Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa
File:                     e48c52b2-2e37-3655-95b9-536384cb2c6d.roa (raw, json)
Hash identifier:          /jxXyGEnelyAbynfBW8cMlZK46gQlRm4KNOgo4M+9B8=
Subject key identifier:   D7:2E:D7:1E:A2:F2:BA:FB:78:F1:A1:8C:0C:48:97:09:6A:FE:41:90
Certificate issuer:       /CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
Certificate serial:       010D0C9F4328584D98BA981F8A2337E744098440
Authority key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        207.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:98:1f:8a:23:37:e7:44:09:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=37c1e00e-977f-4586-b575-93257ab72ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:91:4a:1a:f7:b8:88:b8:ec:ad:ff:3c:0d:
                    1d:42:db:ce:3f:21:93:43:2f:e7:b6:6d:44:2a:f1:
                    de:1c:b7:a1:16:5b:90:26:f5:97:a5:04:fb:7d:ac:
                    c0:23:fb:f5:6f:08:7b:75:aa:ac:db:b7:2a:eb:6f:
                    41:87:7f:92:f7:3c:0d:d5:65:b6:1f:9b:13:bb:54:
                    f7:35:f7:0f:df:a0:22:78:7f:c6:48:43:de:b8:e4:
                    61:e2:8c:9b:18:ce:69:01:4e:26:b3:b5:59:ff:05:
                    cc:dc:63:24:b7:ee:67:a3:86:a6:4f:e3:05:51:3f:
                    20:d9:51:9b:f3:66:36:d5:43:81:cd:56:96:6e:81:
                    c2:a8:83:0d:03:15:e0:94:27:5d:90:19:33:f4:5d:
                    d6:64:87:a4:79:de:db:e5:7c:5e:bb:8c:7d:82:cc:
                    e2:c0:a8:cc:a2:13:0e:1c:36:f1:80:45:63:57:d8:
                    af:8c:d8:f6:ff:e1:a9:b1:6d:32:47:87:13:fd:98:
                    2e:d8:2e:54:35:65:7a:dd:6d:da:63:33:5b:d6:86:
                    bb:b5:92:80:5f:1c:e5:71:a0:1d:c6:1e:d0:ea:6e:
                    09:53:2e:a0:87:15:22:cb:ac:5f:dc:7a:55:a9:db:
                    80:0d:f2:39:b5:40:18:37:dd:f4:d9:4d:62:0b:bc:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2E:D7:1E:A2:F2:BA:FB:78:F1:A1:8C:0C:48:97:09:6A:FE:41:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl

            X509v3 Authority Key Identifier:
                keyid:85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:0c:f4:cd:91:93:2b:a2:19:4e:6b:03:2a:1f:b7:4b:bb:
         0d:3a:ba:3a:b1:ca:8e:29:e0:d8:99:db:5c:41:c3:e4:ff:fc:
         5b:2b:86:44:7a:6e:43:16:93:1c:5c:d5:8a:43:ca:08:7c:5a:
         f1:74:98:15:97:8e:a9:3d:69:68:02:35:32:9f:d5:32:ba:4a:
         fa:c9:4f:65:d3:6e:3c:d5:7e:2d:30:3a:c5:bf:85:da:f8:b2:
         42:99:2b:4c:0a:72:7f:66:8a:59:56:96:48:3f:ba:5a:ad:82:
         c4:8d:f6:87:21:4b:c7:5f:75:a2:b9:78:10:33:11:7c:bf:69:
         ad:21:e3:85:8c:85:8c:e1:27:d7:a0:97:54:73:14:7f:8c:30:
         4f:fb:72:d5:6a:6b:23:f2:dd:fe:6c:f0:5d:0e:5e:c4:04:ed:
         62:12:c2:da:94:66:b2:35:90:d8:a5:f8:55:73:71:cf:d0:41:
         1d:89:9d:22:39:72:0d:14:48:b0:fc:84:9f:03:77:ce:61:94:
         ac:71:30:95:58:d5:51:37:a2:eb:ba:cf:42:52:61:e6:4a:d0:
         d6:af:91:f1:a7:bf:40:e4:80:95:a1:83:c8:88:82:32:52:a2:
         64:b2:a9:89:56:bc:3e:73:aa:41:73:9d:a9:66:7b:4c:ef:99:
         e9:b4:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:16:50 2026 by rpki-client