Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/9add62de-669d-3d7e-be33-15ab7450ee19.roa
File:                     9add62de-669d-3d7e-be33-15ab7450ee19.roa (raw, json)
Hash identifier:          HC/NPOJOKTaezsqJLsWvFfd7TdTv2a5DAj0PjMG6X0Y=
Subject key identifier:   5E:ED:52:AE:3D:78:2D:F7:6D:0E:1F:CD:B7:91:A0:58:F9:B8:94:1D
Certificate issuer:       /CN=ea47eec1-be54-4200-af9d-4d45bdead50c
Certificate serial:       010D0C9F4328584DBF13D9D70D5367FB9F67BE80
Authority key identifier: 5E:0D:09:8D:07:4E:E6:D3:FD:2E:E3:F4:93:D1:43:48:60:73:64:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/9add62de-669d-3d7e-be33-15ab7450ee19.roa
Signing time:             Wed 06 May 2026 18:40:58 +0000
ROA not before:           Wed 06 May 2026 18:40:58 +0000
ROA not after:            Tue 04 Aug 2026 18:40:58 +0000
asID:                     30688
IP address blocks:        192.245.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:13:d9:d7:0d:53:67:fb:9f:67:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea47eec1-be54-4200-af9d-4d45bdead50c
        Validity
            Not Before: May  6 18:40:58 2026 GMT
            Not After : Aug  4 18:40:58 2026 GMT
        Subject: CN=e7de44b0-3195-416a-83aa-ee71178fdfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:83:64:4d:da:d4:40:fa:e2:aa:d9:50:66:
                    67:61:94:30:ec:d6:96:4a:72:d4:82:4c:a1:16:e5:
                    39:3b:fa:9c:15:37:8f:8b:5f:56:4c:42:24:aa:9a:
                    f9:07:07:53:57:75:17:be:91:47:f6:92:31:58:9b:
                    4e:6f:0f:4b:01:32:51:6d:73:ca:20:bb:2b:77:2b:
                    37:ac:07:f8:75:6f:aa:4f:92:77:38:b4:97:99:2c:
                    a7:4c:eb:ad:26:ab:11:11:77:c3:9f:49:4c:42:df:
                    ee:8b:9d:2d:8b:01:f1:5e:6a:31:e8:75:82:b1:09:
                    16:09:b3:4b:19:fa:2d:62:d8:ef:59:6c:f3:c4:00:
                    82:c4:c7:dc:23:7d:94:71:79:b2:05:c2:4f:37:e7:
                    d0:9b:66:bf:91:57:ec:5d:37:09:f1:f4:1d:d0:49:
                    3c:aa:33:b4:66:e2:21:b1:12:4d:b3:dd:05:e0:1d:
                    28:c6:21:56:20:d6:05:e5:17:20:0d:5d:7a:92:fc:
                    be:18:be:d3:72:51:58:95:7f:24:11:19:ee:cc:b3:
                    c5:7c:5c:ba:1c:1c:f2:df:c1:d1:59:b0:a8:fc:01:
                    c9:eb:22:76:cc:ad:af:bc:75:92:db:90:99:15:ea:
                    21:42:5e:78:36:ea:4d:42:b5:9e:1d:0b:c9:e5:df:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:ED:52:AE:3D:78:2D:F7:6D:0E:1F:CD:B7:91:A0:58:F9:B8:94:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/9add62de-669d-3d7e-be33-15ab7450ee19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:0D:09:8D:07:4E:E6:D3:FD:2E:E3:F4:93:D1:43:48:60:73:64:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:ad:d7:37:db:c8:39:7b:da:d8:89:02:4b:3f:33:15:69:
         5c:91:3e:f6:d9:da:0b:73:d8:1f:ba:b2:59:4e:fc:55:6b:77:
         47:10:3e:bb:50:d3:9b:3a:6c:a9:bc:05:af:fc:d0:35:c3:ca:
         8e:81:63:6c:88:da:7c:49:77:d8:3e:2c:f5:e9:8f:87:73:32:
         17:f3:86:9e:6e:f7:93:29:9f:c0:72:dd:4b:23:fb:e4:d5:25:
         f1:20:fd:12:32:73:c3:11:81:92:0c:4f:7f:21:16:c4:e8:61:
         b7:e5:bb:60:d3:6c:a9:34:94:7d:f6:da:90:3d:59:8a:49:f8:
         99:1c:c4:46:86:ec:d2:bd:fc:02:e0:d6:8c:81:94:fc:49:37:
         9d:5f:ad:76:af:63:37:19:b0:4c:5c:26:be:6b:71:59:93:e3:
         0b:0a:28:dd:07:ee:ba:43:76:49:a3:58:2e:80:25:a5:e7:07:
         54:45:ad:43:d7:39:b5:31:ed:4d:8a:2e:c3:74:45:ce:dd:60:
         c0:e2:0b:c4:41:dd:0e:98:56:68:4a:16:8e:74:98:bf:76:76:
         c5:e6:27:90:c8:77:52:15:c8:20:91:54:fe:8e:6c:c4:bd:3a:
         5f:99:68:d8:74:73:3a:a3:e6:19:a4:c9:2d:14:b2:f4:c6:39:
         f4:80:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:21 2026 by rpki-client