Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/440b8201-dbb1-302e-bdb2-ee022f5ce0c0.roa
File:                     440b8201-dbb1-302e-bdb2-ee022f5ce0c0.roa (raw, json)
Hash identifier:          SfqPp+kkUSmijR44afXNjV7x50UFvmy4h4vxk5ohs5E=
Subject key identifier:   58:92:79:70:BC:9D:85:3A:A3:40:2A:27:B6:CD:93:0F:CD:5B:40:C6
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5631F0F2CB1D4B14A7660480
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/440b8201-dbb1-302e-bdb2-ee022f5ce0c0.roa
Signing time:             Mon 30 Mar 2026 05:01:43 +0000
ROA not before:           Mon 30 Mar 2026 05:01:43 +0000
ROA not after:            Sun 28 Jun 2026 05:01:43 +0000
asID:                     35039
IP address blocks:        157.133.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:56:31:f0:f2:cb:1d:4b:14:a7:66:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 30 05:01:43 2026 GMT
            Not After : Jun 28 05:01:43 2026 GMT
        Subject: CN=9a77d201-c3f0-4c0f-94d3-54b5448c1009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:ac:0a:65:8a:75:84:80:d4:6b:2f:f2:b9:
                    54:42:b2:fa:09:32:7a:d7:1f:40:19:89:e3:d1:73:
                    21:c1:3b:0d:47:59:8a:18:25:13:f9:7c:20:01:6c:
                    60:1e:9d:20:5e:e9:1c:d2:74:18:6b:02:7e:77:34:
                    16:24:3d:ff:21:5d:47:66:5c:d0:4e:cb:ee:c2:ca:
                    83:c8:52:2f:1e:b6:ee:35:b3:57:95:28:05:cf:98:
                    58:a5:81:32:90:64:b8:22:7d:5d:87:a9:65:a8:d1:
                    b3:08:39:c1:a4:b1:93:ac:9b:d4:45:08:fa:66:8b:
                    d7:06:59:17:ce:05:7a:99:be:30:7d:86:7d:b6:b1:
                    01:3c:dd:72:09:27:ca:02:db:c3:37:c5:ca:9a:62:
                    67:29:be:07:68:39:08:40:c2:2e:ad:09:43:50:87:
                    f6:f5:a6:9b:bc:73:ca:99:18:38:90:74:a9:3c:8e:
                    29:a3:29:7e:80:f2:f1:b9:68:76:72:26:9a:46:0a:
                    4f:06:7b:fe:7a:72:56:0a:c1:19:31:5a:63:86:4b:
                    cd:df:42:f2:8c:1b:0e:94:02:e3:98:a9:b9:56:4a:
                    f0:97:c7:2b:4c:6d:ab:b4:bb:27:3e:d9:fc:9a:11:
                    03:a3:64:af:7c:19:77:c6:23:45:69:02:c5:9d:4d:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:92:79:70:BC:9D:85:3A:A3:40:2A:27:B6:CD:93:0F:CD:5B:40:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/440b8201-dbb1-302e-bdb2-ee022f5ce0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:c3:e1:19:ea:95:83:95:60:53:81:58:f0:4c:d1:b4:55:
         aa:8a:5a:5d:5f:37:7f:09:5c:4b:69:1a:7b:5a:2d:ed:b3:28:
         e7:7d:31:5a:71:bb:41:6b:99:bb:c0:f2:e2:6b:59:a2:0c:d2:
         6e:28:e1:33:91:a2:08:3e:b0:1f:d6:99:24:5a:4b:ae:00:53:
         38:f0:b2:40:b2:ca:db:27:8b:87:26:85:a9:f9:d2:5c:11:3a:
         a2:b7:ac:60:04:81:ae:0f:ab:1b:e3:95:34:33:8d:85:ac:a3:
         f0:7a:71:26:22:c8:d2:41:30:7c:da:4f:18:a8:fa:6a:ce:85:
         44:ca:c4:e8:8f:a2:38:64:df:d3:e8:2f:06:50:80:d9:99:c5:
         78:6b:49:46:0c:01:96:6d:d2:96:3f:83:5b:18:97:d1:9e:a9:
         42:97:9b:4b:99:87:f0:65:dd:89:48:42:f8:76:d7:d3:03:20:
         b4:98:79:8c:aa:37:7b:6e:25:7b:8d:3d:e8:0e:a4:73:bf:89:
         a3:54:d2:ec:c4:41:4c:77:b0:90:45:9f:0a:3f:05:f0:07:7b:
         51:64:27:ec:0e:71:78:8a:f2:5e:1e:5d:00:55:03:9d:25:8b:
         a4:88:5a:5a:b1:93:a0:f1:17:46:e2:3d:cb:e9:f5:9f:70:8f:
         cd:b3:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:20:23 2026 by rpki-client