Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa
File:                     b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa (raw, json)
Hash identifier:          DJythmCRxeof6ooe6Sunk0zND0J2ZQ/bjJaJWbdjxSU=
Subject key identifier:   BD:4B:8D:53:BF:C0:3E:F5:8D:42:D1:17:1A:FF:13:6B:EB:6C:C6:B1
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584D95EFFFF611FDA19F23556F00
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     396905
IP address blocks:        216.226.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:ff:f6:11:fd:a1:9f:23:55:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=64094648-b22d-4676-b22d-2382ca90e5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:0c:68:ad:3d:24:a6:bc:d2:46:a7:c3:a0:
                    b3:1b:8b:53:07:23:0c:74:c7:a2:0e:95:8d:6c:f2:
                    1d:82:03:f8:96:ec:c7:ec:6a:ba:06:78:4a:c9:6f:
                    f8:88:bb:be:f1:37:5d:f6:45:ed:7e:7f:bb:fc:20:
                    93:59:1e:62:32:fc:4a:e4:93:9c:43:f2:c6:82:3a:
                    69:60:1d:f1:f1:a0:72:d6:84:a5:b9:6e:e5:ff:56:
                    1c:89:5f:cf:4e:66:29:62:c3:ce:e0:18:16:c5:9b:
                    01:72:6c:ed:71:09:92:aa:d3:3b:c0:1f:53:e6:fb:
                    23:b6:36:81:6f:c7:3b:8e:ee:e3:af:27:d7:7a:fa:
                    f8:1c:5d:d2:b8:5c:bc:24:ff:e7:a4:da:6f:c1:8c:
                    32:04:61:41:a5:0d:43:cf:e1:3e:25:2a:69:08:0a:
                    bb:9f:0f:55:56:86:3c:52:20:a0:8a:e1:b3:b5:58:
                    1b:58:f8:2a:84:e1:6f:b0:62:0a:47:a9:2e:4d:e0:
                    88:a3:69:f3:e5:c8:42:a6:ed:15:34:09:18:a8:40:
                    15:3b:51:f5:63:1d:f9:84:fc:8e:db:60:b5:8c:b4:
                    5b:38:d7:d4:4a:73:77:47:a2:a1:3d:23:1f:93:34:
                    ef:16:85:3a:f3:6e:28:b5:49:10:29:50:8f:6a:a8:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:8D:53:BF:C0:3E:F5:8D:42:D1:17:1A:FF:13:6B:EB:6C:C6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/b33f8b3c-5d14-3634-8ff9-1fdbb6067307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:7c:ef:b3:ed:87:e7:00:9b:5f:e3:82:80:db:e3:02:01:
         43:e9:10:4d:0d:b7:20:cb:c7:7f:5c:fe:3c:21:3c:e4:63:9c:
         1f:27:90:c2:85:d4:67:de:da:44:e2:9d:51:50:95:0a:d3:7e:
         9d:31:9a:d7:8a:1b:2a:8a:fc:98:56:c9:a2:3e:ad:60:cb:dd:
         db:78:58:fb:b8:de:23:6d:2a:2d:f7:d4:1f:5a:84:3c:9c:94:
         7b:71:eb:13:a1:30:a6:f8:5c:3c:84:08:15:26:b3:1c:21:a0:
         51:96:7d:11:72:92:1a:25:41:09:1d:aa:09:2b:78:05:74:c2:
         94:a4:fa:e9:03:f3:b2:2c:74:6d:0f:d7:75:44:58:0f:11:9d:
         ba:c4:8a:fc:4b:7e:d6:67:ac:86:98:97:0e:79:ce:49:ee:3a:
         97:e1:93:1e:a8:4d:24:51:a5:d5:a5:e5:e9:44:69:c8:08:59:
         ca:e3:ed:6e:9b:80:24:f3:84:eb:3a:24:cb:75:27:f1:22:a1:
         c9:fa:ee:50:b9:65:94:4e:29:dd:1f:26:dc:be:ef:1d:a9:be:
         de:17:d3:44:fc:c9:5e:28:4b:b7:7d:1a:17:73:ac:4a:cd:9e:
         0e:11:17:61:e4:aa:e2:50:42:ae:8a:26:02:b6:d3:f9:3f:ab:
         75:2d:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:24 2026 by rpki-client