Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa
File:                     1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa (raw, json)
Hash identifier:          tFJYMuc7J4207P6+84knZzXY0LSQqM32XciYoRzjSEM=
Subject key identifier:   DF:FF:0C:EE:98:36:E2:AC:34:00:59:9B:02:65:B3:8F:B1:52:FF:EE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3F64FE9F1A301F5A0C1B3280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     396543
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:fe:9f:1a:30:1f:5a:0c:1b:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=9d34a0cf-8a78-4de3-b5eb-21fbf68cf991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:c7:dd:32:69:16:70:a8:ef:c3:bf:84:fe:
                    04:4d:03:14:2f:bc:95:2d:f3:f4:55:dd:6d:1c:42:
                    a8:24:ec:2a:98:f0:71:49:23:49:87:23:23:d9:62:
                    6e:fc:cd:7a:b7:63:55:f3:f0:2a:6e:b5:8a:f8:51:
                    d7:40:7e:cf:cb:05:82:7c:2b:17:19:21:a3:6c:80:
                    8d:cd:a8:e0:60:af:be:00:8a:86:67:ee:6e:48:0a:
                    e8:4e:d2:b1:bb:fd:87:2b:8b:a9:16:81:66:59:18:
                    5c:0c:6b:54:19:92:b5:eb:4f:a1:b6:78:e0:ff:24:
                    1a:1b:0d:73:b3:42:f8:c2:a8:02:b0:65:5a:e7:59:
                    0f:96:36:e7:c7:f0:9f:df:e4:48:83:24:6c:8b:ad:
                    e9:7b:a8:c1:4c:78:2e:94:eb:b9:ca:bd:ac:5e:6b:
                    ef:ea:f1:7d:0f:bb:e6:1f:0c:0d:dd:aa:f0:96:da:
                    bf:77:4d:45:20:3f:78:52:0e:78:b7:26:70:9e:38:
                    8b:1e:12:73:d9:d8:26:6d:19:93:54:0c:a5:ae:f5:
                    a0:0e:f5:4e:81:1c:d0:8e:b0:d1:d5:4f:35:aa:35:
                    4c:25:52:bb:5d:6b:d6:01:91:7e:17:d5:d3:10:11:
                    06:da:63:97:33:02:26:78:87:f5:a4:fc:79:9a:88:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FF:0C:EE:98:36:E2:AC:34:00:59:9B:02:65:B3:8F:B1:52:FF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1895e7fc-5a69-36a7-aa19-9924d67cdca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:be:f2:42:43:b9:48:35:66:42:33:c9:30:46:0d:ca:22:
         60:c5:af:e3:e8:51:6d:29:89:03:da:10:2b:fd:62:24:66:f1:
         41:53:71:39:e8:13:20:f4:e2:59:2e:ee:53:99:c4:2f:ff:29:
         b1:4a:c7:54:c1:fe:8c:ce:79:a0:b2:99:4a:ee:86:b0:94:97:
         8d:d4:76:78:6a:40:0f:f0:93:b9:f6:06:50:49:16:5c:cb:35:
         49:0c:a3:93:5e:0c:d0:89:34:18:28:cb:04:c7:11:3a:b8:c2:
         27:1e:7f:35:7a:a8:cb:3a:90:ba:1a:22:60:9a:fa:a9:2d:af:
         b2:49:3e:db:d7:3e:da:f6:6e:d2:62:7e:c5:0c:80:cb:a9:31:
         1e:ba:ec:64:ea:08:33:93:43:23:c0:e2:2c:33:86:bc:9d:85:
         17:31:8e:a8:90:76:ba:c0:4e:3a:ed:12:d2:31:9e:cb:76:14:
         1d:c5:71:c7:4f:65:56:cf:c3:22:45:7b:b7:de:9f:33:24:d7:
         1c:2f:c3:2c:44:a1:d8:ba:e2:b0:79:52:e2:56:3f:bd:88:c7:
         cd:ba:dc:15:1a:44:21:0e:d0:d9:fa:db:78:09:11:42:6c:9f:
         76:a8:d6:69:71:48:94:c9:98:ea:94:63:96:74:eb:d4:e5:1a:
         42:ca:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:26 2026 by rpki-client