Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
File:                     23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (raw, json)
Hash identifier:          Q/wBpXFKaTmlwT2jzw73WlCnpN41IlvNw/NQ+H/3YAM=
Subject key identifier:   82:EE:77:07:A7:75:32:39:DF:F0:81:74:9D:0C:5C:C1:9F:F9:41:84
Certificate issuer:       /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
Certificate serial:       010D0C9F4328584DAC45754075818F117E2FCE80
Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     14618
IP address blocks:        209.46.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:75:40:75:81:8f:11:7e:2f:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=48cba2a9-a9f7-4cdf-8d8a-a13dd35da003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:67:81:69:78:02:c6:66:b7:ea:c2:26:f7:
                    7d:e3:76:0e:b8:22:00:9a:36:19:b9:bf:1f:bb:e2:
                    53:cb:e4:60:cd:e9:88:e2:d7:46:62:dd:36:4a:40:
                    6d:9f:69:f4:9a:0b:99:25:04:13:bb:28:60:a9:03:
                    ae:a2:e6:61:68:2e:19:58:17:e2:35:d7:ae:1d:38:
                    5a:b5:00:11:ac:7a:d2:e6:78:33:16:37:22:02:b1:
                    7c:46:d8:92:ba:2f:0b:05:8e:3c:45:c3:8d:94:04:
                    37:09:57:73:ad:a0:1b:c6:14:44:b0:77:49:ff:12:
                    f9:59:82:ce:16:87:4e:af:d9:c7:6f:ed:56:59:6b:
                    ab:cd:8e:56:b0:1d:f0:c5:3e:16:ba:13:0f:72:f2:
                    82:52:32:05:f6:e3:0a:c6:a8:ab:6e:2b:57:d1:d5:
                    50:a6:78:ba:19:ac:8e:ae:07:c9:76:00:a5:74:47:
                    00:fa:0d:32:c8:4a:b6:47:7b:a1:06:82:1a:86:e9:
                    a3:47:11:b3:d0:5c:e3:d2:5c:7f:f7:a9:12:81:72:
                    69:66:2f:4f:b8:21:ab:be:3e:f7:69:fb:01:ab:38:
                    8d:e9:87:16:c5:25:67:1a:2e:b2:fb:c7:48:13:03:
                    e6:a1:76:19:f7:d7:80:7c:ba:15:5c:c8:76:a0:04:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EE:77:07:A7:75:32:39:DF:F0:81:74:9D:0C:5C:C1:9F:F9:41:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/23242619-7075-3ff7-bc60-bde9eb53b0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl

            X509v3 Authority Key Identifier:
                keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:43:0b:c7:14:e6:5b:76:ca:50:65:0a:45:fb:bb:a7:86:ac:
         25:1a:96:6a:8b:30:07:61:84:ce:38:20:d7:f7:57:1f:29:08:
         e0:e0:95:bf:40:74:a4:0a:14:2b:00:d0:dc:6f:30:8e:ee:38:
         f3:8c:c5:6e:28:7d:1e:c6:35:93:93:29:dc:2c:45:d1:3d:4c:
         9a:a3:e2:fb:05:bd:21:19:8e:51:15:46:02:8a:9c:8b:54:73:
         b8:58:c7:bc:db:3b:7f:1c:c5:db:dd:7b:21:a4:3d:b7:90:99:
         a8:88:9d:22:54:1f:51:00:4e:9c:63:7d:19:cb:84:e3:4f:40:
         52:f4:ad:6f:90:bb:3d:a3:af:41:d8:23:ed:84:1e:b2:0f:11:
         a4:13:7a:86:aa:43:f5:5c:b0:6e:5a:2e:3a:17:aa:4e:88:17:
         11:e5:97:3b:1e:50:59:15:7f:60:44:4c:25:e8:11:8d:31:4c:
         9b:c6:9c:f0:65:ee:bc:31:f5:a3:c5:7d:e6:b0:3f:d2:cc:5b:
         e4:b2:d9:43:4f:2b:66:18:ad:a4:27:3a:df:dc:35:2a:cd:cc:
         eb:75:a2:a0:52:b7:52:1c:d1:25:e3:f2:e3:3c:a9:ac:de:bd:
         11:13:56:fc:fc:8f:4e:a5:e2:82:1f:ad:09:53:ee:5b:4a:cb:
         90:8d:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:03:32 2026 by rpki-client