Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/402b824d-51b2-34ba-956d-8e06b1908905.roa
File:                     402b824d-51b2-34ba-956d-8e06b1908905.roa (raw, json)
Hash identifier:          33gH5Z0PSrhabGCUmF2mGAUJJNWZ6Nvi30mWYxhkeqc=
Subject key identifier:   4D:D9:33:1B:7D:EA:94:69:7D:4D:35:35:85:ED:C7:44:28:B4:7A:DB
Certificate issuer:       /CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
Certificate serial:       010D0C9F4328584D4A8F9532B6353D36559E3280
Authority key identifier: F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/402b824d-51b2-34ba-956d-8e06b1908905.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        198.137.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:95:32:b6:35:3d:36:55:9e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=53b149d3-6420-43be-8a2d-b9a6c0507150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:62:ec:9f:6d:de:89:6a:7a:62:ea:a9:ec:
                    7f:60:37:4e:94:29:fb:e9:2b:9f:fe:4e:60:48:68:
                    ae:1d:ee:40:78:87:fc:a2:1b:f6:1f:14:83:52:79:
                    77:83:a7:49:e3:40:d2:ef:43:df:2b:08:f6:d8:fb:
                    c4:52:7d:ac:75:05:9b:d5:d3:fd:d9:c1:5f:57:21:
                    ec:d9:29:d9:07:03:81:28:5b:02:4f:9d:aa:af:d1:
                    54:10:dd:c3:9c:30:5a:3c:82:5a:96:1a:36:54:4e:
                    e3:6c:cc:d5:e4:39:17:bc:74:9f:d5:26:51:21:2e:
                    a1:50:99:28:31:d6:27:9f:ac:68:bd:3e:41:47:e7:
                    ec:66:f0:53:d0:37:1d:9b:00:dd:19:4d:31:a2:aa:
                    47:55:47:39:a0:04:31:f2:bb:36:41:b7:12:b6:91:
                    1f:08:49:87:5a:88:0b:1a:9b:75:08:56:27:44:60:
                    15:c0:c5:c3:d2:ac:c1:ef:32:c5:28:28:32:45:5b:
                    98:5d:33:ac:5c:ce:23:b3:76:38:54:3a:96:f1:76:
                    99:57:f8:fd:62:07:2e:6a:ba:d9:96:a9:4c:00:b3:
                    ba:b2:8a:de:2b:a4:19:8a:bf:f8:35:db:6b:bb:e9:
                    a3:1d:25:f6:10:74:91:3a:18:7d:91:22:2a:3e:cb:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D9:33:1B:7D:EA:94:69:7D:4D:35:35:85:ED:C7:44:28:B4:7A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/402b824d-51b2-34ba-956d-8e06b1908905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl

            X509v3 Authority Key Identifier:
                keyid:F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.137.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d7:52:3b:e3:e2:38:53:1b:84:f5:e3:be:e1:53:66:78:47:
         a9:9f:75:91:da:47:22:19:83:bd:d8:72:fb:be:b0:b2:94:90:
         68:10:4e:d1:d4:40:be:af:e8:bb:cc:89:22:c9:7e:b6:f1:e2:
         cd:c8:63:01:7d:f2:68:97:eb:d8:5f:7b:ba:c6:16:4c:d0:59:
         6f:cf:7c:19:40:62:01:c3:3c:a1:47:30:cd:18:bf:d5:ca:0d:
         8a:8b:2c:77:e7:7d:32:d7:98:47:df:96:db:27:55:95:6b:a0:
         1a:ea:5d:38:fa:b1:6d:0a:89:9e:be:51:45:76:f0:c1:3b:59:
         fb:60:1d:26:0f:d4:08:9e:6c:fb:78:a4:81:a3:8e:c5:38:73:
         b8:e9:f0:22:e4:92:65:25:76:4d:dd:14:28:a4:5d:f9:d5:b9:
         ee:a4:83:3e:90:82:db:8a:02:0a:96:68:ce:81:da:09:07:b6:
         06:78:69:73:5b:05:ab:08:a5:26:b9:71:ba:f9:81:f9:64:1e:
         81:55:05:ab:85:30:91:26:69:27:74:04:f7:ca:1c:82:20:8a:
         75:b2:13:1b:f3:27:20:d0:08:39:fb:6d:2d:19:17:f8:63:7d:
         a9:8f:e8:65:5d:63:10:55:42:f6:7c:7c:4a:38:47:94:0b:f4:
         56:9a:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:03 2026 by rpki-client