Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5fc3016b-0443-34dd-a6e5-2e76f4d8d0d8.roa
File:                     5fc3016b-0443-34dd-a6e5-2e76f4d8d0d8.roa (raw, json)
Hash identifier:          6ozRRrvp2jeQ4X95QBklZijNBXzX3EdBig/CIvZU2AM=
Subject key identifier:   0A:AB:C4:0D:DA:07:C1:C3:91:5A:27:1F:03:07:15:91:8F:92:01:9C
Certificate issuer:       /CN=5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1
Certificate serial:       010D0C9F4328584D895FE68965C204902894A180
Authority key identifier: D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5fc3016b-0443-34dd-a6e5-2e76f4d8d0d8.roa
Signing time:             Fri 17 Apr 2026 13:00:31 +0000
ROA not before:           Fri 17 Apr 2026 13:00:31 +0000
ROA not after:            Thu 16 Jul 2026 13:00:31 +0000
asID:                     400980
IP address blocks:        163.123.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:5f:e6:89:65:c2:04:90:28:94:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1
        Validity
            Not Before: Apr 17 13:00:31 2026 GMT
            Not After : Jul 16 13:00:31 2026 GMT
        Subject: CN=aa81a4ed-39fd-4014-b5e0-2ab224fe9978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:85:b2:bb:c2:06:55:0d:db:d3:70:ba:8a:
                    70:6a:c5:af:84:99:c3:26:74:6f:5f:f2:91:29:23:
                    ab:d7:b1:df:8f:c6:16:fe:a4:96:c9:7e:d2:a4:d2:
                    36:89:67:5a:26:d2:79:94:bd:1f:ce:66:cf:39:5c:
                    8a:91:40:10:b7:70:d0:00:bb:cd:0e:33:7e:1b:6b:
                    33:d9:f0:3d:9a:53:ca:c6:6c:fe:3c:28:29:00:08:
                    70:f8:ba:6f:75:0a:84:a3:c1:a4:02:6a:1a:04:65:
                    6a:5c:f3:8a:49:b6:0a:17:fd:a9:67:92:0d:ae:95:
                    b2:ca:62:56:84:d8:65:05:00:b8:cc:34:42:1a:f6:
                    d1:92:39:fe:7e:43:8e:45:c5:95:0e:46:8e:19:9f:
                    b6:43:86:cc:b0:0a:8f:09:bc:a3:f1:86:df:79:f9:
                    29:15:ad:ba:9c:14:99:e4:ef:f7:ad:ba:02:3e:14:
                    a4:35:65:e1:c1:99:73:69:89:d2:cb:5a:58:bf:91:
                    54:f6:d7:83:d1:57:71:b0:5b:c4:1f:61:cd:9b:d5:
                    77:92:6c:ab:ff:ad:ff:ba:c9:5b:80:7c:eb:e4:85:
                    2c:ee:9e:85:60:5c:18:4c:b8:9c:ad:5c:ec:b4:39:
                    f4:e1:3d:11:34:ed:da:c0:00:fd:59:42:55:20:7b:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:C4:0D:DA:07:C1:C3:91:5A:27:1F:03:07:15:91:8F:92:01:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5fc3016b-0443-34dd-a6e5-2e76f4d8d0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.crl

            X509v3 Authority Key Identifier:
                keyid:D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:35:c0:00:a6:7f:55:a5:c3:9d:df:20:16:48:28:92:4a:
         9a:c7:43:04:bb:fe:da:c7:1c:93:56:dc:e3:13:65:24:87:5f:
         df:a3:0c:b5:66:30:0d:41:ad:e1:aa:79:8a:23:fa:82:7f:3f:
         20:2c:1d:a8:9e:66:12:32:58:a8:b7:53:ef:7d:03:62:a1:87:
         39:b2:10:f7:f7:5e:e9:5a:71:0f:ad:b8:a8:f1:5c:3c:16:c6:
         52:07:5c:27:e3:9a:b8:48:d3:81:0e:fa:19:92:f3:8b:9f:17:
         58:2a:fb:5f:ec:09:29:80:7a:37:c0:c2:9d:b2:a7:b0:5a:54:
         57:55:3a:e2:1b:14:e4:54:06:18:e7:2d:60:a0:86:45:af:d0:
         b7:5c:0d:dc:4d:23:f8:b3:f4:63:76:e8:a9:8a:48:8a:82:71:
         74:3c:c9:49:35:61:4f:a4:6d:44:d0:6f:a0:7e:b8:e9:f3:61:
         c0:22:18:42:c6:e8:e7:aa:46:9e:04:1b:31:cf:ff:9c:bd:7f:
         04:9f:5a:d7:a9:67:7c:1e:70:a0:dc:24:c2:56:e7:a8:d7:69:
         63:c7:a6:f2:7f:ee:31:f9:d1:da:81:5f:cb:3d:40:4a:97:24:
         71:09:e6:d7:1c:51:57:38:09:ef:29:92:e3:a2:e1:49:95:d6:
         12:2c:6a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:32 2026 by rpki-client