Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53df2088-a379-353e-801c-3ce3dfbe27da.roa
File:                     53df2088-a379-353e-801c-3ce3dfbe27da.roa (raw, json)
Hash identifier:          DkV9zIjJ772K56IuiYtuF0yT7KgQwmrGP9Czgqj2WFk=
Subject key identifier:   21:51:FE:26:F0:C8:88:32:06:F8:36:93:C4:C4:C1:03:64:DF:52:77
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D2BDA36EEFA7737C2C1D52180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53df2088-a379-353e-801c-3ce3dfbe27da.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     396605
IP address blocks:        216.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:36:ee:fa:77:37:c2:c1:d5:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=85e71304-d0d1-4dd2-92da-7eb250079bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8b:cc:21:ee:e3:ca:9a:4a:96:5f:06:59:10:
                    bf:2a:e0:af:7c:63:2c:b0:b9:37:34:3f:e9:e8:cf:
                    11:80:1f:36:1c:39:52:a5:b5:27:5d:c1:03:33:11:
                    01:d2:1d:a4:5e:15:7b:f9:13:b9:fb:dd:91:6c:5a:
                    49:56:36:41:e4:5c:72:24:03:e0:29:01:be:d5:62:
                    a7:dd:67:da:5b:88:c4:31:e4:c3:2e:94:9e:dc:5f:
                    88:ad:28:d6:ef:4a:b5:b7:cd:df:24:ca:70:cd:fd:
                    58:75:18:37:fc:d8:21:1d:48:ac:c8:a7:3c:2b:ee:
                    71:ef:e8:8c:d3:33:0e:04:6e:1f:8e:86:f4:9c:94:
                    14:f2:7d:67:bb:aa:f8:92:e3:97:cb:be:a1:f9:e6:
                    a5:e8:82:af:01:56:94:0e:94:bb:3e:5a:a9:5a:6a:
                    58:9e:e0:32:1f:e1:d2:98:8d:07:44:5c:4b:99:99:
                    39:f2:b7:1b:25:06:13:51:67:12:ae:a3:5a:fa:b9:
                    7b:3e:1e:da:c9:0a:57:1b:ce:db:bc:ed:38:79:ee:
                    2d:75:e6:a4:d0:aa:58:4f:4b:d9:d2:a9:c6:1d:c9:
                    50:26:c2:4a:7e:6b:63:7e:5d:13:98:6d:79:04:f9:
                    90:68:83:1d:94:81:98:c4:2a:c9:05:e3:d4:00:32:
                    9d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:51:FE:26:F0:C8:88:32:06:F8:36:93:C4:C4:C1:03:64:DF:52:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53df2088-a379-353e-801c-3ce3dfbe27da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:43:94:d6:03:32:e6:7d:d9:3c:3c:b8:a8:18:6a:e7:90:c1:
         1e:e4:62:6e:33:77:6c:d2:c8:19:c6:11:2e:b4:13:6b:b1:cc:
         f5:ea:60:65:11:f1:55:fb:5d:b3:a8:37:8f:df:91:8c:96:08:
         76:b4:66:f7:95:2e:bd:b8:df:7b:9f:42:70:65:de:88:5d:0a:
         09:ea:97:a0:2e:12:9d:e7:03:39:d9:11:7b:04:c2:f8:d3:bd:
         97:d9:97:81:92:12:89:28:70:c6:7a:22:80:78:d3:f3:f0:4b:
         b9:93:c1:a2:d9:a3:a1:75:1f:0e:f1:a2:51:47:43:c3:9f:35:
         e9:07:55:5e:c8:d9:82:a0:9a:a3:f5:62:63:f9:35:d2:90:93:
         8b:3a:f2:ba:c0:cc:ef:59:df:8f:1f:97:aa:12:21:20:cc:cf:
         69:08:0e:88:69:90:92:a3:c1:dd:a4:f9:39:fe:73:07:c3:ea:
         56:ad:e8:f6:72:1a:9b:7c:d6:e3:2a:a2:14:b3:34:20:24:60:
         41:f0:c1:d9:0f:18:6c:cd:cf:2f:d3:d1:ad:98:04:5d:7a:b3:
         29:30:e9:5c:1b:d5:2a:2a:5e:0b:cf:51:f5:e1:e8:ba:04:8f:
         5a:18:9c:57:7a:dc:a2:a8:46:e4:d9:c6:64:e6:d2:76:ce:a7:
         15:59:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:03 2026 by rpki-client