Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa
File:                     4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa (raw, json)
Hash identifier:          /FDf8MEUarZexlzpCuHYUwritbbBvhuYdStx+MLteK4=
Subject key identifier:   D5:7E:CB:61:DA:87:72:FF:1B:58:EA:F9:E9:F6:C1:75:72:BD:D1:DC
Certificate issuer:       /CN=580e739b-bb2f-4e02-9a24-4813328e39cf
Certificate serial:       010D0C9F4328584D5234FD7746F71119EF32F400
Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa
Signing time:             Sat 28 Mar 2026 18:44:38 +0000
ROA not before:           Sat 28 Mar 2026 18:44:38 +0000
ROA not after:            Wed 13 May 2026 20:28:44 +0000
asID:                     3736
IP address blocks:        199.5.156.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fd:77:46:f7:11:19:ef:32:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf
        Validity
            Not Before: Mar 28 18:44:38 2026 GMT
            Not After : May 13 20:28:44 2026 GMT
        Subject: CN=d14d8d88-6dff-4806-8eff-86992ea5309d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:67:62:1e:6e:6a:67:87:66:3f:61:a9:5e:
                    46:15:86:97:68:26:95:26:e4:8a:65:4a:51:60:5a:
                    9a:30:11:26:70:7d:e7:9b:82:20:16:8d:a1:4f:ba:
                    21:f8:65:4b:f2:fd:7c:a0:77:83:8a:3a:b0:70:27:
                    2c:cc:9d:cc:97:ce:04:05:f6:cd:dc:3d:1b:93:dc:
                    34:28:01:ed:79:bf:5a:46:70:19:b8:b8:74:7c:67:
                    8f:0a:22:7b:03:a9:5b:e7:a0:b3:0d:ae:15:0a:ef:
                    f5:d7:12:cf:de:28:5f:1b:cf:34:ad:62:c5:bf:6d:
                    37:37:ea:60:be:eb:e4:39:3f:84:53:e1:16:77:74:
                    3a:85:2f:28:75:1d:9d:f3:7c:d8:63:47:7c:ef:75:
                    1e:68:e1:ce:c3:c0:c4:96:b3:fc:49:ff:6b:6c:14:
                    b0:ba:6e:91:67:8e:b0:70:66:2d:ef:4a:76:18:08:
                    e2:40:47:90:52:01:f7:d6:98:a5:5a:fa:d1:36:72:
                    91:3f:3a:5e:73:82:3b:30:6c:0d:a0:d4:8c:8d:56:
                    ee:56:de:18:97:75:58:05:29:d4:ce:b4:e3:80:4e:
                    cb:89:f8:8d:59:da:2d:07:d4:49:7d:66:36:80:ab:
                    ee:24:90:2b:40:f0:d3:df:df:14:b7:d4:67:3b:f7:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7E:CB:61:DA:87:72:FF:1B:58:EA:F9:E9:F6:C1:75:72:BD:D1:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl

            X509v3 Authority Key Identifier:
                keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:34:c1:ed:c1:5f:b9:f5:76:bf:c7:be:ce:dc:1d:3e:66:
         9e:2c:2d:e4:f5:73:33:9c:62:b3:ff:34:ab:1c:c0:f5:32:74:
         f6:aa:e9:f6:1a:12:91:37:a4:21:5f:76:f0:45:d3:8c:62:be:
         ad:f4:86:b9:c3:41:52:50:da:9e:55:1f:bd:2c:e6:16:21:a3:
         93:31:48:37:62:2a:49:09:21:7f:6c:31:c1:94:e2:34:48:d2:
         a4:a5:ff:27:1d:27:94:95:98:99:86:e8:65:db:08:ed:1f:50:
         8a:57:33:70:d3:81:d2:d9:48:6d:2e:4f:15:bd:c5:0f:31:93:
         ba:27:35:d1:8b:ee:5a:ce:58:68:b6:03:10:aa:f1:c4:30:fc:
         3f:bf:4c:c9:90:df:a0:ce:a5:63:12:2a:cd:e9:39:16:a4:b9:
         9b:2a:44:73:a8:e1:4c:c8:54:a2:09:cf:38:6f:a8:63:b7:4a:
         eb:c6:57:7d:4a:bb:26:d6:3b:50:2a:6e:18:04:92:b4:4b:02:
         65:7d:47:da:b6:58:26:5b:21:6b:44:22:b0:86:e6:04:8c:7d:
         36:27:2b:ca:66:3f:96:25:d4:30:64:9d:af:6f:e7:5b:af:fc:
         bc:56:2b:81:63:73:9e:32:5b:b9:b4:eb:64:c4:22:83:28:d2:
         df:c7:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:31 2026 by rpki-client