Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
File:                     e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa (raw, json)
Hash identifier:          0rWrXS0cqT7FMUh0kx1jir1KPgDuGjJviK6SVR7klC0=
Subject key identifier:   32:92:05:B9:87:CD:02:63:85:1E:EB:FE:B5:61:D5:87:26:90:46:0F
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584D6AAA84EEC416E2D1E784D680
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     394437
IP address blocks:        198.35.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:84:ee:c4:16:e2:d1:e7:84:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=e0404e8d-208e-4563-9a17-452ae4bf0bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:a6:be:0c:0e:db:68:ff:0b:ff:fe:c4:85:
                    64:8c:e9:6f:76:3d:54:b6:29:7a:48:2b:a4:b7:19:
                    de:02:ed:73:56:db:85:a3:3b:ca:d3:a1:19:da:d8:
                    86:6b:b6:78:f3:53:eb:98:5c:5e:17:5f:bb:44:62:
                    29:a1:06:d6:39:f8:57:fd:3c:7e:3f:a9:ef:a6:e6:
                    be:a9:19:18:c8:de:71:f3:b9:69:dd:f0:d6:2c:15:
                    fc:6a:64:9d:db:e4:e4:f1:cb:77:93:1d:21:9f:69:
                    b6:4f:17:a8:f6:a6:49:1b:0b:5b:b7:bf:5f:63:e0:
                    57:68:42:48:5d:9f:8c:03:d2:01:c2:ba:29:da:47:
                    e5:17:3d:a7:f0:6e:fb:68:fe:a8:94:6e:09:93:83:
                    af:fe:36:c0:9e:f8:9e:bf:4d:e5:ab:ff:72:7a:19:
                    00:47:cc:35:7a:ae:97:3f:de:90:9e:12:a1:9b:5e:
                    91:ff:10:53:31:ca:c4:24:ce:85:67:fc:4e:9a:ae:
                    64:5f:bf:31:71:72:02:6c:e5:42:ae:d2:09:3a:fd:
                    70:39:e8:f0:77:de:59:54:34:2f:a6:bd:7e:c1:5b:
                    dd:2b:83:0e:07:55:63:40:85:36:91:e1:0a:73:06:
                    b4:0c:22:b6:a5:aa:fa:4d:e0:cc:59:7c:41:df:58:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:05:B9:87:CD:02:63:85:1E:EB:FE:B5:61:D5:87:26:90:46:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e5f8451e-fe53-3d9b-85b8-a04b7862710a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:df:3e:7c:aa:7b:92:bd:5b:dc:ae:80:c6:86:e9:d2:41:
         52:b8:83:b1:c8:a5:34:5f:44:73:c2:88:6d:5f:63:4a:62:8f:
         41:06:ba:39:6b:96:1e:80:bd:75:f7:dc:37:af:43:e2:57:b0:
         e0:3d:43:67:b7:f4:f8:ef:8e:bb:92:41:84:cf:fb:4c:86:00:
         1f:50:ca:13:81:6a:a4:22:f1:b6:90:76:62:c0:35:25:5a:8b:
         52:de:b2:61:39:ab:e1:48:92:56:6f:00:18:d4:dc:e9:d6:b6:
         55:f9:3f:df:6c:c7:19:44:03:92:29:c6:65:8e:c0:a0:57:ee:
         49:f9:eb:2e:1e:00:d5:92:e2:fe:15:74:67:68:44:7b:23:bd:
         9b:df:98:ec:81:08:35:fc:f0:39:34:7b:9d:5b:cc:3d:20:c1:
         58:b8:56:e3:82:63:c8:b4:af:59:29:11:3d:92:2b:31:9c:86:
         30:04:b5:d7:9b:ea:6e:74:f0:b5:96:9c:ed:18:4a:80:85:dd:
         71:3b:ff:0d:db:ff:5d:71:be:e8:be:01:e0:ee:04:f5:30:61:
         42:18:09:be:ae:41:51:ef:08:57:18:21:56:6d:86:fb:dc:13:
         f0:be:97:47:ea:4f:b6:18:70:22:b5:e2:a6:f2:6f:90:c7:ae:
         7a:48:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 09:58:34 2026 by rpki-client