Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa
File:                     4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa (raw, json)
Hash identifier:          MHoLcqPA63KygI5RxdfSEhyLBgN6aPudly5N1LIXCuQ=
Subject key identifier:   B8:02:DD:16:20:7F:48:4E:82:7E:F0:B0:D3:7C:E8:73:91:F8:93:BC
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584D91C0125E7D26E5554872CD80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     13213
IP address blocks:        173.255.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:12:5e:7d:26:e5:55:48:72:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=13041f91-5d31-45c0-9c6e-ad6f742eeca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:55:93:eb:62:09:54:49:6f:01:0e:d6:b4:
                    f7:e1:63:af:30:ae:79:2c:19:f4:0c:a9:5f:1b:3d:
                    46:e8:a1:35:db:8d:27:11:2b:fa:e4:73:7f:33:d6:
                    a0:bb:9d:20:33:e0:67:f4:de:2e:0c:4c:32:a0:a1:
                    06:19:0b:50:a1:0e:17:76:52:59:4c:99:d5:64:d4:
                    eb:26:68:7d:35:39:30:4b:2a:e7:d3:68:0f:f5:ec:
                    be:c8:39:56:32:79:e8:2b:0a:fa:86:19:ed:4a:15:
                    63:3d:d9:17:2f:13:22:6f:a5:f7:9f:64:2b:66:9c:
                    92:aa:1f:48:ff:29:36:e4:c8:f2:e8:58:93:9c:e8:
                    45:52:1c:77:41:1a:51:c6:fb:d5:08:74:9e:bf:d7:
                    17:93:4a:0f:17:e6:88:db:21:a0:97:34:c1:54:4f:
                    57:72:9b:82:47:8b:4c:5d:2d:ba:59:0b:31:b1:28:
                    6d:47:d5:87:2d:91:93:47:29:f8:a9:c6:30:89:44:
                    bb:0f:62:3d:d1:b5:90:4f:72:64:4e:48:4d:c5:a9:
                    b8:86:32:00:06:5a:99:98:92:f6:78:fe:5f:19:24:
                    88:f0:97:87:70:81:38:b3:66:37:99:e2:70:1d:f3:
                    b9:ed:bb:75:b4:ca:af:87:be:88:d9:c1:72:9e:c2:
                    df:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:DD:16:20:7F:48:4E:82:7E:F0:B0:D3:7C:E8:73:91:F8:93:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/4e8cdd19-0e6a-338c-bbd0-8a3704db27cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:50:f7:1d:49:3c:c2:8d:a4:cc:6b:89:b5:26:93:f0:2f:
         1c:19:d6:8e:13:1a:35:0f:59:ab:8a:fa:d8:40:c5:fd:21:1c:
         55:a3:e9:7b:0b:80:45:f6:3f:1a:b4:85:b2:9d:91:87:88:9c:
         b1:9c:8d:05:e2:4f:7d:f1:f7:bf:95:02:44:9c:29:79:25:af:
         43:86:30:5a:e6:48:96:00:c1:31:6d:14:13:ce:f5:ab:be:51:
         be:30:01:71:3b:80:e4:e3:62:0b:7e:58:81:fa:f5:96:83:ca:
         31:a4:70:45:f7:c6:65:d9:e8:2f:3c:c5:b2:2d:9a:9b:18:85:
         26:eb:de:76:d1:d4:7f:fe:40:96:4e:86:21:2b:7c:78:01:41:
         67:67:d8:49:b2:cf:04:e9:fe:b4:52:8f:a6:ff:24:87:36:da:
         33:0e:b7:8d:3e:68:0d:bd:06:e7:fc:eb:cf:7a:eb:21:30:08:
         02:8b:56:ef:76:ed:3d:df:d1:b2:ec:3c:70:d9:01:06:53:fa:
         97:2c:b0:2f:d7:b9:ce:c7:43:09:7b:5b:08:63:3d:26:08:cd:
         4c:4d:80:8a:6a:7d:d5:10:4d:e1:35:53:3a:29:34:a6:25:8c:
         26:2d:01:61:d3:73:ac:73:07:81:00:af:1d:50:c5:1d:de:87:
         7d:29:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 23:41:23 2026 by rpki-client