Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa
File:                     68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa (raw, json)
Hash identifier:          us7r2GCA186wX3KOX985B4kbCBQScU5r9SmqqG6cBew=
Subject key identifier:   7E:4C:4A:74:55:C5:9E:9C:8B:A0:F5:A1:CD:D0:18:C7:9F:5E:1A:86
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584DDBBB068C0BDD91B27215C7C0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     54994
IP address blocks:        153.43.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:06:8c:0b:dd:91:b2:72:15:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=9720468e-40f4-46f3-b1af-4daedfdbd9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:d5:5b:f7:a8:93:c4:c7:28:a0:bc:d0:ef:
                    9c:24:dd:03:31:af:f1:0a:b8:06:cf:1e:d8:e8:04:
                    aa:8a:f8:eb:d0:7c:cd:86:b0:55:ac:8a:59:f7:20:
                    9c:b8:8e:f0:19:6b:57:9d:9c:90:a3:ed:c3:96:87:
                    06:84:b4:6d:06:7a:4d:f4:68:32:ec:08:40:ec:3e:
                    fb:d0:b2:77:a7:f1:0b:1c:95:91:a7:7c:0c:48:25:
                    c0:3f:73:00:65:62:23:e8:ba:04:b4:05:3f:3d:9a:
                    5a:97:11:a1:9f:0f:92:38:ae:34:12:09:0a:97:28:
                    3a:e3:32:fd:96:15:ca:0c:4f:1f:b4:ce:3d:5b:58:
                    f1:9e:66:bb:5f:b3:c6:a6:74:f5:55:4f:47:db:da:
                    cd:46:4f:6d:e0:98:b6:f4:1a:0b:78:4e:a7:89:ba:
                    00:15:53:18:59:e4:d7:a1:ef:be:81:20:fc:3b:a9:
                    6f:bc:99:fb:99:8b:76:29:50:37:31:8c:71:da:04:
                    f2:4f:73:d1:99:6f:5b:01:b3:83:a9:cc:2c:55:bb:
                    af:df:46:1f:f6:0f:13:88:73:7f:b2:d1:05:5c:11:
                    72:93:0b:1f:8b:ca:96:97:9e:64:b3:85:9f:a5:7e:
                    93:39:d8:3e:e4:95:4c:4d:de:8d:23:fd:ba:af:37:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4C:4A:74:55:C5:9E:9C:8B:A0:F5:A1:CD:D0:18:C7:9F:5E:1A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d6:f1:4c:42:8f:01:e3:47:44:e1:c2:1a:d0:5a:0e:9c:30:
         38:c8:e1:18:1d:f2:13:d0:21:04:23:60:a4:4c:ff:9f:a6:6a:
         06:6d:d2:90:57:7f:bb:49:a6:34:49:0f:23:22:24:7f:a7:84:
         9c:78:32:06:9c:21:ac:84:88:c0:74:44:d3:64:f1:cf:0e:73:
         ac:49:6e:73:24:ec:5f:46:9c:b5:47:33:ef:21:3e:95:45:4b:
         64:4f:4f:bf:46:ed:3d:37:01:78:e4:6c:1c:b6:a8:d8:0a:f1:
         0f:94:51:ba:02:63:09:8d:e8:48:96:71:d9:84:88:dd:77:73:
         33:b1:b6:87:c8:75:0e:5a:21:dd:a2:96:37:e7:ca:68:a3:80:
         9d:dd:54:5f:85:3d:cb:7c:d1:fd:f1:f3:01:b6:76:9c:8a:a2:
         ee:b5:1d:e5:57:6f:f0:8d:e4:24:b0:19:ef:74:1d:e1:f6:24:
         08:f7:b7:0d:47:b4:38:f5:2a:5c:8d:1e:6a:06:26:fe:27:d5:
         77:fe:f3:6a:52:54:5b:82:64:79:62:eb:a8:0d:6d:0e:2d:82:
         19:06:a2:32:26:49:4b:7c:1a:67:e1:aa:c4:1e:48:ca:84:56:
         06:c2:ec:45:fa:a9:f0:f8:3a:8d:15:cc:8d:02:32:24:cd:70:
         84:c8:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:28:12 2026 by rpki-client