Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa
File:                     b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa (raw, json)
Hash identifier:          qL96ZQTr4227R9DCTAv0Bo4twElGz6X0PpBqI1hILpA=
Subject key identifier:   94:7D:0D:5E:BC:59:C3:D3:D2:08:15:36:F9:9B:2E:EC:E0:72:F6:70
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584D44FA31A6D7A8AD1C461B1DC0
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        216.238.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:31:a6:d7:a8:ad:1c:46:1b:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=6df25b91-e465-4faf-9bf6-84ab4a315778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:e6:f3:e2:d3:ec:73:ec:95:61:56:8d:94:
                    2e:71:38:05:89:d9:a9:9e:d5:62:b1:c8:a9:01:2d:
                    ee:54:68:e5:58:bc:af:3d:4b:fc:35:4b:4b:fc:c8:
                    3e:84:36:3c:df:db:20:69:06:ef:53:fc:d0:aa:55:
                    4b:d6:be:a6:65:5b:3a:97:6a:b2:cb:6f:0b:57:af:
                    2a:e0:19:e3:58:12:c3:c7:c8:c6:4f:b5:b7:d8:ef:
                    3e:f5:54:af:43:aa:85:be:85:9f:2a:64:9f:38:55:
                    55:c3:4e:c6:94:59:50:b3:0e:f3:c8:fa:ec:1e:22:
                    9d:e8:a8:cb:b8:46:5b:55:cb:18:bb:c4:2a:5f:ea:
                    0c:35:ec:3b:07:76:50:06:12:65:bd:e1:e1:25:31:
                    e5:c4:69:a7:29:b7:de:43:bd:1d:09:3a:c6:d7:8c:
                    d6:e9:12:73:80:85:34:6c:87:10:46:89:31:fa:b3:
                    fa:0d:44:17:df:8b:ef:c7:33:75:fc:66:92:0b:02:
                    1d:d8:62:2f:69:de:1d:59:cd:c6:21:ec:da:57:06:
                    7d:40:05:13:19:b6:41:6e:b8:cd:cf:53:b1:8e:25:
                    3f:ff:3c:77:f8:75:72:68:92:f7:60:b7:77:13:b2:
                    87:1c:30:95:0d:38:e8:b8:57:84:c9:96:2f:69:90:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:0D:5E:BC:59:C3:D3:D2:08:15:36:F9:9B:2E:EC:E0:72:F6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:75:3d:7d:a6:f5:23:b6:d6:9c:53:05:ab:2f:0d:ae:cd:
         da:25:f0:e0:92:73:2d:aa:9c:5f:9e:3c:ae:69:6f:16:62:01:
         ee:57:1a:f1:fc:8b:e2:ef:df:3c:28:60:78:bf:fc:bd:62:98:
         3c:6f:4c:b7:58:2a:43:94:58:43:1a:d5:31:2e:ca:b0:68:b4:
         f3:c8:ab:4c:96:a0:7b:f6:2e:07:09:d5:a1:eb:68:e8:d1:c0:
         96:f9:35:c2:a2:79:32:6c:0d:d4:ae:a3:2e:b9:ce:de:e9:1a:
         42:a6:f1:b3:ad:b4:69:11:a3:88:6c:5c:1c:28:d1:8c:a7:1f:
         9a:85:88:8f:c7:20:3c:ac:15:f8:cf:e0:01:e2:1c:d9:7c:bd:
         30:5a:51:08:2c:8b:97:1c:fc:fe:19:34:c6:f9:5c:63:63:d4:
         17:27:e3:30:b3:c5:87:b5:3b:b3:75:50:4b:44:12:b5:79:0d:
         a0:de:65:29:f2:ea:e5:0b:f8:af:df:1b:af:bd:51:99:dd:43:
         9a:99:06:18:f9:36:0e:2e:2d:b7:95:27:f1:4a:53:d6:5f:9e:
         a3:2c:26:a8:69:48:d2:d6:65:0d:3a:2c:22:d0:f5:e0:9e:09:
         ad:23:a6:76:5e:f9:07:71:28:83:6a:66:d5:d6:22:df:26:3e:
         3d:64:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:02:03 2026 by rpki-client