Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
File:                     b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa (raw, json)
Hash identifier:          gft3IX5n2fJawhHoMH8slG3uxb5UYZO97kLMeR3HK7k=
Subject key identifier:   23:D9:1A:B5:79:E0:AD:1A:7C:D4:C1:D9:C2:72:F3:B3:6F:25:61:D9
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584D3F64DFA7FAA6EA92C8840D80
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     53334
IP address blocks:        216.59.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:df:a7:fa:a6:ea:92:c8:84:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=214c0798-f695-4097-92f5-1d81367e33e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:c7:98:16:bb:4f:0b:d8:07:04:f3:56:0c:
                    22:10:87:8d:6a:db:1a:f9:03:b0:4a:bf:db:6d:58:
                    5c:8b:8d:0c:5e:0a:6e:01:47:2b:ce:da:4b:79:2e:
                    c0:e4:4f:0c:c5:e8:9e:15:20:8f:e5:2b:bc:51:18:
                    db:0e:cc:40:62:7b:0c:e1:83:df:1a:66:f9:d4:af:
                    77:a1:d5:75:3c:63:99:89:aa:f3:3b:f5:03:cd:d7:
                    a7:26:8a:80:d3:6c:f7:54:c9:5c:cd:a8:1e:2a:76:
                    a7:ec:06:41:19:de:05:80:8b:98:47:64:f4:81:67:
                    3a:19:c1:c5:16:06:d9:64:00:dd:fb:cc:e1:90:75:
                    73:84:df:c6:31:c7:e8:df:ab:cf:03:9d:b9:3c:eb:
                    e7:96:23:38:d0:62:1f:65:c3:e0:e0:21:26:42:ce:
                    aa:33:dc:01:fa:8e:16:ad:4b:22:67:f3:75:47:60:
                    b8:a0:f4:c4:72:62:6f:95:60:96:21:94:98:df:c8:
                    a9:45:ad:c4:f3:12:93:75:df:95:29:42:00:50:05:
                    30:9e:4c:cf:88:d9:b0:77:38:a6:5e:3f:75:61:d0:
                    f3:bb:20:95:c7:6a:a3:82:3e:7c:58:13:71:41:56:
                    5c:49:4f:17:42:9d:3f:30:d2:03:3b:e3:d4:69:a5:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D9:1A:B5:79:E0:AD:1A:7C:D4:C1:D9:C2:72:F3:B3:6F:25:61:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:d6:99:35:05:45:97:21:c4:90:4e:1c:07:e7:35:73:63:
         32:1d:43:f8:99:32:8c:a0:96:31:de:bd:aa:77:27:22:a9:bb:
         1d:de:a5:12:26:15:03:2d:97:23:94:85:5b:b5:d5:3c:24:05:
         65:9b:00:f7:d0:74:70:a5:a8:95:9e:b8:25:69:74:81:87:2e:
         4e:f8:fa:d8:63:8f:f0:1c:f8:1e:c9:69:f6:0b:20:9a:e6:5a:
         f7:40:ad:16:57:48:36:04:8b:ae:88:ad:ad:7d:14:b9:d3:61:
         e0:e0:c6:a1:39:26:6e:37:d8:61:89:d1:56:01:38:fa:e7:c8:
         8f:fe:cb:82:51:f7:18:1c:fb:89:9e:fd:fe:a7:2a:9e:e0:e9:
         83:4f:30:88:47:2a:72:6b:e8:b6:86:7b:8a:20:bd:3a:9a:c4:
         9b:33:a8:cb:97:2f:52:33:d5:69:37:93:a2:a5:8b:5d:c8:21:
         66:27:0e:80:aa:91:60:a3:7b:3f:ab:0a:e5:3b:c6:a3:d5:79:
         b4:38:3a:15:0d:a5:ee:3d:2a:f6:d0:54:62:66:ba:92:11:53:
         14:98:d6:46:9c:1f:c6:2c:8a:5a:4f:85:9a:db:4b:9e:ba:06:
         fd:0f:79:0f:d2:67:90:69:14:42:41:f2:80:3f:ec:d1:24:c4:
         9b:c3:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:13 2026 by rpki-client