Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa
File:                     5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa (raw, json)
Hash identifier:          KEvh1P8ui7RLK182hvrbTQp8oBzhjiKDwmr3Bst7slc=
Subject key identifier:   FF:5F:35:E0:A8:22:62:C3:47:15:AF:21:83:ED:8B:60:01:8F:AC:55
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584DBA3AF8C260DDA783431D4E00
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        170.225.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f8:c2:60:dd:a7:83:43:1d:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=0ed57618-8aa0-4ba5-a1de-703ce569e15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:30:b3:cd:ac:fa:20:e7:7e:2e:9c:31:21:
                    6b:48:a9:f8:f9:6a:0c:69:f0:5a:10:f4:3e:b0:a3:
                    fa:5a:b2:6d:d5:33:18:28:a2:87:78:e6:c4:e2:d2:
                    bb:38:2e:a6:b4:dc:46:f4:80:19:41:bd:e8:bf:1a:
                    75:cb:fd:30:d5:23:51:64:08:95:cf:4a:19:b1:f4:
                    00:2b:6f:d2:27:96:f2:5f:61:77:bb:42:f1:7e:ca:
                    1b:12:79:05:90:b8:73:03:bf:65:58:7d:1f:48:bb:
                    d8:cb:3e:69:20:89:49:a3:9e:9b:10:90:38:e6:ff:
                    35:e9:3f:c4:77:02:a0:72:66:29:2b:38:c2:65:83:
                    3d:ba:c3:3e:86:b7:4b:b6:72:9e:d0:5f:bf:a6:76:
                    3d:d8:f7:ad:1a:74:86:fc:88:33:f2:b0:f8:ef:9d:
                    1c:0b:34:47:cf:ee:1b:42:99:b4:0b:9c:30:64:8d:
                    d1:92:00:b4:8d:64:69:f2:18:14:21:c2:a2:00:e4:
                    19:cf:87:43:04:2b:02:b8:5a:4f:8f:7e:33:c3:0b:
                    01:49:8a:1a:0b:3b:45:df:dc:6a:02:4d:f9:f0:a4:
                    72:36:5e:ff:e5:a9:97:b6:cf:1a:b0:60:14:7b:26:
                    da:ca:25:ab:a4:e4:fd:54:3e:e8:f3:c2:d1:be:8d:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5F:35:E0:A8:22:62:C3:47:15:AF:21:83:ED:8B:60:01:8F:AC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:22:16:19:4e:5c:78:c3:f3:57:8d:c4:ab:98:af:24:b2:4b:
         b5:11:0d:6e:b0:6a:a8:c5:5f:3c:d0:77:3c:9b:b0:bd:25:ca:
         9f:cf:52:b3:51:57:05:6e:06:77:1f:27:ea:c9:e4:26:86:c8:
         68:51:17:da:ea:33:6d:dd:87:bd:ec:a3:68:c5:a2:4e:47:1e:
         28:37:78:68:c9:ab:30:f7:3a:0d:6e:5b:63:da:95:18:2d:f7:
         e1:2e:31:ca:11:0e:25:fe:cb:54:f0:a6:3c:ff:50:ba:88:db:
         d1:4f:44:55:3f:7f:e3:c8:1e:d7:da:ab:68:ef:cb:fd:37:69:
         ad:e5:a4:5f:fe:de:6c:3c:0c:54:74:4f:d6:3b:53:cf:f4:24:
         6a:d0:66:9d:11:7d:f3:e8:c4:c2:02:89:0f:c1:b7:65:b4:ca:
         80:98:55:d7:5e:4c:2d:4e:87:5f:9e:6a:62:5e:16:d3:a5:1f:
         6b:7f:4b:9e:52:9d:39:09:f8:d5:20:f6:77:18:e7:8c:e0:7d:
         0f:38:b7:83:a7:13:8d:fa:fa:15:3b:46:bf:a9:c5:02:8a:90:
         22:a6:34:4d:99:09:af:9d:bb:53:de:25:23:47:bf:35:4e:d8:
         f2:65:98:18:57:3d:e1:4c:7a:64:6f:a8:3e:a3:3a:04:9f:81:
         64:80:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:26 2026 by rpki-client