Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/205fbb5d-308e-337c-8698-5973a496fa92.roa
File:                     205fbb5d-308e-337c-8698-5973a496fa92.roa (raw, json)
Hash identifier:          yhK6Cobp0Y413ATMb50GfSVxeIdqaOTV4q4xnvKqOrM=
Subject key identifier:   C1:04:D3:17:5E:AC:75:13:60:54:18:D8:77:5C:3C:22:0B:15:A1:13
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584DE150842E9349588B60DA5780
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/205fbb5d-308e-337c-8698-5973a496fa92.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     21859
IP address blocks:        157.185.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:84:2e:93:49:58:8b:60:da:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=8b5149a2-4be1-4ee8-b973-bbb55a404b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:e3:67:15:a2:5b:78:d4:b5:c1:de:1e:4e:
                    1f:0c:b1:da:9b:b2:59:ff:5c:2b:a7:cd:ab:4f:f3:
                    da:42:7b:bb:2d:44:06:b0:fd:a3:a0:f4:49:64:b2:
                    e1:42:84:13:64:4e:ec:75:9a:1d:65:fd:00:05:80:
                    86:2f:dc:18:0e:9a:6c:67:02:90:06:f7:ec:ed:0c:
                    3a:36:98:32:14:55:51:40:20:05:f4:ae:d7:41:18:
                    45:fc:4e:3b:5d:d6:b4:90:92:fd:0c:45:5e:05:49:
                    6b:17:3f:51:25:69:1a:75:ad:ad:63:45:95:5a:07:
                    11:8e:96:76:a3:cc:17:fa:f0:eb:5a:45:5b:6e:13:
                    be:80:96:53:c5:70:9c:21:ef:33:1c:de:ce:16:b9:
                    42:b0:5d:eb:5e:6a:ab:d1:8c:8f:d7:e3:00:2a:fc:
                    3d:84:1b:e1:1a:72:8e:22:3c:2c:fe:a9:1a:d7:af:
                    a3:ea:03:df:cb:b8:0f:37:76:65:88:43:a9:d2:cd:
                    2c:03:01:f3:be:2c:d6:79:ba:37:d2:be:95:12:ba:
                    78:5d:ac:66:0b:23:23:af:41:b4:fe:36:a9:df:fb:
                    d8:8f:fa:1a:5b:c6:08:42:7f:99:c6:87:01:76:22:
                    86:22:3a:6d:33:4f:9e:6b:04:43:a1:5f:c0:8f:93:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:D3:17:5E:AC:75:13:60:54:18:D8:77:5C:3C:22:0B:15:A1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/205fbb5d-308e-337c-8698-5973a496fa92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:68:3c:56:8e:f4:6e:f1:b4:18:ae:74:2f:78:23:04:8d:
         36:6e:79:d6:31:a1:00:2f:0d:1f:ad:75:ce:53:3a:64:86:9a:
         48:c3:ea:42:61:9e:7e:62:d6:64:c6:6e:70:94:c5:ee:5b:2a:
         8c:37:df:0b:74:50:48:c0:09:4f:7e:4d:46:02:fa:5d:2d:f1:
         48:c6:14:1b:42:fc:a5:34:db:8f:44:48:1e:bd:9c:02:44:11:
         58:4a:4b:17:fc:f2:96:f5:a1:a1:43:fe:8c:89:c8:e2:4b:21:
         7b:53:74:16:48:57:29:f5:d7:80:2d:e2:3d:52:e4:0f:33:85:
         09:0e:8d:ce:2f:cb:a2:06:5d:96:e9:38:af:f3:ac:30:9e:ab:
         79:b4:28:b0:f4:35:c1:bb:ce:e1:63:f5:34:b1:c8:5a:06:61:
         54:ec:37:cb:b1:b9:c4:6e:ab:59:0a:61:ae:bb:6a:d1:7c:57:
         d7:27:4e:fd:d6:1f:ad:12:6d:1b:ec:f6:90:2c:cb:67:04:b2:
         ad:96:2a:6b:63:f1:4d:c2:ad:a6:e9:4d:dc:c4:08:9f:69:fd:
         03:46:3e:ad:65:ce:d6:e9:4e:8d:5a:46:5b:13:2c:d4:6f:29:
         30:e2:50:3a:ec:29:8d:e4:74:b6:73:e9:92:ae:92:e2:ce:06:
         f2:89:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:10:00 2026 by rpki-client