Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/4d97c1de-4c22-3691-8a70-534355fdc870.roa
File:                     4d97c1de-4c22-3691-8a70-534355fdc870.roa (raw, json)
Hash identifier:          rLlpkzXoahpMCpGvUz7b2qFaQ1RWfuhBUXmX8C8WOEE=
Subject key identifier:   46:B6:7C:A3:7F:E4:FF:42:79:32:58:6F:C3:8F:FB:E0:10:8C:B0:1B
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584D975560809134ACCADA8DD760
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/4d97c1de-4c22-3691-8a70-534355fdc870.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     137897
IP address blocks:        216.38.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:60:80:91:34:ac:ca:da:8d:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=cdea69ad-c9d6-4c9b-90fd-20e2a7d0fb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:c5:c0:c6:bf:19:f6:aa:62:17:77:f9:a0:
                    e8:da:51:55:75:0f:34:8d:59:a0:f6:b3:01:31:05:
                    1a:cd:82:5a:90:07:07:d8:a5:2a:b2:96:b5:88:98:
                    ba:09:8f:45:de:c5:ab:54:f1:fb:cf:02:7e:4b:88:
                    2b:3e:63:8d:29:94:2b:18:7e:18:9f:14:bf:a7:36:
                    b1:ee:e2:00:9b:95:38:5f:b7:9d:68:98:1c:47:cb:
                    d6:89:25:db:1c:de:e6:9a:32:70:e3:2f:1d:27:23:
                    95:64:f9:af:cd:28:87:c0:c4:b6:d9:18:a7:7e:04:
                    1b:f6:7d:47:9a:ae:b9:cf:8e:26:2d:b9:8e:0c:30:
                    55:b1:3f:1b:13:27:8d:21:f8:f2:40:31:c3:42:19:
                    71:58:85:b3:63:42:e1:3f:09:35:28:b5:a2:07:e8:
                    4f:bb:a9:58:c5:90:0e:22:bd:13:6a:ca:a1:a3:c5:
                    1e:db:47:04:47:73:09:4e:19:6f:c0:81:ea:0a:9a:
                    6e:5b:fc:2a:60:32:4e:09:57:11:b0:17:ab:38:2b:
                    3e:55:53:7e:3d:51:88:d3:91:96:dd:10:7f:1c:5a:
                    93:70:f3:03:1f:f5:5c:2a:a5:89:8c:45:b5:86:11:
                    e7:5f:8f:10:2d:1b:9a:e5:b1:7c:92:7d:16:b5:e1:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B6:7C:A3:7F:E4:FF:42:79:32:58:6F:C3:8F:FB:E0:10:8C:B0:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/4d97c1de-4c22-3691-8a70-534355fdc870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:21:a1:3c:c5:91:58:2d:26:b5:ec:d8:d5:b4:a1:56:a8:1b:
         a2:84:4e:e2:06:cb:a5:2b:cd:bc:61:a3:54:ae:d5:1b:07:e1:
         a5:c7:c7:e4:ff:18:7e:b3:1f:86:63:8b:61:c3:81:21:5c:83:
         07:b3:95:7b:7b:b3:4d:37:4b:b2:18:2f:04:cb:7c:02:f0:d1:
         3d:40:c7:bb:b2:f7:3e:a1:71:fb:32:2f:62:4a:4a:c8:b5:4c:
         19:c3:2c:b2:3f:2c:32:22:ab:d8:2e:c3:a9:67:0f:f9:1d:2f:
         12:bb:42:01:8c:68:ca:8d:5c:7e:e3:fe:64:a9:9c:0b:42:43:
         c7:b4:2a:a4:59:13:58:db:e8:df:30:bc:4c:75:1f:6c:22:83:
         a0:8d:39:fe:98:48:90:71:b0:9f:06:d2:18:a0:c3:0a:5e:64:
         5c:6b:65:8e:e7:2a:e1:a6:0a:6d:16:c8:c5:e9:dc:5e:f4:b6:
         5a:f2:b0:ab:31:d0:44:39:36:b1:48:df:18:1f:99:dc:91:f5:
         63:56:1f:54:d0:0e:aa:24:19:42:bb:a3:77:d6:4f:fe:f8:9e:
         fd:fc:cc:f5:ff:e9:f9:61:53:6a:75:0f:26:9c:7f:62:0c:a3:
         c2:9a:ed:64:da:b8:1a:7a:05:42:a2:be:a3:aa:3e:01:70:87:
         52:81:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:02:04 2026 by rpki-client