Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa
File:                     f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa (raw, json)
Hash identifier:          xC+aDVpZdNrIIUHzMv0v9KWGpEGX0GphcszNVh2Pc1Q=
Subject key identifier:   E9:DD:BF:1A:1E:64:3F:37:0B:5D:5D:49:E2:CE:3F:81:9D:E2:37:16
Certificate issuer:       /CN=ef95cef5-e935-4ba0-a453-bc65e785a251
Certificate serial:       010D0C9F4328584DD625CC4287F8E0F68A159880
Authority key identifier: E3:A1:21:A4:C0:E6:FE:97:D1:ED:DB:0E:6A:D2:FC:88:D2:11:F6:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     401262
IP address blocks:        141.193.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/ef95cef5-e935-4ba0-a453-bc65e785a251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/ef95cef5-e935-4ba0-a453-bc65e785a251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:cc:42:87:f8:e0:f6:8a:15:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef95cef5-e935-4ba0-a453-bc65e785a251
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=54dd66a6-4941-4966-9c8c-1700df5ee049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:e8:af:a6:28:45:21:fb:85:45:73:a2:a9:
                    85:eb:5a:49:60:e1:22:e1:54:e0:6b:59:10:65:f5:
                    00:ce:7d:32:81:93:42:da:99:a6:dc:b9:1b:c2:88:
                    89:0b:48:49:62:6b:66:d5:3f:3f:00:4f:89:1b:ab:
                    40:80:08:e6:f8:b8:b3:83:9a:67:20:4f:45:ac:e7:
                    0c:6c:ac:d2:35:07:8a:8e:89:cb:65:06:d2:4e:b2:
                    fa:47:9e:ec:34:fb:88:6d:a1:eb:70:cd:55:fb:41:
                    8c:a0:d9:90:0c:5d:c1:fa:91:e4:16:d0:b1:95:9e:
                    8d:bd:dd:2c:6e:b1:65:6f:c0:ea:b5:2e:88:98:92:
                    80:70:c3:79:69:9b:6f:05:f0:d1:d8:87:c8:e4:cf:
                    cc:f8:f2:ff:90:20:74:19:d6:d4:df:58:7d:1c:43:
                    f5:e2:ef:1a:4d:d5:66:0d:bb:13:7d:ea:cb:5f:95:
                    d3:2d:00:c8:34:e9:30:44:d5:3d:ed:3a:0b:7a:f7:
                    ce:48:3c:e5:1a:e1:1b:47:c0:23:df:39:97:22:41:
                    8a:72:22:95:41:46:53:dc:5b:d2:64:6c:89:31:0f:
                    df:7a:03:0f:0f:98:9a:b3:7f:59:2c:7d:63:4a:6f:
                    ae:c1:d4:69:b6:53:b8:c6:f1:1b:fb:46:35:e1:99:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:BF:1A:1E:64:3F:37:0B:5D:5D:49:E2:CE:3F:81:9D:E2:37:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/f5c6fe84-32fb-3c47-b44b-ad5cd3b4c373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251/ef95cef5-e935-4ba0-a453-bc65e785a251.crl

            X509v3 Authority Key Identifier:
                keyid:E3:A1:21:A4:C0:E6:FE:97:D1:ED:DB:0E:6A:D2:FC:88:D2:11:F6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ef95cef5-e935-4ba0-a453-bc65e785a251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:da:06:ba:59:f4:fc:2c:d0:e0:16:e5:86:f7:4e:3f:37:
         93:ff:8c:f7:9e:11:64:0f:cd:4b:30:21:51:78:f7:46:a7:c7:
         56:a5:aa:28:a8:1e:8a:ac:e9:46:28:5b:24:0b:45:79:f6:a7:
         c8:70:02:14:c3:07:a4:9b:db:9a:57:c7:f9:6f:98:12:4b:a6:
         ec:3e:b4:e3:a4:15:aa:a4:14:7a:db:d3:cd:8c:78:82:2b:aa:
         b2:2b:68:fe:77:83:72:66:9e:77:80:08:bf:38:ce:be:d3:9c:
         c7:47:e0:71:c5:b5:90:94:df:98:81:cb:bf:2a:15:7c:cf:76:
         67:c3:da:6a:76:9e:f4:86:79:b2:67:80:3a:b6:0f:8b:0c:a1:
         fd:64:03:af:ef:3d:9c:f5:a9:f0:ee:bb:d4:90:4d:77:8f:52:
         68:7f:20:00:13:5d:b8:0d:67:6b:fc:3d:81:81:df:4f:cd:c7:
         56:1e:2c:ce:63:da:2e:d2:27:6f:ab:dc:40:65:65:7a:d7:25:
         f3:f1:36:00:76:75:34:f1:90:0e:e6:92:7e:88:3b:f5:bc:cb:
         c1:74:54:ee:dd:5d:f9:0c:84:14:c3:c4:53:14:5f:b5:55:4a:
         97:16:5d:13:d3:9d:a7:08:ef:c7:1c:49:a2:cb:98:de:6c:cf:
         45:79:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:00:13 2026 by rpki-client