Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/e91cd75d-5908-3141-8a30-b0040f194b0f.roa
File:                     e91cd75d-5908-3141-8a30-b0040f194b0f.roa (raw, json)
Hash identifier:          I+9gnrc8wuIQaYmARrWDton0aSrLNadOlLlCbSQHfKI=
Subject key identifier:   55:EB:CA:41:FA:00:B6:3D:51:27:7C:3F:C7:A8:6B:45:7F:1D:DB:2E
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F4328584DE1507D719B87382ACD8A8C00
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/e91cd75d-5908-3141-8a30-b0040f194b0f.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        69.194.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:7d:71:9b:87:38:2a:cd:8a:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=f1d4c678-45bb-4bbf-a420-122cc54b4127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:72:e2:16:d3:ba:43:da:c1:93:03:63:a1:82:
                    83:33:a8:d4:28:4c:81:9a:e2:ef:2e:e1:6a:38:86:
                    fe:56:2a:06:9b:d4:2f:43:52:cf:44:9e:73:b4:a3:
                    56:97:35:36:61:e7:10:fa:ae:04:2f:98:f3:b8:c0:
                    31:58:6f:63:4d:5f:b7:0e:ff:c2:b3:a2:49:81:00:
                    0a:c3:95:c9:20:2c:f0:a6:a7:ae:20:0c:26:e4:d2:
                    ac:7e:36:6f:05:79:1b:21:b2:43:38:d5:f0:ab:58:
                    51:95:51:0a:ca:e6:bd:d2:73:97:42:dc:9e:86:32:
                    4e:00:dc:4f:3c:f4:38:bf:ee:17:48:91:ec:78:0d:
                    87:6a:82:5e:bd:aa:34:1b:b3:e1:c2:0c:5b:52:bc:
                    13:4e:14:13:3d:da:04:d7:64:42:1b:19:76:a1:6c:
                    c4:95:82:e9:a1:fe:cb:b1:8f:10:63:6f:50:09:c6:
                    02:31:3e:52:72:75:39:eb:fe:96:73:ea:23:f6:e9:
                    9f:6b:15:3a:d4:9b:62:56:68:f9:e5:40:ff:e9:35:
                    f6:35:4d:71:45:ec:05:3d:eb:a7:72:89:a0:7e:e3:
                    4a:16:cb:c3:52:b3:70:4c:d0:22:d4:af:34:96:06:
                    15:8b:f9:42:16:96:ed:5a:a5:be:4d:85:f4:30:d5:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:CA:41:FA:00:B6:3D:51:27:7C:3F:C7:A8:6B:45:7F:1D:DB:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/e91cd75d-5908-3141-8a30-b0040f194b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:e9:b2:37:bf:0b:0a:a0:94:83:05:25:97:2f:61:ea:68:
         72:c6:5b:12:09:aa:a7:7c:e4:f6:8a:95:13:61:f3:c9:0d:26:
         e1:97:2e:48:6b:d7:3e:07:f4:46:4b:96:a5:3e:36:53:7e:4f:
         84:2c:04:5c:a3:e8:76:5c:5c:4d:3c:bf:93:01:11:d0:f7:46:
         42:a8:40:b8:ce:7a:d0:a7:f2:85:5b:c6:8b:2f:e3:ce:34:8d:
         46:e7:b7:e3:4b:9b:20:2e:5c:51:17:b7:70:37:89:a8:74:a0:
         ff:af:e9:03:a6:92:b4:41:b4:be:32:4f:27:20:17:8e:8e:d0:
         b1:33:0c:e5:bc:43:c2:0b:b5:9a:6d:a4:51:8f:58:11:6c:8f:
         b9:3d:36:38:f0:24:c9:06:5f:ad:5b:44:cd:1e:9d:e6:e8:fa:
         4e:24:8a:39:9b:42:f3:19:ae:be:a4:d7:13:48:12:35:9b:5a:
         28:bc:54:eb:1a:b9:70:28:31:0c:11:03:10:3d:fc:cf:0c:ec:
         67:ef:e8:51:61:24:ef:fc:42:8b:de:92:55:e7:db:26:55:55:
         9c:22:e1:8d:5d:a0:d3:97:6c:de:ed:d6:c1:19:06:0f:08:29:
         06:d0:19:c0:b8:9f:6f:7c:00:2e:40:b3:80:a0:71:7f:52:75:
         10:e8:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:20:23 2026 by rpki-client