Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/86b67e6a-f812-3b3e-8d43-dc5651859f29.roa
File:                     86b67e6a-f812-3b3e-8d43-dc5651859f29.roa (raw, json)
Hash identifier:          dhaPGglZNbcPW26o/SFgzCO12PSYhFdbNZbv+h44/Ng=
Subject key identifier:   A2:A4:11:E4:DC:F5:CB:31:7E:FE:18:01:05:3C:3C:34:5C:B9:0D:3C
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584DA11AE67857CF188773D82D40
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/86b67e6a-f812-3b3e-8d43-dc5651859f29.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     16504
IP address blocks:        157.96.184.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:e6:78:57:cf:18:87:73:d8:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=bf63434b-cf1b-427f-9c91-4d0e896e5970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:e0:83:4a:cb:83:0e:88:b7:a3:02:fb:9e:
                    24:a6:a1:4e:43:10:22:09:54:20:1e:f0:54:e4:d9:
                    be:aa:17:ed:4f:e2:29:ab:20:03:24:d9:13:27:f9:
                    34:7b:67:ed:49:34:23:62:74:3a:26:1d:70:61:e4:
                    46:36:86:c0:00:28:12:fa:5e:96:d8:3a:0d:ed:ef:
                    88:3f:8c:b3:0d:2e:8d:f2:61:6d:d7:1c:ef:05:8b:
                    45:c4:1d:95:39:4b:b3:90:1d:c8:80:c2:12:ae:d8:
                    94:e5:6b:c0:8c:f0:2b:bd:8e:69:1a:1c:58:0b:a9:
                    c9:e5:22:40:cd:68:e2:81:5f:4a:ad:2d:04:a0:f8:
                    02:c6:7f:d4:fd:46:c9:29:c3:67:62:5e:de:e0:50:
                    72:41:2c:cb:d9:b6:00:52:21:5e:b2:39:e6:8c:9e:
                    57:5d:60:e4:e1:29:69:f3:1a:26:2f:32:fb:97:98:
                    23:f2:87:8f:07:c8:6f:a9:b2:7e:3b:51:fb:34:8a:
                    99:13:00:97:97:cd:d4:fc:67:88:2c:25:95:0f:e5:
                    63:6d:b9:85:33:99:49:61:07:9d:c5:49:ae:3d:ff:
                    87:b0:bb:ec:4e:bb:6a:5b:13:ce:7f:a9:79:fd:74:
                    e6:ec:f9:a5:1e:f5:17:1f:eb:69:74:2b:b9:d1:73:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A4:11:E4:DC:F5:CB:31:7E:FE:18:01:05:3C:3C:34:5C:B9:0D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/86b67e6a-f812-3b3e-8d43-dc5651859f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:55:f1:e1:29:cf:35:20:a9:e6:9f:99:fd:77:f8:52:4f:e6:
         3e:84:cf:87:65:8c:1b:4b:15:b4:c5:0e:ce:8b:ea:39:6f:8b:
         91:c4:a7:c5:52:86:49:20:a1:32:ef:9f:bd:75:3d:ab:d5:07:
         2a:ac:c8:73:01:b6:65:1b:6f:a8:9f:89:f3:58:ed:0b:b1:ec:
         a5:95:fa:34:47:df:35:82:7f:d1:b7:db:be:e3:fc:2b:71:d2:
         2f:03:23:d6:10:eb:ac:a9:df:8d:6f:d2:6c:5f:39:b5:ae:e1:
         5a:93:b4:c0:c2:16:14:18:f6:0a:66:e7:7a:3d:dd:ec:62:5f:
         f3:cc:cc:8c:7e:b7:01:d0:67:1b:8b:f8:d7:36:1a:2f:4d:19:
         d6:09:3e:85:b2:12:3b:2e:8f:db:ba:84:8d:cc:da:d5:01:35:
         ff:79:2a:f5:4e:e6:7b:0b:11:37:fa:90:e5:bd:1d:93:0f:a4:
         bd:cd:11:b2:ee:aa:52:89:49:ae:41:7c:7f:60:8c:05:71:01:
         e6:94:82:30:e9:48:15:8f:48:d0:51:ca:71:20:25:40:22:33:
         6b:97:a0:34:8d:82:24:2d:ae:0d:81:a2:f3:5e:62:cc:ad:74:
         3c:d0:43:85:b8:e0:aa:ab:dc:ba:0a:cd:e3:b4:15:71:fe:de:
         e5:51:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:31:51 2026 by rpki-client