Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa
File:                     b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa (raw, json)
Hash identifier:          yM9S1KicT+NuHd8Tmq54kPo9SVqzZeOaO/gg+9BP9kI=
Subject key identifier:   33:81:D7:B4:30:EC:1B:48:CC:E6:3B:73:8E:1B:8A:4B:7C:30:38:12
Certificate issuer:       /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
Certificate serial:       010D0C9F4328584DA6B02384C8D2647CB4A08580
Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     53823
IP address blocks:        198.15.0.0/21 maxlen: 21
                          209.172.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:23:84:c8:d2:64:7c:b4:a0:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=f8ab6ab8-e011-4a15-8ab5-2e863567e428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:6a:54:c3:47:81:77:bf:a5:75:a8:d3:66:
                    bd:02:b9:88:9a:26:86:5c:09:c9:25:d6:c3:57:2d:
                    14:20:98:73:c8:c9:0a:f8:d9:c2:53:ec:f0:1b:ef:
                    69:4f:cb:e4:2e:90:c3:97:52:5d:ad:dd:f0:70:1a:
                    f0:46:75:48:0d:0a:b5:9e:ce:8d:cd:e6:5b:be:74:
                    23:0c:d9:b4:db:ec:7b:51:a7:c1:1a:93:07:c1:29:
                    38:24:c4:0c:80:25:4c:f1:17:92:4b:b4:74:7d:5f:
                    58:f2:2a:94:83:73:61:bb:31:78:34:f2:76:52:ab:
                    98:eb:35:21:c6:6f:ad:e5:c0:8b:62:f9:38:a7:9a:
                    1f:79:4e:9a:c7:5b:30:af:70:c9:c1:58:c4:64:d8:
                    1a:fd:57:68:13:9e:bf:eb:20:c4:53:b7:8b:18:99:
                    71:ec:32:30:7c:6d:b2:9f:43:d6:87:31:28:f5:62:
                    ad:65:92:48:ef:ac:92:d7:e5:e9:24:56:9b:4f:6f:
                    c0:83:2e:01:01:66:89:39:d8:af:9a:ef:34:71:b0:
                    8c:ea:23:88:08:19:8e:e9:46:4c:91:c5:59:68:86:
                    3c:3c:6c:51:22:e5:b9:d2:72:a7:a8:65:84:28:4f:
                    c6:1b:ed:6f:93:e8:65:e7:43:00:f6:e8:2d:0f:b2:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:81:D7:B4:30:EC:1B:48:CC:E6:3B:73:8E:1B:8A:4B:7C:30:38:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/b3ca68e5-3b48-3c91-82a3-da7b5ab2a503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl

            X509v3 Authority Key Identifier:
                keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.0.0/21
                  209.172.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:cc:c3:62:b1:87:64:ff:e5:d8:fd:6f:bc:3a:16:a5:63:67:
         5d:ad:32:39:52:96:7b:28:56:9a:83:38:f3:3b:f3:33:1d:6d:
         77:0b:8f:e5:e9:0a:9c:a9:29:f7:5b:36:d4:69:46:34:93:85:
         a8:5d:8e:6c:3d:99:5f:31:43:8a:96:25:65:46:5c:f3:a5:36:
         87:6e:be:ba:25:04:38:0f:80:2a:45:de:b5:72:3c:75:f6:56:
         a0:90:eb:4d:aa:77:07:a9:79:a5:5a:db:cf:e2:30:79:79:c2:
         40:6d:67:06:cb:88:71:63:0d:09:41:cc:3b:68:f4:f3:3b:f7:
         62:35:7c:04:bc:65:35:ae:a1:07:fc:2e:19:e7:ad:61:ab:64:
         f0:04:47:88:c9:26:53:31:31:c8:8d:e1:39:ab:62:ad:14:39:
         68:82:aa:e7:0e:36:0d:27:0f:1a:e9:52:f2:3b:f7:8c:6e:96:
         ce:78:17:40:26:9f:59:e3:5e:6b:cb:b5:24:e1:84:56:43:a0:
         cf:6b:c2:72:88:0a:82:6c:79:61:cb:b0:39:6c:dc:b4:fa:6d:
         9d:0f:4f:eb:1b:8d:19:98:a5:3c:67:ed:a8:aa:da:0e:a1:57:
         c6:22:28:75:d0:eb:e4:d4:5b:73:22:8b:37:69:02:ea:a9:e4:
         6b:5d:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:02:54 2026 by rpki-client