Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
File:                     c5492a25-61e2-3397-848b-141163ce58ef.roa (raw, json)
Hash identifier:          zFU4usq5W3+eBsVyvOD9+vZHkzBIJiurUpJ8Zv52KCQ=
Subject key identifier:   46:50:01:C7:EC:A0:AA:FB:92:6C:B2:5D:50:B3:03:0A:10:80:54:55
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584DAC457CCA577B3752F152DE00
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     397511
IP address blocks:        128.211.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7c:ca:57:7b:37:52:f1:52:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=7b0ab832-bc02-45ca-8d32-f80adfc2ef54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:c4:1a:6e:c1:00:aa:02:9e:06:d5:97:96:
                    10:c8:fe:cc:24:b1:96:e0:91:61:be:ae:16:bf:26:
                    07:61:e2:34:ba:11:9f:08:d4:ee:6b:2f:09:aa:6a:
                    80:ef:4e:1f:3f:a6:12:c9:97:24:c1:c7:05:eb:f5:
                    3d:ba:e8:94:5b:d5:5f:b6:5d:42:1b:63:d0:b0:e4:
                    c7:8b:22:b3:9a:9f:06:52:66:d7:d5:7c:58:1d:f4:
                    2a:88:1b:60:be:44:5b:20:ac:c2:62:4b:f2:3f:74:
                    5b:29:1e:45:2e:ff:2d:98:cc:6c:a1:ea:6d:cb:72:
                    52:c2:62:28:4f:5f:4e:a9:27:bd:c7:cc:45:b3:52:
                    1c:92:32:fb:ad:51:8d:b2:84:53:ca:1a:b8:12:4b:
                    a6:2e:63:74:19:59:0b:25:10:d6:27:72:79:a9:02:
                    ed:0c:2e:63:72:d3:8a:7a:de:ea:b2:0e:5b:c2:53:
                    82:f0:2f:41:6c:86:af:f7:5d:20:8e:57:da:d0:1d:
                    74:86:c1:d3:cf:be:e8:c0:3f:5f:80:6b:e0:80:93:
                    dc:c0:e8:03:8f:53:3a:84:d5:fa:7c:dc:10:4c:24:
                    6b:96:89:74:67:1d:50:eb:78:eb:1e:4a:14:6a:e9:
                    15:a2:5f:37:1c:cc:df:27:65:f0:06:eb:10:90:3a:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:01:C7:EC:A0:AA:FB:92:6C:B2:5D:50:B3:03:0A:10:80:54:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.211.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:4a:6f:9e:76:bc:48:f0:78:74:11:f5:62:8e:1d:95:e5:
         7d:59:47:32:04:7a:12:ac:62:f7:c8:d8:99:86:f7:75:12:c3:
         89:ab:95:86:03:13:40:76:c7:12:75:c7:67:34:5c:56:b9:f2:
         85:8d:25:17:01:b4:d6:b8:da:96:fd:f0:01:25:d0:41:fe:d5:
         37:84:bb:af:e2:3a:24:cb:86:f6:8a:b0:d9:a0:9b:ba:45:86:
         31:b1:53:e0:18:25:48:ae:98:3d:c9:bb:a9:5f:11:40:c7:80:
         f0:31:79:19:75:62:bb:d3:36:bf:e2:6e:f3:f8:c7:fd:9d:83:
         ea:cc:84:12:b1:6b:0c:90:92:c0:a8:d6:17:72:24:8e:6d:1d:
         56:69:2b:73:4c:5e:c2:61:78:c7:de:16:3d:07:41:1b:c7:fd:
         20:3b:48:8d:ba:9b:73:69:e8:31:17:2f:d3:17:95:a8:f3:5d:
         44:01:3f:25:b5:bf:fa:0d:d3:a7:82:01:33:65:ea:5a:b0:24:
         46:5d:87:b5:60:65:00:2b:61:56:20:f6:d7:ae:47:03:7e:c5:
         23:d6:13:1b:f6:36:dc:82:f8:fe:d6:d0:b9:02:88:f3:b0:52:
         b4:87:55:94:ef:c7:a5:8b:22:10:61:3b:ca:b5:05:c0:4b:8e:
         04:56:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:55:07 2026 by rpki-client