Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa
File:                     18792aa5-f8a0-34fd-af64-001b6f6efda1.roa (raw, json)
Hash identifier:          p6m02Ie+9IVgCqd5wRZT3AkkIh+i/HpShNtpQ4aMwZs=
Subject key identifier:   68:05:D2:F6:15:7F:81:A6:72:F6:7D:50:8B:64:D6:29:80:BC:59:01
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3F64FCE3A9A24774F59A0E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     32651
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:fc:e3:a9:a2:47:74:f5:9a:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=75042156-5546-4752-b140-6cfeb65a1679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:df:8c:3f:e1:07:f6:65:fa:fe:fd:23:ed:
                    f5:42:3f:41:56:9f:cb:5b:f7:98:40:24:b5:54:e1:
                    2a:17:77:5c:86:82:36:40:a9:85:9b:84:14:76:ff:
                    6d:bf:53:e8:20:c9:29:ce:5c:9c:a1:7d:e8:6a:94:
                    5b:a4:22:3a:87:00:4f:f6:3c:d1:ea:0a:82:a5:c5:
                    bb:70:7c:f4:77:72:1b:94:38:18:91:da:c1:d3:3a:
                    39:cb:32:5f:70:e0:67:e9:c3:5e:17:d2:fa:14:7a:
                    a5:91:e6:4c:8b:7c:8d:1e:78:bb:a6:e2:ef:43:8a:
                    2b:d4:42:13:24:62:66:4d:74:53:5b:0f:28:b4:20:
                    7c:00:ff:c3:bc:12:f8:ec:b9:ac:03:a6:c4:90:db:
                    e9:34:6d:2d:11:94:c0:31:d5:51:da:10:61:95:50:
                    de:e9:56:c8:5f:12:9c:37:79:64:56:2a:11:75:c8:
                    16:90:9f:cb:f7:f6:b5:55:a9:da:d4:62:0a:08:aa:
                    0d:17:a6:f8:e9:04:df:f3:91:f8:0b:86:51:96:5f:
                    cf:1f:c4:23:b0:16:ad:8f:35:e8:77:3d:d2:a8:90:
                    ea:ee:00:76:6e:aa:c7:c6:b7:4b:0b:90:7b:ed:6b:
                    cc:d1:12:01:e3:be:ed:e0:53:ca:52:ec:36:92:63:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:05:D2:F6:15:7F:81:A6:72:F6:7D:50:8B:64:D6:29:80:BC:59:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:13:9b:a4:bb:73:18:3b:ba:3e:f2:7c:ed:1e:cd:dc:d8:79:
         a8:ad:d6:3d:2e:cd:f9:d9:6c:8c:ee:24:6d:e2:7b:cb:8c:eb:
         74:e2:96:b7:1a:b2:67:7e:c3:6d:12:bb:c6:6b:b8:bf:e9:1e:
         a8:68:24:47:07:96:da:b3:bb:ce:8a:84:1e:19:ab:6f:ef:b2:
         da:f5:c5:ff:57:70:0a:ce:d2:55:9b:d9:25:0d:d7:90:db:ec:
         87:9e:f0:bd:8b:40:a6:81:ec:d2:b6:e6:20:01:b9:eb:3f:b4:
         25:d2:a7:a3:1e:6b:9b:ac:f2:be:84:e8:5d:5e:a8:0e:03:8d:
         29:63:0b:ff:9d:3d:bd:1b:af:1d:ea:cc:7f:f4:2d:2f:8a:ca:
         a5:ad:6a:e5:80:39:e9:a2:a6:5c:c1:dc:76:17:23:dd:c2:0b:
         58:c3:fa:1a:29:ba:05:28:4a:eb:13:cb:0d:45:65:b9:cf:0e:
         0a:60:94:b5:86:4b:10:3d:ad:35:aa:20:5f:25:f1:d2:83:0a:
         40:41:6e:d6:e5:e4:d1:df:85:f3:2f:c8:5c:7f:a2:89:69:08:
         01:52:1c:a9:c1:9c:68:44:8d:1a:d1:2c:90:8c:51:59:5f:e8:
         05:bf:99:1f:7e:71:1e:60:db:dd:4b:95:de:fb:7e:9b:90:e2:
         bc:45:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:22:04 2026 by rpki-client