Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/eb41fd07-af9e-3c17-927e-a309c9ab3f68.roa
File:                     eb41fd07-af9e-3c17-927e-a309c9ab3f68.roa (raw, json)
Hash identifier:          lswsYak38vgoYjfI5jKu3Higfx2S70ltCFj4+42ihLM=
Subject key identifier:   28:29:DD:E6:FB:EC:77:57:0F:12:00:74:4D:9D:D5:2D:5F:08:E9:86
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584D8E6DB3802A30EEAFF50E3840
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/eb41fd07-af9e-3c17-927e-a309c9ab3f68.roa
Signing time:             Sun 19 Apr 2026 08:27:24 +0000
ROA not before:           Sun 19 Apr 2026 08:27:24 +0000
ROA not after:            Sat 18 Jul 2026 08:27:24 +0000
asID:                     3300
IP address blocks:        63.250.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:6d:b3:80:2a:30:ee:af:f5:0e:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Apr 19 08:27:24 2026 GMT
            Not After : Jul 18 08:27:24 2026 GMT
        Subject: CN=f695f793-6a27-4d70-8783-e92b1805fc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:0b:c5:d7:2d:aa:c2:a8:85:fa:a6:93:a5:
                    b3:a7:ad:81:52:0d:9f:3a:b1:d3:1f:76:83:88:ce:
                    32:62:3a:80:76:89:90:fe:c1:64:0e:04:bd:37:eb:
                    79:02:31:af:36:5d:5c:09:2d:96:c3:75:96:8f:f1:
                    3a:ee:3f:94:3c:bb:42:9a:8a:cc:f2:f7:3e:30:c7:
                    74:71:5e:53:dc:01:5d:60:dd:fd:84:9e:07:83:fb:
                    1c:a3:f6:ff:98:16:67:6d:e1:42:0c:5e:0a:52:31:
                    ba:ea:56:a0:f0:3d:50:cf:a7:a3:1e:2b:0c:75:50:
                    29:95:0d:a4:10:09:6e:93:36:c5:05:0c:28:22:b6:
                    7c:0f:9e:3c:bb:b1:90:1e:f8:16:41:29:90:3b:bb:
                    12:45:0d:82:16:26:14:f1:69:98:94:a5:4e:21:7b:
                    5a:7a:14:32:53:0e:d6:b9:d1:47:4a:7f:4e:dd:ae:
                    d4:fb:0d:8a:2b:5d:19:52:52:45:ac:d0:0b:68:3a:
                    8b:ae:bf:b0:94:dc:b4:74:91:d0:c7:a4:64:07:24:
                    0a:e4:8b:5d:9e:2e:20:ea:f0:76:98:20:fe:3e:f9:
                    38:46:c1:fd:16:35:49:ec:66:98:63:8a:db:f4:77:
                    fc:49:e5:9a:ba:24:4b:69:78:06:77:0b:f3:c1:80:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:DD:E6:FB:EC:77:57:0F:12:00:74:4D:9D:D5:2D:5F:08:E9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/eb41fd07-af9e-3c17-927e-a309c9ab3f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:c2:da:da:a1:7a:8f:96:d6:17:42:a6:0d:e6:63:f8:a8:
         8b:f0:e1:e3:80:9f:ac:87:bd:91:8a:27:de:b1:a3:f9:24:54:
         9d:2f:83:a3:ae:83:5f:ee:28:10:43:9c:eb:e0:69:19:a3:8c:
         62:75:56:f3:d5:d6:63:12:f5:7f:d0:2e:ee:b7:69:59:3e:fb:
         87:d1:6a:98:a3:14:86:35:23:02:f0:03:75:10:3c:f9:87:57:
         d3:e5:00:5c:50:12:71:27:79:24:74:ff:30:43:7c:79:dc:23:
         dc:43:20:47:52:7a:47:67:03:66:79:c8:f6:bc:cc:d1:15:55:
         30:a4:2f:b3:06:16:d5:67:2f:b0:89:63:81:0d:9a:bd:58:c6:
         ad:d5:c3:4a:3c:ab:d5:b9:a9:90:c1:70:de:88:b2:55:06:bc:
         12:19:46:8b:d9:4a:ce:b3:ca:aa:fa:a0:d7:58:1e:83:a1:db:
         c3:b0:91:07:7b:50:7e:e5:6d:90:6c:ec:8b:02:bd:12:08:78:
         df:fb:e4:de:e3:2f:4e:4d:f3:3c:a3:dc:26:44:a2:8c:74:a2:
         5d:f2:18:21:c4:94:79:17:31:1e:28:41:18:9d:3b:6d:2e:e7:
         da:bb:4d:7e:f7:33:f3:a2:e0:d6:ba:fb:16:ba:62:ca:3d:72:
         39:84:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:24:09 2026 by rpki-client