Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa
File:                     5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa (raw, json)
Hash identifier:          cBrBPt4A3quNj1r+vQZMNr7Fqpv2u0rmNkqotdKrJ/Y=
Subject key identifier:   60:44:59:19:22:6C:8C:67:C6:A4:A5:D7:7A:34:C8:C6:11:A7:63:8E
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584D5F7FAD171068B40237D6F200
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     46558
IP address blocks:        150.230.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:ad:17:10:68:b4:02:37:d6:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=ec8a3ded-4832-4621-ab2a-fbdb83ee67fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:f2:c2:b5:e8:fc:e8:61:00:a0:a4:66:21:
                    75:20:88:7d:c1:a6:0e:ef:2c:21:40:cc:55:ad:a6:
                    74:d5:a3:1d:76:e3:a5:df:57:7a:f9:ec:22:f0:84:
                    da:4e:1c:86:01:5d:d7:19:b2:d4:c8:d0:41:e4:fd:
                    c9:7d:56:3d:fa:8f:c9:3e:93:eb:53:b5:f7:7c:c1:
                    eb:b2:a1:96:ac:34:59:d9:3d:e8:28:6e:e4:aa:4c:
                    4c:49:c0:4c:e7:fc:84:18:ba:f1:51:bf:9d:d4:6b:
                    6d:13:b1:7f:ca:b3:e4:19:f5:d0:5f:a4:4f:5b:a0:
                    02:15:63:12:8f:2a:70:a0:ab:00:d1:41:8c:48:cf:
                    25:c3:a7:10:83:c5:60:09:ab:7a:18:47:01:64:25:
                    29:13:f1:46:7c:c9:61:e4:57:05:10:15:c3:8a:c1:
                    c1:a0:78:aa:79:d9:23:b8:f7:a3:23:14:d3:e0:a7:
                    f7:23:07:63:b3:f0:2b:9c:65:0d:57:77:ca:15:00:
                    bb:6d:be:b8:ad:52:6e:a5:cc:3c:ed:c1:05:c6:52:
                    9e:ef:d5:66:06:69:62:1a:de:c3:2a:f4:ef:7c:8f:
                    b9:82:fd:bb:d2:9b:45:90:d8:70:80:74:d5:d5:b6:
                    3d:64:2e:3f:32:5f:1a:95:b1:0e:f3:4c:1d:ef:85:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:44:59:19:22:6C:8C:67:C6:A4:A5:D7:7A:34:C8:C6:11:A7:63:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:17:10:7d:3e:db:1a:68:fd:67:61:0a:54:81:08:52:38:96:
         c3:bc:eb:b3:9c:be:fc:fd:75:a6:d7:7e:87:03:00:71:a8:30:
         f4:a9:ea:2e:87:fa:89:22:57:ff:e7:ad:91:9e:1e:82:d0:c4:
         f3:21:33:45:05:db:d3:65:0f:96:af:73:fa:b6:18:00:9f:8d:
         7d:2f:0e:49:fa:e5:d9:85:c4:fd:10:a0:b4:f6:bd:08:65:3f:
         9f:fc:da:e2:b3:57:d7:fe:5d:01:89:25:0d:2b:94:5e:98:a7:
         57:b5:7e:4f:f8:6b:44:50:51:57:38:dc:ac:10:c6:f8:5b:0e:
         16:3f:3f:f4:9a:0f:70:bf:f3:59:c9:96:36:1f:6f:cc:50:11:
         f9:91:1f:93:8e:11:1a:45:41:68:9f:91:ac:82:56:ff:cb:d9:
         17:4d:e9:a3:99:d9:d6:4b:ae:41:e8:c8:26:6b:10:9e:ce:9d:
         89:29:61:3e:fe:f2:fd:75:37:1f:96:54:0b:fa:f2:c8:24:20:
         57:72:16:24:ec:b7:41:78:ae:74:52:1e:73:1e:04:53:33:60:
         fd:a9:ea:fe:dd:22:5e:18:25:83:01:1c:64:43:17:26:01:37:
         dd:78:40:e2:98:b0:2e:3a:5c:f4:aa:d1:a2:45:97:ca:e8:cb:
         e0:21:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:16 2026 by rpki-client