Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0e472bad-a710-3bae-baf8-16afc5bd721b.roa
File:                     0e472bad-a710-3bae-baf8-16afc5bd721b.roa (raw, json)
Hash identifier:          K48XdCC5IjSY6EUZn+MOjmVxgYam/jpXUXGDFxERpJc=
Subject key identifier:   D5:9E:F2:9B:2F:1A:1E:A9:CB:6B:F3:8D:E5:82:F2:85:B6:40:E2:83
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584E50848FCAC51934315F788900
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0e472bad-a710-3bae-baf8-16afc5bd721b.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     59210
IP address blocks:        125.253.91.0/24 maxlen: 32
                          125.253.92.0/24 maxlen: 32
                          125.253.93.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:8f:ca:c5:19:34:31:5f:78:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=daf60243-6f9f-424c-8c5d-278007c76952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:51:ee:14:98:bb:c8:6a:56:b7:6a:87:25:
                    29:8d:e8:cc:6c:9e:ca:7f:20:f9:cc:d1:97:cb:c8:
                    68:72:8f:4a:d7:a2:27:84:18:80:e4:27:ea:02:a5:
                    64:54:91:18:74:1f:c4:f4:f4:e6:b0:52:81:52:f9:
                    17:1d:2a:15:e4:f2:c8:5c:20:6d:55:40:a9:f1:b4:
                    00:fc:82:00:4e:7d:f6:7a:9f:67:41:53:fb:c6:8b:
                    20:74:57:0c:2f:57:02:bb:f8:89:87:2d:4c:11:20:
                    aa:dc:2e:21:5f:77:70:ea:1c:25:eb:f2:46:38:b2:
                    57:c3:5f:22:7a:d2:63:00:94:e4:0e:7a:7d:0f:fa:
                    4d:ad:8c:7d:0d:3a:e8:b9:76:42:2b:fc:93:44:10:
                    00:56:be:df:9f:78:2a:20:c6:cd:4e:41:7f:e7:cd:
                    de:fe:29:69:e8:8c:c6:dd:23:5e:3a:56:e9:37:15:
                    ef:7c:73:db:55:14:60:55:8f:e2:b1:8a:74:b1:32:
                    1c:fc:5b:21:ac:a2:1d:ed:e9:61:79:51:ba:ef:b1:
                    f8:eb:61:53:2c:99:72:d4:fa:99:93:7a:39:0a:71:
                    ea:bd:76:fd:f5:e2:04:43:08:2a:ec:75:b4:80:74:
                    97:b9:d7:6d:0c:e6:2f:6e:2e:d2:e8:e9:da:af:87:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:F2:9B:2F:1A:1E:A9:CB:6B:F3:8D:E5:82:F2:85:B6:40:E2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0e472bad-a710-3bae-baf8-16afc5bd721b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.91.0-125.253.93.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:9f:1f:ac:43:f8:af:ec:c8:58:9d:9f:3e:12:8c:a4:f3:
         1b:ab:a1:88:47:43:8e:92:82:bb:5d:31:00:0c:d5:1e:5f:2d:
         61:1c:38:85:9b:a5:67:f9:a3:02:e6:a4:2a:be:91:c0:4f:80:
         7a:e1:3c:85:d9:a8:05:19:19:05:66:5e:5d:a1:1f:76:b8:56:
         0e:31:92:78:3f:4e:ad:07:33:d8:d5:e4:a2:fe:b3:17:00:30:
         8b:88:f4:54:09:54:bc:33:ae:bb:db:5a:cb:f0:26:f4:0a:b1:
         ba:7b:43:68:85:0f:d4:f8:d7:08:d6:f2:5b:cf:87:a1:a1:bb:
         75:5b:78:dd:3a:90:54:9c:b9:b6:ab:6a:37:1c:4f:93:51:ba:
         d3:b7:68:28:f3:30:fe:8e:98:30:28:ba:d6:ee:d9:13:d0:c4:
         d9:a5:1a:c9:34:6d:95:fb:cf:ef:57:bf:de:0b:cb:d8:bb:61:
         82:3d:22:96:89:da:bb:c4:04:31:10:f2:4e:01:f0:46:e2:48:
         23:8c:fe:97:b7:69:85:3d:e8:4d:60:c2:6a:e0:6e:6b:bd:30:
         ba:f2:29:a8:41:25:50:98:0a:2c:73:cd:55:8d:bf:0d:4e:d1:
         45:91:10:ab:72:4c:57:d0:a2:b6:24:2a:f0:1e:8f:bc:0c:f8:
         0c:ab:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 19:49:16 2026 by rpki-client