Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa
File:                     015ba892-66b8-3dde-9289-c0d40a2a62b7.roa (raw, json)
Hash identifier:          H46MxqVF+zs1cfh0g6jHJTFs2g0AVI/vkhKOkR3NWag=
Subject key identifier:   83:DB:A0:8B:89:2B:08:0A:0F:A3:5A:EA:4D:D3:BD:B9:96:76:65:E7
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DC4004E8CCA76523916499CC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     33651
IP address blocks:        216.170.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:4e:8c:ca:76:52:39:16:49:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=57ad6f96-ddfa-49c2-ad91-5c7a074b990d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:c2:51:7d:7e:ad:ee:c7:0c:2b:99:39:7b:
                    a8:60:fb:b4:55:05:33:4e:28:61:d4:84:ab:cf:d7:
                    b8:f4:fa:37:a5:b1:e1:af:c4:72:91:3a:51:56:61:
                    38:d8:1d:38:18:66:44:cd:3e:ae:8f:8a:fe:d2:b7:
                    31:69:08:76:65:28:b5:24:73:21:ff:e8:70:49:71:
                    03:f6:ea:1e:e0:85:5e:b6:c4:c9:50:14:35:c7:a4:
                    65:89:01:d6:92:73:d6:9d:11:36:d2:04:25:73:f1:
                    15:f8:d7:28:89:ff:30:8f:be:34:d6:13:9d:1d:d9:
                    b0:07:45:16:49:f1:af:d6:3d:fb:fb:e4:fe:04:c1:
                    7d:da:78:b5:8e:c4:8e:57:4d:8c:c3:12:29:ac:5d:
                    50:2d:80:fb:64:71:eb:d8:40:43:bd:2e:d9:88:46:
                    5b:e7:d0:38:75:6b:52:0b:ef:94:1c:f3:c3:15:13:
                    65:a3:b6:37:54:2f:c4:1a:cb:9b:44:11:4a:9d:88:
                    55:3a:66:3e:4e:64:07:5f:93:fd:7b:f0:c0:2e:6e:
                    06:5f:a9:3f:4d:cb:5f:9c:41:93:9f:5c:72:3f:6d:
                    05:80:58:26:e4:34:0a:40:01:95:d0:8e:59:fb:d6:
                    f4:94:e1:f3:22:db:97:d8:77:82:9e:ae:eb:1f:f9:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:A0:8B:89:2B:08:0A:0F:A3:5A:EA:4D:D3:BD:B9:96:76:65:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/015ba892-66b8-3dde-9289-c0d40a2a62b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:44:eb:5e:98:da:fe:65:14:98:02:67:ef:e0:c2:a3:1f:5a:
         5e:35:61:49:02:66:4d:42:80:b7:4d:37:07:34:2d:5a:84:9e:
         2a:74:00:77:ca:1c:ae:cb:e9:6b:cd:ea:92:8c:92:48:2d:fa:
         2d:64:82:3d:df:41:88:0a:4f:bc:dd:92:4e:3b:c9:47:9b:49:
         e9:f9:65:8b:43:f1:fc:7a:69:d8:ab:93:7b:67:ba:c7:12:8d:
         a7:eb:36:69:81:22:e2:a0:42:fe:3c:a9:74:b4:32:dd:0c:f6:
         ed:8f:c0:a4:8f:7a:1c:6c:cd:99:a6:04:42:2e:3c:86:88:f1:
         8e:5e:bb:ac:5e:49:bb:89:f6:02:e4:1f:8c:55:ad:33:42:91:
         00:b2:4f:08:3f:41:a0:10:97:09:ba:19:92:f5:b9:fa:8b:3d:
         59:a0:ec:4e:b1:3a:7d:06:e0:26:ec:10:1b:25:90:29:ac:70:
         7b:27:1f:f0:3b:0f:e2:bf:2c:ca:36:94:75:5f:32:9b:66:ed:
         19:ff:f4:81:1d:b7:43:5b:c5:5b:9e:f0:1b:9b:90:08:fa:1c:
         1b:a0:b1:ec:f1:63:0f:9c:07:da:09:d9:94:93:74:1b:6c:b3:
         55:5c:7d:39:07:7d:52:97:88:24:be:e4:95:82:f7:70:28:52:
         ac:19:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:04 2026 by rpki-client