Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa
File:                     ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa (raw, json)
Hash identifier:          qGpc+uCy+eZBiRC+4mefQL8TLF8y1VY2y0O6CcVMG2Q=
Subject key identifier:   F7:07:5A:64:CE:97:42:F9:D3:35:01:D9:46:F4:3E:07:82:C8:3E:63
Certificate issuer:       /CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb
Certificate serial:       010D0C9F4328584EA7885E3E3E075828685E13A0
Authority key identifier: 22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     393336
IP address blocks:        173.0.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5e:3e:3e:07:58:28:68:5e:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddbb9aca-bd57-4f42-b053-a90ac62827fb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=61a65d85-288d-4ef0-b128-0307a2c4e99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:d3:f0:ad:a8:45:a3:04:b6:91:61:6f:57:
                    8c:43:92:86:00:24:d6:04:a2:af:4b:67:01:99:89:
                    0f:55:a3:5b:6a:dc:aa:24:50:be:a6:cc:b2:6f:ec:
                    99:22:3b:d0:b8:9f:fd:f2:37:c2:a7:d8:4a:79:0c:
                    37:b5:4e:25:e1:fb:74:43:77:9f:a3:bc:b0:85:eb:
                    8c:e0:8c:8b:77:35:2a:a5:a1:c4:9c:64:f1:78:e9:
                    a3:d2:f6:74:c9:4f:9e:20:63:f6:45:08:31:02:be:
                    83:80:05:ba:3a:2a:06:29:b8:b2:39:d0:60:8c:f1:
                    39:3d:78:f1:b2:33:94:50:d1:72:eb:47:10:51:da:
                    22:c4:32:38:62:2c:b3:da:16:66:ae:d8:d9:03:85:
                    5c:99:33:cf:7f:d5:73:f6:13:77:7e:5f:87:0c:70:
                    ce:b2:4f:c3:05:db:9e:c3:f3:ba:b1:aa:4f:ef:30:
                    0d:05:8e:eb:a2:d2:92:46:6d:6e:38:e1:80:3d:08:
                    5c:a1:41:ef:b1:7d:e9:a2:1d:12:83:5e:97:0c:2f:
                    e2:dc:35:40:cc:03:79:9a:7f:a1:88:91:40:91:ee:
                    f5:4d:51:11:2c:18:10:e4:fa:1b:dd:ae:48:e2:b2:
                    a8:a6:67:19:e6:44:ba:8a:bb:48:70:7a:aa:bf:87:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:07:5A:64:CE:97:42:F9:D3:35:01:D9:46:F4:3E:07:82:C8:3E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ab0ebf1a-fed9-338c-aec1-d741f8c04827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb/ddbb9aca-bd57-4f42-b053-a90ac62827fb.crl

            X509v3 Authority Key Identifier:
                keyid:22:85:AA:EA:73:AB:DC:3A:6E:18:68:E8:84:6D:03:07:CE:E0:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ddbb9aca-bd57-4f42-b053-a90ac62827fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:da:15:ae:47:a3:c3:19:38:39:7e:57:b5:08:50:a3:5b:b0:
         66:ae:3f:b9:ab:4b:7d:8d:6a:1d:6c:4b:84:96:be:52:ae:df:
         f3:b0:0f:2e:a6:03:ad:56:0c:ad:58:be:9f:25:21:e1:a9:f7:
         6c:79:6e:40:be:99:b2:94:3f:4b:e2:e9:ab:e4:3e:51:d3:40:
         bc:62:b6:7e:97:56:1f:42:94:3d:89:4d:dd:b8:43:dd:48:02:
         d5:4e:60:b6:e8:b0:fa:eb:69:6f:44:68:98:9b:23:51:10:e5:
         71:47:07:1d:da:65:15:c4:19:f7:e9:b3:aa:35:33:56:5e:4f:
         66:8d:6f:cd:5b:b1:69:59:17:15:dd:83:32:87:2f:28:74:ed:
         18:d9:53:8c:de:9e:19:9a:d1:ec:12:40:1a:73:c7:7f:4e:e4:
         8a:64:a0:45:b8:f6:58:75:e8:9b:c6:e3:b6:f2:c6:b2:36:67:
         7c:08:49:3e:99:90:9b:8b:7c:b4:dc:80:80:7c:b6:5b:f7:d0:
         af:08:0b:21:7b:62:15:82:21:be:ea:ef:25:78:7d:bb:77:86:
         2e:ac:7a:dc:2c:f2:5c:ff:52:21:de:ca:82:e3:3f:7d:23:93:
         9f:ee:5f:d2:b5:bc:72:e7:ef:70:6f:6d:62:08:23:ac:8a:c7:
         b3:65:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:05:46 2026 by rpki-client