Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e15a5fb-b275-3746-9618-c51323aaf339.roa
File:                     5e15a5fb-b275-3746-9618-c51323aaf339.roa (raw, json)
Hash identifier:          /SR0n9Vb/CEJXaDDT17Bk7VmXCxmn6D4GG9ygQej2wQ=
Subject key identifier:   B7:37:BB:01:11:04:D8:3A:99:FA:3B:E0:3E:B2:CF:3A:51:57:F4:28
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DC135C6566B0CE7E29E4BE2C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e15a5fb-b275-3746-9618-c51323aaf339.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     1239
IP address blocks:        216.227.140.0/23 maxlen: 24
                          2001:49f0:d004::/48 maxlen: 48
                          2001:49f0:d010::/48 maxlen: 48
                          2001:49f0:d026::/48 maxlen: 48
                          2001:49f0:d047::/48 maxlen: 48
                          2001:49f0:d09a::/48 maxlen: 48
                          2001:49f0:d0d0::/48 maxlen: 48
                          2001:49f0:d0e5::/48 maxlen: 48
                          2001:49f0:d0f8::/48 maxlen: 48
                          2001:49f0:d126::/48 maxlen: 48
                          2001:49f0:d127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c6:56:6b:0c:e7:e2:9e:4b:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=f98b9a9a-8769-4f05-b4ad-c99903505211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:13:ee:6a:f3:74:24:e4:a2:22:a8:d8:28:
                    cc:d2:d1:4d:df:ae:c0:20:cd:1d:fe:5f:36:b6:60:
                    4b:85:7c:96:5f:59:7f:da:61:38:71:f3:17:13:2f:
                    35:2c:20:02:e2:63:fd:31:0e:db:c0:bc:2c:9b:28:
                    ce:db:f0:3d:99:a4:1d:2c:23:93:e0:26:50:67:e5:
                    75:1e:b3:f9:26:1f:93:55:fc:d8:e8:8f:2c:9d:2c:
                    0a:14:a5:0f:2a:67:b5:9b:72:fc:b8:33:aa:bd:ba:
                    85:29:57:a2:30:b9:c0:f7:a4:e5:e2:e1:a4:2e:a9:
                    da:51:56:91:0b:90:2d:7b:8a:dd:73:e5:45:43:e0:
                    47:00:57:b1:d4:ff:94:d6:ef:87:e6:90:ce:e1:15:
                    99:b8:b3:ba:1d:88:c9:65:87:e9:a3:bf:82:23:0c:
                    9d:c1:79:b7:ff:3c:44:f3:7c:d2:79:64:55:57:46:
                    ac:16:0d:98:a5:c3:9a:2f:27:f3:e4:6f:c0:22:e9:
                    ca:c6:e7:a6:a9:93:02:cc:83:42:e9:52:3b:b2:6a:
                    5c:d8:80:6e:1c:88:ae:18:b6:b5:0d:65:fa:c2:b3:
                    dc:f6:dd:1c:d8:ca:50:71:c7:65:9d:1e:6b:dc:35:
                    16:52:c6:a7:f1:68:42:81:33:17:0e:6e:08:79:40:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:37:BB:01:11:04:D8:3A:99:FA:3B:E0:3E:B2:CF:3A:51:57:F4:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e15a5fb-b275-3746-9618-c51323aaf339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.140.0/23
                IPv6:
                  2001:49f0:d004::/48
                  2001:49f0:d010::/48
                  2001:49f0:d026::/48
                  2001:49f0:d047::/48
                  2001:49f0:d09a::/48
                  2001:49f0:d0d0::/48
                  2001:49f0:d0e5::/48
                  2001:49f0:d0f8::/48
                  2001:49f0:d126::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:e2:5f:f4:4e:de:f8:c4:4a:fc:df:13:d5:6a:b4:21:de:
         13:7d:d1:37:50:a9:c8:cb:ab:a6:69:74:d9:90:32:80:42:cc:
         3b:06:ae:5e:16:c1:ff:f2:0b:4f:4f:54:6b:69:15:ff:0b:eb:
         d7:77:a5:08:a9:d8:ee:6c:df:2b:95:76:25:83:61:21:44:cc:
         d2:34:cf:81:1b:5c:ca:ba:7e:39:0d:cd:37:fa:eb:ef:5f:1b:
         05:31:11:f7:da:f0:9e:c3:63:f0:b3:c6:3b:60:06:98:c0:bf:
         9b:b8:f8:6f:14:37:da:ac:8f:2a:0b:55:b3:4c:f4:c7:c0:44:
         60:64:18:8f:4a:62:69:6f:49:4d:f4:1e:ee:7a:2e:a1:87:aa:
         ca:d6:60:e4:d7:bc:ff:70:25:ff:8c:40:55:3f:ff:b0:bd:49:
         04:9c:1f:f3:6d:af:ee:50:ab:53:cf:f2:dc:13:9c:c2:a9:0f:
         e6:8e:61:ea:22:dd:e1:10:4d:12:37:b9:f3:c6:25:06:03:a7:
         ba:66:11:d5:18:31:ea:49:ff:de:61:d0:8a:d2:82:f0:b0:d8:
         a3:ab:ed:f4:a4:da:1f:50:99:40:bb:32:88:0c:1f:5c:b7:40:
         ec:24:45:04:31:3b:9f:c9:02:fc:9b:d9:2b:33:d3:73:7b:b0:
         87:8d:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 07:13:27 2026 by rpki-client