Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa
File:                     1ddd6058-8bac-3231-9bed-094a75781a5d.roa (raw, json)
Hash identifier:          Tb+6NvbjGNIxd+6cW4418ndSF8JTusuftKK0So/FMGM=
Subject key identifier:   29:03:20:C6:CF:DD:74:4A:57:50:2D:BF:11:82:1C:B0:3B:65:EF:06
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584DAF102D5C17B9996F38167C00
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     30029
IP address blocks:        57.138.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2d:5c:17:b9:99:6f:38:16:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=7658a034-b654-40af-92e3-3a0b1aba2617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:5c:97:5a:13:3a:23:84:ed:0d:c6:50:82:
                    29:1e:db:b6:33:81:83:5b:47:de:eb:a3:a0:0d:8f:
                    e6:0d:75:ce:98:86:fe:68:80:c1:ae:f8:70:65:28:
                    73:ae:0d:bc:a1:4e:10:1d:e5:9c:4b:53:77:1b:80:
                    15:a6:fd:b3:80:53:53:fd:a7:4a:68:c8:e4:87:87:
                    d2:53:d5:8d:c3:06:77:10:c6:c3:c8:d2:4b:c4:80:
                    38:79:7d:f1:76:cb:76:bb:77:4f:5b:d1:3c:d2:53:
                    78:4f:20:a5:81:13:2d:32:d0:44:5d:c3:f9:4a:0d:
                    d4:fb:99:e3:10:c9:b2:fc:7e:95:31:3a:ab:6c:92:
                    d7:92:cf:4e:13:ec:44:80:d8:f3:48:4d:2f:fe:5d:
                    b5:a1:be:8a:71:8e:fb:54:07:1a:95:71:fd:78:b0:
                    21:78:e5:7a:d1:86:c9:21:18:45:a4:f3:a6:09:ef:
                    ce:e0:47:e4:5c:f1:d3:db:85:94:27:b3:de:8d:75:
                    74:8f:63:f8:93:06:dd:af:0d:11:bf:84:9b:3d:e7:
                    d1:5c:96:e8:b3:f0:f5:2a:3c:b3:05:bb:a6:1b:ea:
                    1f:79:bc:23:2b:97:f8:b0:d9:32:87:33:7b:3d:c9:
                    ac:aa:29:a6:85:df:b4:00:b5:84:a2:dc:24:02:99:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:20:C6:CF:DD:74:4A:57:50:2D:BF:11:82:1C:B0:3B:65:EF:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1ddd6058-8bac-3231-9bed-094a75781a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:21:81:43:d9:11:bd:5e:80:34:49:a8:0f:41:52:23:2f:
         94:dc:ab:52:35:77:69:26:dd:74:58:b7:78:88:54:7a:b6:32:
         fa:5a:8e:5d:66:49:0d:a8:db:e9:85:c7:e5:d3:5c:dc:74:8e:
         f0:db:c5:98:ce:a7:f1:35:6d:32:4a:53:3a:4e:06:b3:b3:83:
         d5:d2:b7:96:c4:85:c1:76:37:46:93:09:3b:5a:b6:48:5e:b2:
         3c:48:58:65:b6:09:5c:1e:d7:53:c7:06:da:1a:19:05:db:c2:
         4c:58:e8:be:01:2c:a5:3e:c8:ec:cd:7f:51:af:a5:96:77:6b:
         de:9a:68:59:76:23:09:8c:4b:f8:6f:aa:fa:81:e7:29:43:72:
         50:92:39:f2:fe:91:a4:f0:ba:3a:5b:72:42:8d:94:2f:5a:55:
         67:2a:83:b4:18:72:c1:59:c1:29:8f:7f:43:a2:8e:15:ba:ba:
         87:d1:8c:96:1b:a2:41:36:be:cd:b2:6c:25:3a:9f:04:94:fe:
         5e:3a:bd:ce:e6:eb:9b:c2:8e:28:b1:93:db:53:d6:9b:62:d3:
         80:ca:18:3c:fe:f2:c9:6f:ad:d0:d0:a1:06:62:86:ed:cb:51:
         e9:33:c0:68:2d:96:37:ef:11:96:29:49:09:21:04:dd:65:27:
         d7:e6:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:12:28 2026 by rpki-client