Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa
File:                     2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa (raw, json)
Hash identifier:          Kjvi9JaUB8SeIWCtxEG5YI0eljPY2ijceZfm2fbmhG0=
Subject key identifier:   AF:45:AB:7B:86:A8:B7:98:9F:6E:54:9E:C2:30:4F:4E:99:0C:75:76
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3F64FA4145BE348007D757E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     396549
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:fa:41:45:be:34:80:07:d7:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=48e7c0ae-8165-4128-867d-fd0640257c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:ae:5e:a6:92:95:35:02:4d:94:5a:b8:f6:
                    91:1a:f1:4b:92:0b:9c:cc:ad:61:2a:07:dd:6d:54:
                    1b:24:37:7a:cf:d0:e7:75:a7:97:56:7a:23:65:9c:
                    1a:3f:82:ce:9b:5f:97:7f:b6:ea:41:34:0a:3b:8a:
                    1e:df:23:85:41:36:8c:51:ec:6c:48:66:ba:6e:bd:
                    35:8d:f4:12:d0:36:96:26:14:15:72:84:88:ba:01:
                    7f:a4:0d:3e:82:87:a6:5a:73:a9:37:d9:b1:04:01:
                    c0:2e:63:84:bb:9f:31:79:15:47:81:de:cf:95:60:
                    a9:b8:62:a4:71:b5:9d:49:68:51:79:11:7e:f2:a9:
                    de:a8:9a:c9:bd:80:c9:40:cd:9b:45:c7:06:3e:11:
                    41:df:7d:19:78:5b:70:65:36:54:06:94:a3:02:bc:
                    01:81:e6:74:9f:e3:e9:87:e3:3a:52:c5:bc:bf:c5:
                    31:fa:aa:e7:eb:34:cf:2c:14:cc:3a:01:c6:8b:30:
                    f4:a5:cb:08:92:7e:88:59:26:dd:05:ec:91:af:06:
                    18:63:e2:79:fc:b1:d9:28:1d:cd:3b:d4:9d:f4:ea:
                    6d:b6:95:9a:35:ed:83:33:b1:cd:8c:35:53:a8:e1:
                    cc:b9:a0:c1:01:14:20:c7:5b:65:ec:63:aa:0e:f9:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:45:AB:7B:86:A8:B7:98:9F:6E:54:9E:C2:30:4F:4E:99:0C:75:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e399732-2b42-335c-b3f7-bcda4dd09cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:42:26:0f:d5:f6:07:d0:a7:ef:51:64:f4:c1:80:ca:43:b4:
         4f:b2:f7:c3:15:36:cc:84:1b:b5:9a:39:db:10:83:bb:28:19:
         27:55:68:62:4d:19:76:04:dd:b0:aa:17:ac:0c:4b:bb:d3:08:
         48:8a:a5:32:cd:bd:c2:e6:02:d7:4a:e6:1b:64:02:6f:35:e6:
         70:e7:3d:f3:98:92:1a:9c:f7:f2:ce:3c:63:45:21:27:9d:73:
         6c:7d:f3:91:03:54:6b:8f:7f:77:2f:59:bd:91:3e:d8:99:37:
         23:e5:6e:5c:c0:a3:bf:80:19:e6:0b:da:5a:2b:5c:e6:71:9c:
         d0:56:75:91:07:88:4b:8b:2a:cb:77:a3:36:db:bf:73:d7:93:
         ef:59:5a:fd:3a:84:93:4e:e8:91:9d:0d:92:c4:6a:7e:75:14:
         63:b1:b0:1e:74:56:09:90:b9:b0:f0:ff:c9:c1:5c:ce:3f:b6:
         88:1c:61:a0:7e:35:e8:cd:75:06:f4:6a:f5:46:0c:e8:f4:99:
         ef:f8:4c:05:b8:83:06:e8:c7:e1:2a:ef:93:2a:51:2a:99:80:
         cf:aa:ec:dc:bf:9d:4d:08:ba:08:ca:32:ac:4e:1a:62:71:c7:
         b7:0b:8b:b3:83:51:5d:ce:e0:ff:2b:c8:93:36:2d:c7:6b:83:
         b0:6b:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:45 2026 by rpki-client