Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/8eceff37-9155-3a3b-bb67-f167aec0ee87.roa
File:                     8eceff37-9155-3a3b-bb67-f167aec0ee87.roa (raw, json)
Hash identifier:          YiHlpInQrVLMb8YhZhmFRS8LXPm3AJf9NmxlRcfm2wg=
Subject key identifier:   2B:0C:1E:F2:31:80:F0:73:9B:14:6B:76:8C:46:96:2D:5D:79:1C:5B
Certificate issuer:       /CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
Certificate serial:       010D0C9F4328584DD0906044C27A214D21256460
Authority key identifier: 9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/8eceff37-9155-3a3b-bb67-f167aec0ee87.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16796
IP address blocks:        198.163.221.0/24 maxlen: 24
                          198.163.222.0/23 maxlen: 23
                          198.163.222.0/24 maxlen: 24
                          198.163.223.0/24 maxlen: 24
                          2620:35:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:60:44:c2:7a:21:4d:21:25:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=13a52367-7698-4397-9d6b-fe6bd16d847e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:b3:32:4c:c6:1d:63:c4:1d:db:47:d1:a6:
                    e4:ad:90:c6:5f:71:4e:ba:28:64:6d:75:8f:7f:a8:
                    02:b1:c6:2b:90:64:99:a5:75:a7:3a:03:ad:2f:b8:
                    e6:69:b5:f7:3a:88:a6:64:86:8a:a4:65:93:f8:3c:
                    71:2c:b1:7c:d5:4f:80:20:f0:fa:74:93:cc:79:57:
                    96:b5:90:58:3d:3b:f8:d8:2a:9d:e0:03:f6:ea:8b:
                    96:0f:04:cc:72:f7:d5:f6:e8:42:b6:98:cb:09:94:
                    2f:59:14:52:64:42:55:9a:01:d5:6d:65:0e:33:5f:
                    d5:1c:62:94:25:98:e1:c8:52:e9:5a:25:a0:c2:fb:
                    da:b7:0f:30:be:45:d5:1e:97:e8:96:54:cc:58:da:
                    7a:42:f0:43:1d:6d:0a:48:bc:20:73:0b:f9:1f:ca:
                    4e:2e:50:6b:71:75:26:a6:6c:69:ad:cb:93:14:a9:
                    02:b9:20:54:fc:d4:0c:d3:ed:e3:26:52:9c:94:a6:
                    3f:a8:c8:ae:e7:13:8a:a9:76:f5:1c:39:14:a6:99:
                    e6:0f:bf:9e:36:88:1c:d9:1a:da:b5:f3:7b:68:9b:
                    d9:33:c8:d6:e5:96:7f:65:45:42:ec:94:a1:e1:f7:
                    0c:b3:f1:92:85:f9:e0:d4:fc:06:6c:11:0f:a5:46:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0C:1E:F2:31:80:F0:73:9B:14:6B:76:8C:46:96:2D:5D:79:1C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/8eceff37-9155-3a3b-bb67-f167aec0ee87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.crl

            X509v3 Authority Key Identifier:
                keyid:9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.221.0-198.163.223.255
                IPv6:
                  2620:35:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:91:7c:68:ba:aa:01:8a:35:41:82:6f:d8:5e:56:ec:be:2e:
         7f:2e:b6:3a:0b:98:44:d9:0d:b5:12:cc:3a:a4:43:7b:19:13:
         97:ad:87:2b:62:53:66:a6:8a:b4:50:66:b5:05:96:0b:b2:b6:
         5e:3d:af:7e:85:bc:31:df:83:79:ec:65:df:08:6b:ff:36:f0:
         cf:de:29:32:e0:fc:63:bc:e3:d2:14:97:62:a3:83:80:ac:38:
         a2:d3:4f:57:17:ab:d2:b7:32:2e:ec:96:8f:89:28:02:12:60:
         20:46:fa:90:a7:f7:09:b0:e2:e0:0e:8a:94:9b:37:41:95:68:
         9d:10:02:15:9d:7c:c9:d3:7c:0d:43:30:3f:01:8b:9d:6f:fb:
         51:e1:b0:ae:ff:b3:60:2f:a1:0e:c2:bf:8c:9c:eb:cd:0e:10:
         13:99:ba:85:65:63:e0:2c:c7:1c:fc:c5:47:8d:a3:80:85:eb:
         b5:36:eb:71:e7:cb:12:dc:90:fe:d5:36:78:f2:53:c6:7e:0e:
         bb:b6:ce:dc:74:22:e4:56:c2:5b:64:a8:56:57:75:7b:e2:a1:
         d0:95:e9:4a:71:12:a2:1d:4b:ea:1b:8e:80:56:5d:84:fe:65:
         12:ff:b9:e3:81:8c:c4:b3:bb:71:5b:38:d0:69:3a:69:48:6f:
         ac:5c:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:42 2026 by rpki-client