:45:
                    d6:0a:e1:e2:a5:6a:a2:a9:9c:33:4f:dc:23:30:f0:
                    5d:c4:eb:a3:35:9b:8e:ab:0e:77:7e:6a:05:72:fa:
                    af:06:ca:52:4b:f1:ab:02:ff:a0:95:93:b3:75:6a:
                    0d:79:e7:7f:fa:b1:f0:86:30:39:dc:bd:cc:99:dd:
                    cb:e9:cd:dd:68:d8:19:e0:33:7c:07:21:8c:ac:3d:
                    e3:38:a6:5c:4b:6f:9c:b0:59:c8:5a:bf:55:9f:e3:
                    94:2e:26:9c:9f:69:6c:20:f3:1d:64:c0:d8:72:74:
                    f6:31:2e:bf:b6:ae:b5:9a:3a:20:a6:cf:0c:f4:51:
                    71:b0:c0:31:ba:34:a5:4a:cf:37:38:6b:68:da:75:
                    0d:ac:94:20:c4:63:2d:38:e1:16:58:77:43:41:fc:
                    e9:a7:d3:de:a8:47:a8:3d:b3:9b:52:55:3d:72:04:
                    99:bf:fe:62:8e:bc:24:e5:8d:79:52:8b:bd:29:30:
                    ab:8a:e4:30:03:9a:87:6f:29:4e:ca:1b:1d:3d:59:
                    cb:bb:51:29:1f:e0:a0:96:4d:f5:fb:2f:74:30:65:
                    3c:89:f9:11:d8:c4:ec:92:43:90:bc:b9:0b:ab:56:
                    ab:1d:9c:1f:20:75:07:1a:c1:20:66:2e:d7:1e:14:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:7C:FF:BB:69:F3:AD:BC:63:85:7F:1C:C0:2C:C5:A3:0D:F1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/0aedd38f-4456-3641-9de0-c6d0c9a9f771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:4c:c8:71:b1:a7:c6:57:b1:cc:54:a2:8a:0d:92:6c:ff:
         5f:eb:36:13:37:5f:94:cf:eb:02:31:ac:24:06:72:61:38:2c:
         f0:e7:8d:67:03:50:5f:c0:27:03:89:5a:58:d4:77:51:a9:96:
         d4:75:55:51:b6:48:8b:90:df:cc:07:da:10:28:1b:ec:f6:d8:
         36:ae:f9:a0:f6:e7:12:9e:d5:f1:21:31:f0:96:64:be:75:5c:
         d7:22:98:52:2a:9b:85:4a:94:68:98:92:e3:94:1d:6e:e3:00:
         6d:87:81:b2:1e:0f:90:50:2c:09:d8:ae:70:cd:8e:0b:17:fd:
         5f:d8:61:2b:98:fe:53:61:39:38:7b:bf:ca:25:31:66:a3:75:
         4d:66:11:80:b2:d1:16:61:02:1f:6c:4b:b0:f7:a4:ed:da:bb:
         31:48:65:4f:a0:5d:88:9c:38:7a:ce:bc:c2:69:b5:88:25:9f:
         3d:4d:ff:4d:d6:a9:ae:68:97:e2:da:8d:3a:f2:9a:66:0d:5e:
         b4:a9:b2:cb:92:59:0e:53:24:a5:ba:bc:00:9b:eb:e3:fb:56:
         2e:ce:88:63:ce:6b:6d:97:26:ca:25:9c:85:63:c6:46:20:44:
         e0:0b:0f:1c:1e:fc:37:0a:a9:48:6d:0a:36:5d:e5:5b:15:52:
         9c:a6:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:10:10 2026 by rpki-client