Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
File:                     01949cb6-dbef-38e7-b253-ca7fee6dea68.roa (raw, json)
Hash identifier:          X/dQl+kI/5o1g+FQPP7VDRGxeDz8e1q0dE8MKEQAkQA=
Subject key identifier:   8A:76:6A:AA:38:E6:85:C4:17:11:60:C1:BC:AC:10:B3:C3:BB:01:36
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584DE580850DFA654B0FA0992D40
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     11233
IP address blocks:        162.255.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:85:0d:fa:65:4b:0f:a0:99:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=cb5bb672-4d7f-4f50-a463-4147a6e7bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:b2:2f:9f:e0:ef:dd:a1:7e:35:28:44:b5:
                    bb:01:bb:d7:4e:8b:88:51:c5:f8:a1:53:5c:7c:7a:
                    df:5d:b1:35:b8:18:cb:84:9a:fc:b4:ac:04:56:16:
                    2d:a9:b3:98:b8:bb:f6:03:52:65:7b:ef:a3:5f:9c:
                    9e:ff:d8:21:d9:c4:8e:ba:c3:5a:b2:77:82:ed:4b:
                    22:15:a4:89:b5:25:5c:19:92:d8:56:a8:0d:86:52:
                    12:95:ee:08:52:2d:7b:93:aa:72:ee:97:cc:49:9a:
                    da:6d:81:12:7a:fe:e7:0b:1b:01:c8:99:db:b3:ce:
                    df:ba:6f:14:b8:52:65:a1:61:72:4d:44:dd:4f:ae:
                    44:fc:33:4f:d2:58:6d:5b:e6:55:c6:33:d0:97:8b:
                    42:f0:b5:ec:24:9f:84:ce:db:a0:58:2b:93:4b:2c:
                    c2:18:cd:86:84:a7:d2:c5:6b:43:64:0e:34:77:68:
                    14:82:e9:00:39:94:0a:ef:ad:9e:f9:86:e5:46:a9:
                    5e:94:7e:7c:f0:15:e7:1f:d6:d2:c2:aa:b5:43:01:
                    01:ba:42:24:cd:13:90:c6:99:c0:e9:82:44:22:83:
                    cd:6e:18:72:eb:46:24:47:f5:05:81:28:00:d4:bf:
                    88:da:69:4b:b9:b1:a5:88:a3:64:48:0a:4f:5c:47:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:76:6A:AA:38:E6:85:C4:17:11:60:C1:BC:AC:10:B3:C3:BB:01:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:63:68:e9:80:a5:0a:5d:11:bf:d7:5b:b5:80:39:6d:a8:38:
         15:45:1c:71:62:c8:c2:0b:44:d8:b7:42:c5:d0:a1:35:03:4d:
         69:08:1e:b5:e6:e0:63:a1:a8:5d:1a:c7:1d:b1:f2:53:95:77:
         00:73:78:e0:6d:99:ce:53:9b:4c:ab:1a:2a:41:34:0b:10:90:
         db:55:cd:be:e3:85:f7:e2:4c:23:f3:50:17:53:bb:f3:4c:c2:
         05:bf:31:c3:73:b3:50:cc:13:dd:06:9c:3a:d1:b1:f9:60:76:
         a3:5b:b6:95:51:5a:59:61:15:1c:f9:c4:5f:07:54:7b:b4:59:
         12:29:c3:8c:f1:a2:14:4f:79:65:19:85:e4:4c:ac:fe:55:a6:
         72:6f:2b:23:d6:a1:da:84:59:3a:36:a6:eb:3e:b5:fc:4d:6c:
         3f:24:ad:fb:20:c6:0a:55:29:6b:49:58:ba:d4:bf:fa:4e:63:
         2e:b3:08:28:00:b5:3f:0f:9c:57:66:2a:05:3a:b1:03:bd:c0:
         2a:96:58:3e:13:50:bb:c3:9c:b2:c4:7d:68:74:c8:c1:a9:98:
         b7:9f:ee:f2:c8:8e:0b:e2:4b:90:48:19:24:dd:fd:29:f6:2b:
         51:40:5a:c0:e1:fa:a6:ee:28:ab:00:3d:7a:35:64:1c:cb:47:
         1a:4d:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:57:12 2026 by rpki-client