Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa
File:                     4ecac424-bd8e-38fa-87c3-648aadedc605.roa (raw, json)
Hash identifier:          nV4R27juknrcVDtOcjsSmg68Vd7Hhto9lDz4W9QrqVg=
Subject key identifier:   04:D3:09:92:49:90:C5:C7:08:FE:E2:1F:15:93:59:F1:D6:E8:9D:B4
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584D65153032E12D0A3CEF83A000
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     6195
IP address blocks:        138.8.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:30:32:e1:2d:0a:3c:ef:83:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=b9e0a69c-7ddd-4ac2-a3c0-34268d76643d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:1b:e3:51:d9:75:5d:e4:6d:65:7b:0e:c3:
                    bb:5f:fd:d7:6d:9b:d1:ca:d0:8d:c0:28:f1:f2:34:
                    90:5d:af:4b:f5:22:01:18:04:5a:dd:0a:5c:7d:21:
                    5f:4f:7e:82:b4:49:0d:7b:9f:da:9d:a3:52:7a:14:
                    de:04:fb:5b:47:ac:e5:49:3d:90:4d:f3:47:ae:20:
                    07:72:47:0b:52:1c:7a:ce:93:1d:48:ec:df:75:25:
                    cd:e5:2b:9d:b8:58:9a:f9:90:36:b2:68:1e:32:d8:
                    e9:45:59:ab:df:78:22:88:61:74:27:32:62:4f:6f:
                    c1:0b:a7:b0:05:c9:65:6b:56:75:b9:58:85:c5:d2:
                    5d:7f:bd:15:94:4b:55:c0:bd:08:ce:7b:bf:67:7a:
                    76:82:ef:b4:24:21:f2:48:a6:6b:58:af:71:d7:02:
                    e0:84:e9:57:a4:29:94:6e:82:57:3e:97:60:cc:d3:
                    a1:0b:f6:ee:35:e8:a1:31:e8:90:12:af:44:52:4f:
                    1a:f0:08:34:15:79:23:69:65:0d:f2:99:c7:1d:64:
                    ef:f8:b9:c4:f2:bf:da:6c:94:e3:7b:82:74:c4:71:
                    45:82:72:4f:72:f2:75:dc:a6:46:b7:9d:4c:f9:49:
                    6d:8a:e6:6e:a5:1d:3c:27:57:95:5f:1e:f0:36:5a:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:09:92:49:90:C5:C7:08:FE:E2:1F:15:93:59:F1:D6:E8:9D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4ecac424-bd8e-38fa-87c3-648aadedc605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fa:01:d0:19:f4:d3:3d:f2:59:61:bf:29:f7:c6:9c:e2:6f:
         7f:0a:67:6d:27:6e:7e:30:ed:b7:2e:1a:64:c9:d5:46:be:f3:
         aa:fa:37:fd:90:25:81:50:c0:c6:33:e1:b9:7b:d8:fa:8d:72:
         4a:7b:6c:79:bf:87:fc:f2:b6:01:c2:8b:ac:f0:fe:97:be:df:
         0b:d4:6d:b3:52:c9:2b:9f:19:48:0d:a2:09:ea:aa:13:40:ff:
         99:6b:1a:6a:bf:87:76:85:3c:97:72:78:55:d4:d4:7b:45:f4:
         93:96:9c:7f:b4:f2:f7:ee:54:52:25:1e:95:09:42:75:47:9e:
         d8:70:db:04:99:5c:69:43:7d:77:39:c1:86:b5:48:20:9c:e6:
         21:9a:b7:7b:2e:67:7c:75:fc:a0:0d:e2:f2:64:b4:5f:c3:9e:
         34:1b:40:6a:1f:ce:cb:2d:b1:af:1f:9b:2b:58:5e:ff:38:64:
         75:97:0f:65:fb:94:c7:27:24:cf:95:f7:e4:6a:86:75:6e:57:
         bc:5a:d3:7c:13:56:4b:05:2f:95:34:7d:74:1d:53:c5:2b:a2:
         84:9d:39:3d:ce:f3:a3:0f:66:4c:94:4e:aa:04:dd:9f:43:ce:
         33:28:4c:8d:3d:8f:5b:73:a1:c8:e0:b0:e2:d5:92:54:8e:c7:
         d8:e1:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:32:49 2026 by rpki-client