Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ff0e54b7-8b77-330c-b2e5-39542514aa58.roa
File:                     ff0e54b7-8b77-330c-b2e5-39542514aa58.roa (raw, json)
Hash identifier:          dz69EmXs1R5Bx8qGUL5IEekNpShoJehvQ3cdibE6rJg=
Subject key identifier:   2B:8F:90:D5:B1:C1:00:87:54:8F:54:02:12:00:D4:D7:C2:E4:91:EF
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584DBA3B1C5867D0D49DA786E400
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ff0e54b7-8b77-330c-b2e5-39542514aa58.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     3738
IP address blocks:        192.250.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:1c:58:67:d0:d4:9d:a7:86:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=60e31b04-cfdd-41f3-a80f-11697d5638cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:e7:4f:e8:e8:7b:e5:e2:28:ef:a6:da:fc:
                    50:24:7b:36:b2:97:c6:7f:fb:a3:f9:72:e4:f3:83:
                    6e:a5:30:41:8e:d1:7a:e5:cd:47:d8:ad:56:8a:d2:
                    fa:73:47:dc:46:00:3d:67:08:b0:0c:5f:58:4e:76:
                    6a:ef:45:51:d0:ce:69:67:30:7b:b7:2b:24:a1:d8:
                    c7:66:7d:4d:47:5a:a7:dd:41:d9:4a:e3:b2:21:13:
                    65:b3:9d:6f:cc:07:bf:cd:72:15:49:a5:de:08:81:
                    ad:8a:5f:ca:8a:33:45:4b:fa:fd:1b:fb:03:4e:40:
                    50:68:02:ae:2a:e6:0a:26:0e:02:66:b0:7c:f2:5d:
                    98:21:83:35:1b:98:9b:f6:7f:af:2d:b9:bf:f3:29:
                    ac:26:18:9c:14:1c:d7:c0:a6:aa:2f:66:7a:45:fe:
                    60:b8:38:19:7c:19:37:d9:01:d1:25:6f:67:0f:a3:
                    5a:21:dd:1d:11:4a:07:b0:a3:c2:cb:e6:0d:26:3b:
                    8e:28:5b:a7:65:f5:48:c7:5c:9d:bf:89:f9:f5:38:
                    2e:73:66:29:22:5a:8b:a7:03:0a:18:33:58:1f:25:
                    dd:28:e4:8f:40:01:5a:84:83:1d:41:eb:4c:0c:fc:
                    37:c3:3b:1c:fb:91:ec:d7:63:aa:23:97:0f:fc:c3:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8F:90:D5:B1:C1:00:87:54:8F:54:02:12:00:D4:D7:C2:E4:91:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/ff0e54b7-8b77-330c-b2e5-39542514aa58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:80:c8:f8:f0:39:7c:6a:4a:c6:e5:9a:5b:43:e3:c3:7e:
         84:2a:b5:e3:4b:90:25:b6:e1:a7:6c:6b:65:aa:68:d2:b9:76:
         35:e9:28:26:d2:45:8f:1a:74:80:02:70:d1:4c:4a:2b:22:03:
         a9:57:c6:0b:1c:34:46:9a:be:22:7e:68:6d:26:12:85:bf:d8:
         97:92:44:fd:9e:bc:5f:0b:f0:ca:6e:6c:1e:aa:c9:a8:e8:2e:
         da:b1:69:35:01:f3:e7:76:b6:28:ec:e7:60:35:a9:32:5b:2c:
         4c:56:ab:a0:0d:ac:5e:e5:59:84:9b:ed:d6:8e:61:ff:c5:85:
         03:6f:7d:58:13:c9:d6:3a:90:cb:8c:ff:c5:f9:5d:3a:2f:7b:
         8e:61:6e:74:a2:cf:48:90:c2:3b:fe:fe:5d:b4:a9:2b:f8:71:
         e5:e7:6f:3f:34:da:e3:43:40:11:0f:ca:0e:18:3e:77:21:b7:
         13:6a:77:14:0e:e1:0a:79:d8:37:cf:fe:a0:a9:8a:8f:e6:bf:
         5b:a6:20:da:b2:1a:9b:30:58:1e:8e:b7:d0:bb:ac:b9:0e:10:
         a2:d6:3a:ae:6d:5b:36:12:df:1b:1f:fa:79:47:ee:d3:64:d0:
         b1:ba:c5:a9:ba:88:d2:bd:cc:f2:44:d2:7f:e1:40:24:c3:38:
         33:7a:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:12:36 2026 by rpki-client