Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa
File:                     2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa (raw, json)
Hash identifier:          68/msVSUwG7tB5pJE4Bq0wYFDvEstvmJhUIQVpNzXVg=
Subject key identifier:   93:FD:65:B1:AC:AB:CB:D8:1E:C7:D1:5B:E1:42:01:39:F4:7F:32:48
Certificate issuer:       /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
Certificate serial:       010D0C9F4328584DD9E6CC6969EF4879A0190A00
Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa
Signing time:             Sat 16 May 2026 09:17:01 +0000
ROA not before:           Sat 16 May 2026 09:17:01 +0000
ROA not after:            Fri 14 Aug 2026 09:17:01 +0000
asID:                     401489
IP address blocks:        155.103.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d9:e6:cc:69:69:ef:48:79:a0:19:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
        Validity
            Not Before: May 16 09:17:01 2026 GMT
            Not After : Aug 14 09:17:01 2026 GMT
        Subject: CN=c3070410-0e84-4e23-a9da-10a068c6f77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:d9:de:69:33:94:c5:3a:2e:21:be:e6:6b:
                    23:b4:10:5f:84:19:63:fd:a7:ef:06:77:ad:bf:27:
                    6a:9c:d6:54:06:a0:65:ee:c9:36:06:06:6d:13:df:
                    67:cf:a1:ba:f9:c7:58:6e:06:a3:a3:cf:58:c7:c6:
                    ad:30:6a:27:fa:6d:3a:87:e3:17:a5:f3:98:d4:55:
                    fd:36:0a:aa:e1:fd:90:58:cf:82:5b:ba:42:1d:d1:
                    b3:ce:79:8e:31:08:97:de:b2:b3:89:53:73:68:57:
                    c3:ec:5b:63:e2:09:8c:08:32:0c:57:24:78:bd:6d:
                    b8:34:4c:f4:ce:35:cd:f5:10:e4:89:c6:e7:be:74:
                    bd:a7:fe:b8:cd:01:17:ba:32:d4:80:c8:17:34:bd:
                    ec:a0:13:a1:93:3b:e3:db:bd:74:f8:74:e1:d4:b7:
                    40:0a:8d:16:c3:9b:44:f7:02:f5:8f:6c:7d:12:36:
                    2b:d5:9d:93:c2:c5:7e:e0:8a:5a:2c:18:61:40:f8:
                    06:29:86:94:7c:92:ea:a9:f3:04:8b:d8:70:9e:ed:
                    40:92:fd:41:b3:9e:b7:7f:e7:c8:b8:2a:5b:8f:e5:
                    27:94:1c:17:a5:8a:70:bd:ab:db:7a:70:65:f3:80:
                    64:0d:ca:fd:b3:93:db:65:3c:1f:17:da:5e:15:29:
                    23:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:65:B1:AC:AB:CB:D8:1E:C7:D1:5B:E1:42:01:39:F4:7F:32:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:e3:ab:93:bd:5c:3c:5f:26:1f:0e:57:59:df:dd:0c:46:f8:
         30:c2:86:73:ef:12:08:14:79:6e:fc:ae:2b:a6:b5:8a:74:2f:
         b1:22:64:88:e9:f0:6b:c5:2e:2d:bd:de:9c:ec:e1:9a:dc:7f:
         fe:5c:e4:48:f0:bb:e8:1b:f6:51:a6:cb:7d:da:05:fd:b1:ca:
         87:3f:9b:30:46:31:62:e9:14:86:41:5f:08:df:1c:64:a5:03:
         7d:19:79:fa:72:3a:40:32:0c:0e:3d:b4:49:a6:19:4b:3b:ec:
         e9:39:f7:7e:71:e0:51:42:43:ed:42:84:c7:dc:de:fa:b2:02:
         65:9c:04:51:11:15:d9:14:41:02:40:5f:c0:48:38:d5:5b:8b:
         4b:45:7e:e2:79:a2:19:3f:bd:5a:e5:86:a9:34:f5:60:98:1c:
         4a:1d:92:99:9f:d1:ca:15:c8:a5:c7:cb:14:be:be:e8:4f:a3:
         ef:b2:9c:e0:56:5c:7c:3a:e5:35:30:83:9f:fc:8b:62:3a:6a:
         e8:56:38:63:fa:17:e7:f3:b2:ea:be:0e:d3:dc:32:8a:73:df:
         7a:10:47:83:44:4b:f6:82:b6:71:94:73:b4:11:41:cb:14:02:
         36:6f:92:71:a0:46:19:04:66:36:68:03:0d:21:d2:05:8c:ad:
         cb:b5:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:42:59 2026 by rpki-client