Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c4655921-191a-304e-8cd9-4b4b8e4cb274.roa
File:                     c4655921-191a-304e-8cd9-4b4b8e4cb274.roa (raw, json)
Hash identifier:          ebPX6k3Ey8FliazpeZMOdazx5PbjH/wpMrYNEjNMUCk=
Subject key identifier:   0E:F6:44:68:AF:D2:1C:47:99:0F:43:91:61:04:D8:4B:25:B7:72:70
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A5A2C9F7445F96213B9F00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c4655921-191a-304e-8cd9-4b4b8e4cb274.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        157.52.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:a2:c9:f7:44:5f:96:21:3b:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=2d8ad863-00a3-4ae8-9892-289393b5d9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:c3:39:07:7b:87:6d:aa:9d:c7:f9:66:a1:
                    13:54:50:ab:89:83:42:ac:e1:e7:e4:04:a8:45:ba:
                    cb:76:0e:bc:a6:ae:c2:3f:7d:32:22:5f:7b:84:6e:
                    08:e3:eb:d8:79:2d:c6:dd:ce:95:0e:15:88:1c:fa:
                    50:1d:3a:da:63:69:8c:00:6f:6f:e8:c7:1c:b7:ed:
                    8c:3e:e8:ae:4e:7b:16:b1:0e:33:fa:30:8a:63:ad:
                    80:c4:1f:34:34:1e:2a:c7:91:32:aa:e3:33:62:de:
                    d1:cf:69:20:b4:bb:93:3e:91:c4:b1:a2:56:34:d5:
                    e3:32:26:f3:15:d7:b1:78:4d:e8:3f:00:c3:f0:7c:
                    27:ff:11:65:25:42:5a:84:f6:83:a0:3e:29:7d:6f:
                    39:51:ad:2b:a5:d7:cb:f6:0b:14:56:36:6e:65:a2:
                    95:be:48:dc:f6:be:fb:41:6a:7b:53:14:b1:42:b7:
                    0f:6a:08:ef:90:60:f9:97:c8:54:5b:05:08:cc:b4:
                    54:ad:29:9d:a7:19:32:e1:a9:0f:e9:51:83:b4:c3:
                    45:f6:c9:d8:84:60:61:dc:84:44:a0:2d:ac:4d:74:
                    20:d1:b9:dc:cf:f9:a9:c9:a5:6b:a9:c2:68:20:35:
                    06:ac:ce:03:94:bf:71:ab:51:54:27:cc:56:18:c3:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F6:44:68:AF:D2:1C:47:99:0F:43:91:61:04:D8:4B:25:B7:72:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c4655921-191a-304e-8cd9-4b4b8e4cb274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:13:9c:40:b9:f1:0a:7b:49:77:3f:79:0f:1b:11:8e:2e:58:
         66:29:9f:91:32:dc:1f:78:d0:61:f3:62:40:2d:ec:c7:97:ab:
         1e:0a:58:fe:d0:d5:b2:f1:bc:7c:7b:de:d5:9b:33:4d:9b:d3:
         36:55:0c:e6:5c:5b:1e:b8:a2:d0:d5:42:ff:b7:16:26:95:5e:
         3e:66:a8:8b:74:49:cc:6e:ea:ef:75:e5:f7:26:d6:5e:78:37:
         a1:8b:69:0c:17:d2:05:ce:7d:52:b3:90:eb:a3:7a:b2:f3:4b:
         91:2c:56:8f:b0:4a:be:ff:42:f0:18:a5:6d:b2:15:7b:f6:94:
         d0:26:19:24:b1:bf:2b:d4:b4:b4:13:ac:c8:1f:06:14:99:ad:
         64:0d:6e:70:e7:07:b9:aa:f1:49:d9:80:f1:2c:ec:bb:59:a4:
         7b:ea:88:46:fb:19:ba:95:84:96:c9:a4:c3:31:b3:66:0f:af:
         67:bd:dc:18:8c:12:22:da:b1:0b:69:6a:f7:69:39:5d:9d:08:
         3f:5c:91:d2:e2:81:73:cb:bf:ff:17:1e:c6:25:e8:69:34:9d:
         9e:ef:ed:da:01:79:54:78:26:28:af:a4:e1:07:4e:68:d3:90:
         f4:fa:3b:ce:f0:de:59:df:01:87:3e:f4:f3:dd:ae:32:24:f3:
         db:c1:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:53:55 2026 by rpki-client