Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d77c8adc-0e0a-34cb-a22a-3a98146ec284.roa
File:                     d77c8adc-0e0a-34cb-a22a-3a98146ec284.roa (raw, json)
Hash identifier:          z0ylfZDXmEe6/ixTgSvwD8jrX+fSl1N+P51kCOzm1IE=
Subject key identifier:   19:7B:4E:29:5F:4B:55:65:E7:B5:8C:07:13:B0:84:3A:97:41:7F:42
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584DF640A6C1D952FD7955622500
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d77c8adc-0e0a-34cb-a22a-3a98146ec284.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     6250
IP address blocks:        137.118.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a6:c1:d9:52:fd:79:55:62:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=95ff6f16-c903-4f1a-9f72-27ecbe869825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:4f:6f:5f:89:d9:4f:4f:3f:70:ce:6e:07:
                    26:4a:cc:b4:69:e5:2f:46:a4:c0:a3:22:22:a5:53:
                    c6:42:72:3f:2a:e2:63:e0:cc:1d:06:9c:09:48:31:
                    d1:68:4e:09:99:0b:dc:e2:df:9a:2c:d7:d4:2e:9f:
                    e1:13:c0:d0:c1:bb:e8:33:79:cb:35:69:e5:10:b8:
                    da:ed:39:d2:ca:5e:ea:24:08:48:01:32:b3:2c:30:
                    a5:c6:73:3c:dc:70:f6:08:be:a2:15:91:cc:8e:3a:
                    ba:f5:e6:e5:1c:b6:c3:30:05:da:86:25:7b:24:a1:
                    2c:40:cd:a8:a1:87:dc:d6:a6:60:91:be:d2:f7:2d:
                    f5:be:0e:9b:2e:ea:c5:23:49:5d:c5:80:1b:e1:9a:
                    e9:9a:98:63:59:f1:8e:68:df:43:a4:5f:ce:b2:9e:
                    04:48:91:cb:a8:83:d9:14:13:67:32:94:d9:28:ab:
                    7a:62:54:c9:5d:04:b8:66:f4:19:f6:3a:34:c8:53:
                    49:21:da:ce:c2:85:82:75:c8:65:5d:d3:65:ec:16:
                    2e:97:cc:68:a6:a9:12:49:25:81:83:02:26:02:f0:
                    89:99:10:c1:85:0a:92:03:51:86:bd:c1:62:4e:28:
                    80:02:be:cd:c9:55:cd:4a:21:b1:4b:3b:11:b3:d1:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7B:4E:29:5F:4B:55:65:E7:B5:8C:07:13:B0:84:3A:97:41:7F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d77c8adc-0e0a-34cb-a22a-3a98146ec284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:04:fd:b5:31:72:ac:7a:53:e1:7e:e9:e3:36:c8:81:0d:
         64:69:99:50:07:d0:07:10:6e:3e:8f:81:39:25:ba:b3:59:ce:
         5f:cf:f3:3b:f8:4e:e8:eb:f1:c5:ab:9a:4e:fe:8d:3a:d8:be:
         b5:d6:fd:c5:16:f6:ca:3b:5d:3f:c7:af:6f:2f:bf:9f:7c:95:
         d7:cf:f7:96:78:30:57:dd:fb:b3:ad:cd:89:ba:b0:19:f9:fd:
         5a:f1:d1:60:ad:41:44:1a:62:71:8c:1b:81:4a:20:4f:c3:5b:
         85:76:61:39:58:e1:4e:d9:5c:f0:55:ff:d9:81:2f:d4:21:1c:
         78:8b:17:76:f0:9b:0c:b6:c0:27:c8:f6:f6:10:38:4b:ad:7a:
         0c:0e:35:68:e7:a8:c6:44:59:14:06:c4:cf:98:d2:ba:6c:bb:
         42:e4:29:fc:0e:f0:aa:38:9d:5d:46:e4:e2:40:a8:4d:2f:0d:
         f7:0a:0a:59:63:d6:1a:47:6a:9c:32:7b:6c:3a:09:d2:5c:ce:
         ed:24:8d:b3:cf:74:f3:86:10:09:c8:a9:04:43:44:aa:d3:5c:
         b7:41:28:70:5d:32:57:fb:41:e1:c6:02:42:06:fe:24:5b:31:
         c6:9f:9b:a0:d8:2f:98:ea:62:c5:33:6d:72:82:c8:21:31:e8:
         70:f6:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:29:26 2026 by rpki-client