Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/ed9ae9eb-24b5-35bd-85db-5f3d4eedbc99.roa
File:                     ed9ae9eb-24b5-35bd-85db-5f3d4eedbc99.roa (raw, json)
Hash identifier:          +Da79/3ZaUKfZPhEJsv1DtmTTSjJTOdfrTyqSXzA7IM=
Subject key identifier:   98:9C:48:77:BE:05:6C:1D:9C:E2:A0:7D:82:57:57:B5:79:E1:02:D2
Certificate issuer:       /CN=5fdb7f4d-8de9-45c3-95a2-05764802f794
Certificate serial:       010D0C9F4328584DEC7B29CDC9E2CE4C52984A80
Authority key identifier: 6B:B8:B7:DC:58:58:CB:FB:5E:E7:94:81:45:85:54:FD:65:CA:A4:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/ed9ae9eb-24b5-35bd-85db-5f3d4eedbc99.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     237
IP address blocks:        192.101.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:29:cd:c9:e2:ce:4c:52:98:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fdb7f4d-8de9-45c3-95a2-05764802f794
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=0c11923b-7f7f-41e7-bff7-409fd396125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c5:3a:65:c0:c0:91:fc:43:73:3a:93:0a:7d:
                    77:e9:43:59:bf:6d:9f:38:83:9c:cd:13:1b:89:73:
                    0d:b6:b9:d0:c0:7a:e3:79:ca:48:0e:ef:22:b3:f7:
                    cb:c2:30:a1:94:ea:a6:ef:f1:e6:9a:8b:25:7f:30:
                    b9:4a:22:02:4a:d6:58:88:5a:5a:6e:2b:c7:9a:18:
                    1c:97:cc:d2:18:b5:71:e2:4c:75:c0:96:f3:39:80:
                    a8:ca:53:ae:09:a2:44:ab:c9:45:9a:de:8a:59:3c:
                    d8:83:ab:26:51:82:d5:ef:a8:1b:76:37:7c:e9:a3:
                    ac:4d:fa:c9:a3:5b:8b:ce:e4:df:1f:dc:95:e7:af:
                    90:d2:9c:b0:69:50:9b:85:73:62:5c:1c:b1:2e:1c:
                    fb:95:16:43:cc:53:c7:de:ef:36:65:77:1d:c9:4d:
                    3a:0a:1b:35:f6:f7:7f:f7:d5:eb:5b:95:b0:99:ae:
                    5b:c7:9a:74:98:f5:b0:e7:be:c9:f6:d0:d6:5a:06:
                    ee:3b:59:22:9e:1e:51:e3:50:d0:9f:c2:ff:f1:fc:
                    58:d4:53:2e:87:48:2c:2f:d7:ab:e0:ff:c6:df:19:
                    25:1b:e0:23:0c:f8:61:eb:e6:f2:fe:12:7b:dd:02:
                    a6:5f:cf:82:27:a9:da:59:d6:24:c6:9c:64:e6:36:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9C:48:77:BE:05:6C:1D:9C:E2:A0:7D:82:57:57:B5:79:E1:02:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/ed9ae9eb-24b5-35bd-85db-5f3d4eedbc99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794/5fdb7f4d-8de9-45c3-95a2-05764802f794.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B8:B7:DC:58:58:CB:FB:5E:E7:94:81:45:85:54:FD:65:CA:A4:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5fdb7f4d-8de9-45c3-95a2-05764802f794.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:93:ed:c0:44:82:9a:36:52:c2:eb:3e:a3:44:41:d5:f3:
         1e:3c:b6:ff:27:d6:c7:3e:d8:9d:6f:4d:b1:db:20:1a:c3:e2:
         f5:0a:26:d7:2d:46:b2:ef:f5:4e:c6:a2:06:05:cf:36:3a:6b:
         93:f4:56:f9:30:7c:0c:f1:38:b9:9b:4b:96:ea:e4:6c:05:3f:
         e6:d7:ae:97:8d:0d:b3:b4:2b:4e:f9:30:4e:44:cc:13:6e:db:
         d1:e3:8a:4a:76:47:49:ed:75:ad:0f:c0:b5:89:54:1b:dd:d5:
         25:8a:93:9c:66:98:a1:0b:77:15:b6:be:03:33:04:0a:e6:cf:
         4d:96:22:6a:ea:d0:59:3f:20:d4:dc:e2:95:48:35:3b:63:ae:
         97:9d:ab:e3:36:f1:bb:91:69:2a:a2:3a:3e:fb:3e:ef:45:e1:
         a7:e1:46:b4:ee:96:d8:6e:9f:4d:9a:c5:07:c1:2c:9f:99:f9:
         1b:95:8f:31:71:aa:27:58:db:3d:7f:62:41:96:62:b2:48:1e:
         01:19:09:34:9a:6f:eb:c6:a8:b3:c9:a7:83:1c:bf:ed:75:71:
         fa:75:40:32:0f:5c:a5:84:8d:a3:bf:7d:78:5e:45:25:28:1f:
         96:20:0a:e5:76:0a:98:4c:1a:7e:da:2f:72:33:b5:20:52:7d:
         f0:14:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:32:45 2026 by rpki-client