Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa
File:                     758605da-a950-3c7b-808b-b23cef708f68.roa (raw, json)
Hash identifier:          PGAf+GRkRlBmerRLrjUBuB/qG8Posb0GJJSkvpp2B3c=
Subject key identifier:   AD:D0:04:7A:96:0E:FB:1F:C2:EC:F1:35:31:7F:62:A6:EE:4D:A5:E6
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D6C0FB6B464A3AAABA8CE3F20
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     54994
IP address blocks:        157.185.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b6:b4:64:a3:aa:ab:a8:ce:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=6959f20f-d73d-40d5-b65b-4e4eaf3723a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:ef:4b:31:c9:b2:91:50:13:51:f4:cd:19:
                    fb:0e:47:22:90:a0:07:a6:7e:f1:cd:ac:71:1e:95:
                    4f:b0:c4:5f:d0:ed:41:6e:10:6f:68:60:79:8b:c5:
                    8e:1a:22:30:d5:fc:d8:e3:67:67:4a:c8:9f:19:a3:
                    d1:a6:87:0f:19:3b:db:4f:84:e5:fc:d4:6e:b4:79:
                    e2:e0:af:90:48:7d:b7:e1:70:34:82:e6:e5:cd:34:
                    36:de:ce:db:e4:34:c6:fd:eb:10:99:42:ad:50:58:
                    58:7e:3a:a0:9d:8c:50:3f:5c:a1:0a:e5:eb:2f:c9:
                    e1:63:86:b5:bc:5d:74:1d:87:15:cc:38:78:4f:0c:
                    7d:db:0b:42:2e:74:8b:31:cb:89:0d:2f:45:73:d1:
                    5c:4c:cd:4e:60:02:44:ee:c0:55:e1:cb:ec:5e:5d:
                    6c:d4:2e:55:ec:49:24:98:e5:73:7e:ac:d0:43:26:
                    fc:33:70:10:fb:a7:ae:9b:50:99:1f:13:b2:f7:24:
                    33:c2:4f:2f:30:51:54:c0:ab:a4:bc:1d:cc:a9:0b:
                    64:d0:b3:74:89:10:01:c7:c0:ba:ee:85:96:91:f8:
                    01:68:25:b6:d4:ee:26:eb:4f:d6:4c:ba:51:4c:e5:
                    82:58:6d:a1:9a:cb:ff:86:ae:25:11:0d:e3:3d:62:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:04:7A:96:0E:FB:1F:C2:EC:F1:35:31:7F:62:A6:EE:4D:A5:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:b0:b0:59:b4:31:1d:a1:1e:29:ab:20:9e:a5:2f:63:e2:
         f6:4d:b7:02:31:75:3f:29:98:c3:9b:16:55:00:9a:34:38:1b:
         84:96:9c:26:43:69:58:de:98:ea:5c:44:7c:66:59:e0:e9:52:
         c1:12:b0:d3:6d:fa:13:07:76:1f:38:e2:43:29:a4:4b:13:d8:
         a6:5e:00:25:5f:a6:ec:1d:69:46:76:90:58:90:5c:4f:a1:a1:
         ce:4b:24:8f:9b:0b:3d:6b:f2:89:9c:d3:0b:c9:2a:4b:97:f4:
         81:fa:0e:36:db:38:7b:fc:c0:f1:d4:93:62:8a:71:93:c0:67:
         64:09:4e:54:b6:01:57:56:18:f4:23:41:3a:f5:7e:85:27:47:
         fb:69:78:7d:54:20:cf:ec:eb:61:78:0e:9a:81:70:84:15:7a:
         e0:77:ae:2f:e8:e5:54:e3:a1:41:f5:75:9b:1e:35:59:d6:3f:
         b7:c1:6a:00:b1:04:5b:69:dd:cf:eb:a5:48:cc:07:96:d2:d5:
         ac:69:0f:eb:41:32:7e:c7:3f:a8:91:98:34:0f:1c:d4:98:5c:
         4b:a5:22:55:47:31:d8:a8:c5:20:58:13:43:c6:0c:3a:25:14:
         1a:a1:3f:36:09:0b:23:e8:fd:7f:eb:04:48:76:ae:df:57:12:
         2b:4a:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 07:59:35 2026 by rpki-client