Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/078de539-8faa-3587-b61b-4b775fd5d2ac.roa
File:                     078de539-8faa-3587-b61b-4b775fd5d2ac.roa (raw, json)
Hash identifier:          ApVKxkS1IdOjHHJ9o85NTAtIebfzbtF3jv4FrEFVbOo=
Subject key identifier:   5B:23:15:C7:6F:6E:9F:0B:41:C9:FD:9C:2A:B2:7C:47:52:FC:27:3C
Certificate issuer:       /CN=5fdb7f4d-8de9-45c3-95a2-05764802f794
Certificate serial:       010D0C9F4328584E059B3068810B406ECC1876C0
Authority key identifier: 6B:B8:B7:DC:58:58:CB:FB:5E:E7:94:81:45:85:54:FD:65:CA:A4:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/078de539-8faa-3587-b61b-4b775fd5d2ac.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     5650
IP address blocks:        192.101.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:30:68:81:0b:40:6e:cc:18:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdb7f4d-8de9-45c3-95a2-05764802f794
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=96497fa5-dd12-493e-9f27-cc84052df355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:05:f7:8e:0f:0a:f0:9a:4a:00:ba:de:62:
                    62:26:c3:4d:c1:95:b6:78:51:7a:b4:84:11:b6:71:
                    2f:af:1d:6c:b1:3d:6f:92:ec:49:97:a8:80:2b:1b:
                    d5:9c:70:3e:a7:d0:76:d3:3d:13:12:b8:13:44:e5:
                    ff:57:bb:45:14:a3:6f:ff:c8:7d:41:3f:1a:f0:14:
                    b9:38:b3:52:2e:91:71:53:c3:d2:19:5e:4c:02:98:
                    7f:4a:f7:e0:5a:08:20:45:c1:45:61:87:9f:7f:55:
                    61:88:96:4c:e1:52:f8:8c:72:f2:a4:60:29:b3:84:
                    10:99:2e:fc:dc:a5:1c:73:6f:3d:72:6b:6f:e6:af:
                    85:97:2d:dd:b2:5b:5e:56:5d:32:78:9b:3a:11:7f:
                    e9:c3:ad:a5:c5:31:86:75:2d:1b:05:2b:0d:0a:a7:
                    4f:6c:69:ae:6e:c0:ca:3f:68:4c:f0:c4:de:6a:f4:
                    06:4c:9a:ec:73:66:a2:2a:5e:93:3e:6b:95:84:b0:
                    e6:9f:f5:6d:22:0c:2e:ec:dc:82:23:a8:1e:3a:5d:
                    d4:38:65:a9:1a:67:43:ca:cc:40:41:28:65:10:26:
                    d5:94:41:7d:79:03:8e:a5:d3:19:82:a2:b4:fc:61:
                    ba:55:ac:ff:3a:ad:ad:22:ed:94:89:6e:98:a1:5c:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:15:C7:6F:6E:9F:0B:41:C9:FD:9C:2A:B2:7C:47:52:FC:27:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/078de539-8faa-3587-b61b-4b775fd5d2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B8:B7:DC:58:58:CB:FB:5E:E7:94:81:45:85:54:FD:65:CA:A4:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e6:3b:e6:f6:88:03:63:11:a8:66:fd:f3:42:40:04:63:f9:
         6a:09:3b:37:22:44:f9:fc:32:a5:53:f0:66:4b:a1:3f:55:57:
         61:37:c6:18:27:68:a9:dd:8c:e7:44:c3:77:61:2d:f9:a2:62:
         41:01:9f:76:2e:17:79:c6:b7:23:4c:3f:ea:4d:25:00:1c:4c:
         55:70:be:d3:57:f3:20:65:f1:ea:84:ae:50:d5:91:b8:f1:7e:
         86:c5:6f:a3:57:f5:ef:5d:e1:29:df:12:8f:a8:a9:b6:df:3c:
         72:d1:bd:7f:fa:fb:8a:4f:2e:d1:dc:7b:b4:6b:2e:87:f7:d9:
         8d:15:50:01:33:c3:c6:41:db:f5:88:10:22:c3:36:d9:32:f6:
         9d:81:cb:23:5f:e2:28:7d:48:63:a9:02:fb:2f:4c:ed:d3:db:
         18:4c:cd:d1:a3:b6:3d:26:0c:31:84:7e:5e:ae:b0:23:47:6d:
         99:ca:6d:2f:30:64:9e:d9:75:4b:11:a1:91:3a:1b:67:84:de:
         f9:c9:58:d5:5d:66:1e:a8:fb:24:7d:71:63:cd:00:c9:22:c9:
         ea:fa:f4:ba:0e:62:34:d1:23:7f:f3:44:e9:b2:bc:c7:83:f9:
         ab:29:e0:14:5f:bf:01:79:e9:80:a9:d7:aa:51:e5:70:38:b9:
         6e:18:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:19:12 2026 by rpki-client