Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8078de36-7b1b-3865-b855-e65f3fd049b7.roa
File:                     8078de36-7b1b-3865-b855-e65f3fd049b7.roa (raw, json)
Hash identifier:          r5/GwFSG93u4DSDG08I8gbrmEbp6u7TWjVksNdF8wnw=
Subject key identifier:   5F:68:59:1E:2F:A5:18:24:14:2F:5A:EA:63:3F:31:D1:C6:0A:1F:35
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584D981EFDD370CFAF68E74AEA00
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8078de36-7b1b-3865-b855-e65f3fd049b7.roa
Signing time:             Wed 22 Apr 2026 19:46:53 +0000
ROA not before:           Wed 22 Apr 2026 19:46:53 +0000
ROA not after:            Tue 21 Jul 2026 19:46:53 +0000
asID:                     15320
IP address blocks:        216.238.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:1e:fd:d3:70:cf:af:68:e7:4a:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Apr 22 19:46:53 2026 GMT
            Not After : Jul 21 19:46:53 2026 GMT
        Subject: CN=53864b5b-dc02-4675-b2dc-95f5e88370ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:4e:6f:4d:c5:ec:ac:75:35:e0:6a:3e:88:
                    1e:22:e1:06:81:09:6c:5a:95:dc:82:59:2a:15:e9:
                    2a:c0:3e:a5:03:0b:36:88:67:f0:cf:ce:96:42:6b:
                    05:54:f0:0b:ac:68:ac:07:bd:21:46:09:42:47:a3:
                    11:39:69:01:ac:e2:50:1c:a7:32:22:9e:9c:d3:f3:
                    89:61:5c:7b:bf:aa:ae:1f:e6:dc:65:72:a2:e8:25:
                    53:dc:17:4a:e4:d4:28:11:e5:84:22:e4:7c:5c:fb:
                    5c:8b:44:33:03:0a:27:c5:bf:55:eb:7c:01:2e:83:
                    73:ef:dd:59:67:d7:4f:04:ee:80:d4:14:36:80:72:
                    59:61:bd:2f:b5:0b:fa:ab:f0:17:21:c3:dc:51:5c:
                    72:ed:49:98:7d:c3:50:81:df:cb:f0:74:6c:ec:5e:
                    8e:0b:75:7a:0c:7b:9a:b4:09:55:af:a4:18:ce:43:
                    63:ed:57:47:10:4d:7d:6f:40:17:e0:71:cc:4d:17:
                    7a:3c:57:d9:68:90:30:d2:56:3d:f7:46:1d:ca:df:
                    42:30:61:15:4e:4b:89:b9:90:01:a8:bf:a9:08:1a:
                    f2:a6:03:e3:3d:e6:0b:19:32:b3:09:d7:66:39:d4:
                    26:14:6a:28:48:66:15:84:3e:65:e2:39:31:ed:06:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:68:59:1E:2F:A5:18:24:14:2F:5A:EA:63:3F:31:D1:C6:0A:1F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8078de36-7b1b-3865-b855-e65f3fd049b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:11:f7:f5:62:31:fe:b0:86:6f:82:d2:54:06:34:ed:45:00:
         63:7b:aa:02:05:66:7e:bb:c4:68:33:84:37:03:66:c9:f0:8a:
         03:b2:d8:67:01:a4:8e:86:7b:73:3c:6f:bb:8b:98:7f:f3:ca:
         da:0a:27:95:91:f2:0f:6d:9a:bd:25:6d:55:17:56:28:31:de:
         34:12:40:02:97:66:8a:e8:04:76:3b:e6:e8:29:7e:a5:a7:c6:
         b7:9b:f7:ef:6e:7c:70:3c:f6:43:5d:e4:fc:05:4a:72:fa:20:
         5a:20:36:f8:1d:54:c7:fb:ec:73:79:75:af:b2:9f:9d:1b:e8:
         b1:84:cb:43:0a:c0:93:41:8c:99:ce:be:4e:67:17:93:9c:9f:
         1a:7e:8b:78:09:b8:1a:fc:99:c3:d1:2b:69:a9:79:9b:66:ae:
         93:e8:a1:55:bd:ee:8b:ec:67:71:13:c0:fa:7a:48:2e:89:39:
         f5:31:53:9a:dd:17:98:b3:38:a0:2c:ac:aa:bc:73:31:0a:24:
         1b:77:fd:d8:b7:00:3f:c8:0b:7a:d6:bb:ae:e3:f4:6e:12:a4:
         99:ab:be:64:fe:6b:b6:77:f4:04:80:a6:37:f2:59:d1:35:1b:
         ba:65:20:cd:12:b2:d2:4d:50:e4:23:bf:f9:45:55:4b:62:15:
         f6:35:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:22 2026 by rpki-client