Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa
File:                     5364c7d8-d88a-387a-887a-c1f60e3aec56.roa (raw, json)
Hash identifier:          tmlMSdX0YcCFZdsoTIUcO8NSzMyX2L3UbutHHVPj/Cw=
Subject key identifier:   09:45:9C:A9:CA:C2:D9:31:D6:BC:F7:5E:DB:C2:D7:01:50:49:C5:18
Certificate issuer:       /CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183
Certificate serial:       010D0C9F4328584D5E1A5CFCE415035977900680
Authority key identifier: 1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     19184
IP address blocks:        137.28.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:5c:fc:e4:15:03:59:77:90:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=e5656259-5f51-410f-8665-c628fb1f652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:33:10:98:9b:70:28:f4:aa:14:62:0a:6f:5e:
                    4a:da:cf:a1:43:e7:a3:22:c4:5c:72:35:6e:fd:39:
                    69:42:4f:ad:ab:47:c4:79:cd:2f:47:8a:a4:99:f8:
                    51:a4:cc:72:ff:ed:e1:61:9c:47:57:1b:44:05:be:
                    6e:25:28:bf:11:5b:97:37:bf:1c:cb:de:04:71:41:
                    b1:55:fc:78:96:27:17:f5:cb:8e:39:dc:10:75:57:
                    79:53:06:63:0a:41:d5:45:2a:8e:c0:1d:6c:cc:a0:
                    c2:5c:70:1c:10:a8:94:45:13:98:c0:58:22:ab:5d:
                    36:14:f1:80:81:d2:42:df:2f:97:5f:5e:7a:98:91:
                    37:5e:26:e5:d3:ff:49:07:dd:6b:78:d6:a7:b5:c2:
                    e0:72:2e:79:a7:69:a0:30:85:8d:ec:f1:5f:c9:89:
                    07:8f:a0:00:11:6e:ad:88:04:47:3b:4b:26:3a:46:
                    69:3a:38:1c:82:75:c2:a7:d2:91:85:6d:d1:f3:82:
                    63:d5:9a:b6:9e:b8:d7:2e:fc:ed:15:ec:c6:22:c3:
                    f6:9b:86:8d:e2:88:b6:b2:11:03:bb:cd:0a:3f:80:
                    b0:4f:4f:cf:cb:92:f8:af:06:d2:53:87:7f:d1:89:
                    49:99:66:94:be:68:80:c5:b0:52:3b:a2:14:1d:33:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:45:9C:A9:CA:C2:D9:31:D6:BC:F7:5E:DB:C2:D7:01:50:49:C5:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl

            X509v3 Authority Key Identifier:
                keyid:1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:b1:3a:1e:d1:da:f9:97:0e:56:56:0f:dd:4b:28:6a:9a:ac:
         85:4b:92:8c:f2:3f:4c:46:e9:c8:d7:97:8e:52:4c:fc:bf:e3:
         23:08:86:20:a1:b0:c6:9b:ea:06:25:07:b3:b9:b7:1c:f4:48:
         71:25:eb:ff:15:67:a3:90:78:a2:b7:20:a8:de:ee:d6:f3:a9:
         d6:67:05:73:84:72:57:c0:66:15:9b:b9:3d:da:9e:20:eb:76:
         aa:c7:f1:c7:48:8a:dc:c1:69:ca:0a:0b:bd:5c:29:26:d8:6b:
         1f:e1:af:18:96:2d:af:7b:e7:c2:b6:e5:a8:f3:46:f8:2a:64:
         72:98:3c:d5:5e:8c:7c:6a:20:e9:a6:ba:92:a0:42:fe:69:0d:
         51:9b:bf:28:bd:cc:85:48:e1:90:8a:a8:24:54:38:fe:98:f0:
         53:e1:b3:c5:67:b2:be:eb:d7:e0:37:d3:e3:93:1f:1e:16:eb:
         85:fc:dd:49:fa:c1:9c:d0:59:36:80:1a:ef:d6:ce:8a:e8:af:
         81:c6:10:38:41:f6:4c:6d:47:f9:dc:43:1d:8e:be:a1:cf:12:
         7b:ba:ec:f6:14:37:f3:c2:60:e1:e9:6f:0a:ed:d3:33:78:fd:
         6b:a6:8a:4c:7c:ad:04:8a:ff:34:2c:08:67:1f:42:47:0d:4f:
         9e:f7:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 15:58:11 2026 by rpki-client