Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ca4ae8-2066-3a56-9ef2-63b924a0bc74.roa
File:                     f7ca4ae8-2066-3a56-9ef2-63b924a0bc74.roa (raw, json)
Hash identifier:          nSErCHPB5gNpyrzVDX+sNDTXCC2DFGlCc+HzM56qaJk=
Subject key identifier:   6A:DC:3A:A2:E1:89:9E:45:AB:6A:5A:CC:DA:06:1B:AA:63:F3:4A:2A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DB8D585D4CDF46A90332FD900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ca4ae8-2066-3a56-9ef2-63b924a0bc74.roa
Signing time:             Mon 04 May 2026 13:00:30 +0000
ROA not before:           Mon 04 May 2026 13:00:30 +0000
ROA not after:            Sun 02 Aug 2026 13:00:30 +0000
asID:                     396026
IP address blocks:        184.105.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b8:d5:85:d4:cd:f4:6a:90:33:2f:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 13:00:30 2026 GMT
            Not After : Aug  2 13:00:30 2026 GMT
        Subject: CN=f53e5cd5-83c1-4630-bc0f-472a11adb041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:a9:1b:1f:97:3e:8d:77:00:dc:3f:90:8e:
                    79:73:b0:b9:99:ff:e7:81:ad:27:fd:45:de:0e:b3:
                    a8:ae:0c:6a:e6:22:5c:aa:30:b7:08:dd:51:9e:47:
                    b9:35:99:06:e2:5b:57:44:82:4b:c1:c0:7a:e5:ed:
                    93:77:26:ba:ea:6b:8a:25:f8:5a:87:5f:33:af:7a:
                    67:ca:c9:55:3f:0a:92:49:aa:a2:90:ed:7e:ac:c0:
                    5e:d8:d1:20:0d:77:25:9a:0e:cc:8f:82:f8:4c:f7:
                    85:8a:9b:91:3d:f0:48:c8:7d:5b:5e:fc:50:1c:71:
                    c5:b7:be:f3:fd:4a:ea:8d:12:2f:94:2a:ad:39:c2:
                    fe:71:9a:bc:bf:0b:90:66:1c:cb:6e:f5:58:af:9c:
                    2e:be:f9:63:68:43:0f:42:40:62:59:83:ff:51:75:
                    e6:8d:d1:04:fc:f1:0a:4b:a6:df:c5:b0:59:68:90:
                    9e:d5:1e:99:72:d9:f4:37:bf:1d:14:da:27:1a:2d:
                    fc:d9:ae:af:e2:f6:1d:11:0b:64:19:d5:8c:82:32:
                    dd:f5:47:e1:70:ac:58:99:75:1a:4e:f8:b4:30:87:
                    b2:fc:e7:90:93:f8:74:c6:bc:04:a7:0c:a3:60:35:
                    8f:f5:4f:08:db:5b:39:dc:ea:35:7f:4d:44:95:e1:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DC:3A:A2:E1:89:9E:45:AB:6A:5A:CC:DA:06:1B:AA:63:F3:4A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ca4ae8-2066-3a56-9ef2-63b924a0bc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:37:32:81:d4:c6:dd:4a:6e:60:f7:42:4a:99:e6:95:64:0a:
         08:48:30:38:ab:c5:92:ea:82:b7:4e:f7:22:62:8d:ff:c0:1d:
         67:09:a3:a2:b2:a8:cc:ae:ad:f0:8a:6a:6f:e4:0b:f6:eb:a3:
         ee:de:d8:c3:95:5a:57:4a:59:8e:9a:d2:dd:83:fc:b5:ff:4b:
         19:2a:99:97:b2:a3:66:18:12:36:11:96:56:42:8b:b5:f5:8c:
         01:65:d6:d9:bd:22:e6:48:8d:1c:88:83:04:1b:94:2f:c2:61:
         8c:c6:dc:d3:10:21:e2:25:0c:cc:58:01:3a:d8:7f:44:e6:ce:
         d8:22:34:94:92:30:27:58:e4:72:46:be:e2:ac:0a:bd:bf:25:
         9a:5a:14:97:86:e2:0d:b5:87:6a:00:02:32:0f:5e:14:cd:9e:
         fb:25:cd:c7:7c:79:97:45:01:59:64:13:f5:53:bb:f3:9f:a8:
         f2:94:26:36:cc:c4:c2:73:4a:9f:3e:4d:ea:70:7b:24:4b:49:
         61:bf:c3:d6:b6:4e:f9:8d:9a:6b:0f:a4:18:ec:95:5a:fe:3b:
         26:57:22:ed:73:7c:25:e7:d5:a0:8d:eb:16:21:c3:05:a1:ab:
         70:41:2a:e0:9c:2e:f7:72:6d:63:a3:16:e7:ea:7f:97:32:88:
         c0:57:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:33:43 2026 by rpki-client