Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/7139e3ba-723e-3916-9355-4bc0c92fe671.roa
File:                     7139e3ba-723e-3916-9355-4bc0c92fe671.roa (raw, json)
Hash identifier:          xGmkiharNUlvohRgMP+Qib+uOQJuXnkLXEN59COCFYg=
Subject key identifier:   C1:89:81:F2:AD:A5:6C:96:C8:55:74:21:8D:F2:82:1A:90:F4:1E:F8
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584D667A5140AEA89E9C623A4C80
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/7139e3ba-723e-3916-9355-4bc0c92fe671.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     401764
IP address blocks:        192.5.101.0/24 maxlen: 24
                          192.5.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:51:40:ae:a8:9e:9c:62:3a:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=05cd78ae-448b-49b1-84a1-1a118218fdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:fa:a1:fa:ef:f2:eb:03:55:8d:2f:65:37:
                    b1:c4:1f:56:d6:c1:60:ed:dc:cb:f9:a5:88:be:6f:
                    cf:4d:8c:43:11:41:16:e2:48:cf:b7:a5:bf:8b:fa:
                    2a:fd:87:46:47:be:ce:3d:89:90:46:81:25:82:39:
                    51:5a:53:21:5a:02:75:4d:c0:5a:af:b7:6e:58:6c:
                    ab:5b:ee:01:51:74:c1:d9:0f:6b:dc:2d:7d:7c:d3:
                    f7:ad:23:94:cd:7d:ce:37:90:b1:89:19:c1:4b:c8:
                    e5:6c:bf:be:f6:96:62:e7:61:10:04:41:11:fa:5b:
                    5a:d8:92:aa:77:ae:c0:3d:f9:b6:6c:f6:9d:98:b8:
                    85:81:47:e8:48:6d:d7:7b:c6:57:26:ed:3d:05:0e:
                    f2:11:3c:16:8e:d0:92:b8:03:0e:e5:32:81:35:49:
                    10:fe:2c:e7:56:8f:95:54:87:e6:09:eb:e1:6f:70:
                    14:55:d4:cf:c1:51:45:7a:a4:6b:27:85:c3:43:72:
                    12:dd:01:cc:31:14:02:da:71:b3:59:cb:f6:0b:75:
                    dc:f6:f9:5d:fe:b6:c3:42:74:4e:06:3d:08:0b:3e:
                    81:d3:1a:53:38:f3:8d:31:18:74:f7:d9:b2:c3:6d:
                    7e:6e:aa:ed:02:2b:8e:d5:9f:ea:83:14:b6:fb:81:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:81:F2:AD:A5:6C:96:C8:55:74:21:8D:F2:82:1A:90:F4:1E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/7139e3ba-723e-3916-9355-4bc0c92fe671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.101.0-192.5.102.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:43:ee:8a:84:77:8b:17:58:03:38:5b:49:fb:1c:ea:96:90:
         ac:27:1b:3f:a3:70:84:f1:25:0f:93:f0:02:e1:3a:00:b9:da:
         06:b7:f4:44:6d:7d:7d:1a:af:5c:f1:79:a6:f3:90:99:02:94:
         84:68:e4:88:b6:39:c7:31:c4:f0:1d:70:95:4d:c0:41:b1:5f:
         0b:eb:45:6c:44:cc:ad:7e:1d:4b:0b:53:02:b0:6e:5b:bc:87:
         a3:c8:bf:90:5e:4f:dd:27:b4:06:2b:d5:3b:0d:67:e2:9f:2f:
         fb:09:80:7d:0a:b5:54:15:06:d5:0f:ce:0d:a6:d3:7f:73:1e:
         e5:1e:ba:b6:ab:55:55:e1:52:31:d2:60:00:c8:39:df:a2:f6:
         75:39:aa:b9:1c:d6:bc:33:af:d5:04:d2:9c:97:53:54:b4:d9:
         0f:61:74:42:e1:7a:b6:d6:52:d4:83:cb:7c:e2:c9:bc:5c:9b:
         ca:a3:dc:6d:26:b7:bc:74:eb:be:be:cc:e6:17:48:3e:49:bf:
         5d:47:ca:0b:a2:c9:fd:1d:2d:f9:ee:6c:f8:88:69:1d:e2:45:
         87:74:c3:87:85:84:00:d9:ee:b4:6a:b9:d6:a4:6e:9b:13:ed:
         a5:1f:3e:bf:15:a8:49:76:d1:e4:02:67:17:86:6e:8e:21:64:
         27:57:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:03:10 2026 by rpki-client