Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/74203f20-b72c-3ade-901b-b40bd0b7b252.roa
File:                     74203f20-b72c-3ade-901b-b40bd0b7b252.roa (raw, json)
Hash identifier:          nHujvM96j51PsTdkBGp6AVvR/3xuhPL1QcfkOb05csU=
Subject key identifier:   BE:16:F5:DB:AA:0E:2E:D4:96:E1:B3:BE:4A:94:20:B5:82:68:AE:20
Certificate issuer:       /CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e
Certificate serial:       010D0C9F4328584D5024E7A7355E371F6CD0F2B0
Authority key identifier: 91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/74203f20-b72c-3ade-901b-b40bd0b7b252.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     20382
IP address blocks:        163.245.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:e7:a7:35:5e:37:1f:6c:d0:f2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=b7d5ce78-59d4-4bff-9967-bd0fb4292655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:e0:da:9f:f7:20:fb:b4:ee:e4:df:38:37:
                    aa:bb:b0:dd:05:9a:3f:91:99:14:d0:de:4f:a1:60:
                    43:20:e0:ab:5f:d6:5f:bc:04:2c:44:03:cb:18:c8:
                    21:55:f7:62:c5:a2:4b:4e:dc:40:ee:53:b1:d4:43:
                    27:64:bf:80:e7:fd:6d:54:57:79:1d:41:bc:ea:32:
                    af:c4:01:a1:e0:54:5a:37:f9:0d:ee:ef:c2:97:61:
                    f8:d6:73:0c:ea:58:80:df:e5:bb:0d:98:4c:58:ca:
                    38:77:f9:d2:37:65:1a:1a:f6:82:fa:9e:43:c9:27:
                    1c:b3:10:96:83:ed:d9:91:6e:ff:ed:79:fe:df:d9:
                    bf:78:0c:b1:b6:da:47:62:3d:ce:fa:fe:42:9e:f7:
                    f6:89:d0:c4:46:fb:af:de:42:4c:3b:81:37:9f:45:
                    0b:cc:08:36:22:8f:50:41:0c:b2:fc:f3:aa:51:87:
                    74:3f:c5:49:88:fc:3e:9c:bc:3d:a5:d2:91:77:a5:
                    cd:3a:f4:a1:2b:f3:80:58:96:5e:c6:5e:0e:8b:8e:
                    90:c8:c5:e2:52:b0:73:24:50:cb:a0:0c:ea:60:82:
                    7b:75:77:35:d9:e9:ae:8d:34:15:c8:dd:6b:86:a9:
                    18:a7:3a:54:32:94:b7:92:fb:c9:91:c1:c5:ec:7d:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:F5:DB:AA:0E:2E:D4:96:E1:B3:BE:4A:94:20:B5:82:68:AE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/74203f20-b72c-3ade-901b-b40bd0b7b252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl

            X509v3 Authority Key Identifier:
                keyid:91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.245.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:df:f4:e7:99:46:7d:8a:ab:d4:97:25:b5:b3:20:76:7a:
         7f:bc:57:2f:b7:f0:38:1f:c6:77:ae:5b:2b:80:43:82:15:91:
         77:db:77:d2:19:b0:7a:15:32:3c:e7:2c:4e:3f:78:e2:d1:f8:
         e4:2b:40:e1:07:23:a6:ea:20:01:7b:74:c1:04:40:6f:76:98:
         8f:96:ba:00:37:11:32:75:d4:4a:86:38:9e:f7:85:79:13:c3:
         06:d7:3f:3e:65:ae:9c:45:79:69:d9:98:a8:16:b5:be:0e:d0:
         2b:ec:7e:5f:e5:e7:b8:42:b9:6e:7b:4e:cb:0e:e2:48:a8:20:
         ef:ee:40:e0:57:0e:d1:78:37:91:10:be:45:2f:20:f7:d6:bb:
         de:96:ea:f8:e3:35:89:cf:48:45:72:8f:3c:fd:cd:c3:24:eb:
         14:3b:69:b9:44:17:ab:67:b8:f4:c0:d5:d5:2f:5a:f0:e0:e5:
         7f:52:26:36:9a:e0:c3:4d:99:6a:0d:b5:2d:2a:1c:a7:2d:1c:
         a5:f7:13:db:ef:03:6a:14:6a:7d:a4:19:c0:d2:31:a2:55:ce:
         36:ea:27:67:12:d2:d9:e2:25:d9:d4:78:c5:88:cb:79:94:85:
         49:2f:b3:9b:3d:65:7f:16:5b:ce:14:35:84:66:42:ed:33:6b:
         b5:79:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:14 2026 by rpki-client