Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/926aa223-8e88-39bd-b42b-b1446e2590b0.roa
File:                     926aa223-8e88-39bd-b42b-b1446e2590b0.roa (raw, json)
Hash identifier:          qSSb4NioO+8FIgLAqwRusR4Q12no1zsFkSTXKPOwWD0=
Subject key identifier:   E8:FF:12:27:FA:C3:15:8E:63:50:B0:7D:61:3B:A9:66:23:F0:AB:3E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DADCF01819887F9B021017080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/926aa223-8e88-39bd-b42b-b1446e2590b0.roa
Signing time:             Thu 30 Apr 2026 14:13:31 +0000
ROA not before:           Thu 30 Apr 2026 14:13:31 +0000
ROA not after:            Wed 29 Jul 2026 14:13:31 +0000
asID:                     30060
IP address blocks:        216.87.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:cf:01:81:98:87:f9:b0:21:01:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 14:13:31 2026 GMT
            Not After : Jul 29 14:13:31 2026 GMT
        Subject: CN=538f6269-73e0-4396-a512-2a728d26ecbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:8f:47:4b:e0:f5:b1:d2:33:96:a1:e2:b0:
                    9b:bb:38:74:30:2e:50:f0:fb:31:71:09:9e:6f:7a:
                    38:3d:e9:e5:a4:92:d4:b7:24:8e:00:a4:04:f3:4a:
                    35:61:71:ee:ff:fc:bd:a1:52:67:97:30:55:91:b5:
                    f0:00:bd:a1:56:c8:df:7a:fe:c3:4c:96:00:f8:8e:
                    38:34:23:2c:b0:ec:cc:b7:16:6f:4f:6d:5e:c2:c7:
                    3f:ed:09:2e:33:99:40:d0:75:fa:19:07:1b:1f:f3:
                    96:60:82:e2:18:41:ca:b9:09:5e:d8:0d:8a:4a:7b:
                    85:99:e6:ae:be:46:fc:50:e0:49:4b:75:d6:78:61:
                    65:02:ad:97:41:63:34:41:88:0a:6c:4d:69:9c:d2:
                    c0:c3:19:c7:f9:20:3a:a6:a5:ec:b2:59:19:28:8f:
                    9d:eb:d9:54:0f:f4:7a:86:11:e9:07:c2:40:d8:09:
                    d3:1f:b9:72:a0:a1:34:a3:9b:5e:7f:df:0d:60:ba:
                    93:19:15:23:78:d5:1a:bb:ca:88:72:70:1e:2b:7a:
                    32:81:19:c6:c2:84:f1:0b:bf:3b:e2:d9:ab:fb:6f:
                    f4:d2:75:7b:01:b7:0a:6d:10:ed:06:f2:90:22:05:
                    ef:56:9f:94:36:33:cb:62:2f:42:d8:7b:8a:cc:7c:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FF:12:27:FA:C3:15:8E:63:50:B0:7D:61:3B:A9:66:23:F0:AB:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/926aa223-8e88-39bd-b42b-b1446e2590b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b6:be:98:20:85:dc:13:67:a4:d6:ba:83:7b:a1:2c:1f:a6:
         66:ca:9c:1a:a0:cc:88:93:4c:b8:1b:35:e8:05:5a:e9:91:7b:
         30:91:64:f0:d5:39:41:34:9a:6d:80:d7:ca:72:5b:e1:66:14:
         55:1f:d7:2b:0c:d3:34:df:f9:5a:bc:eb:b6:a2:b9:a0:7c:bc:
         bf:51:9b:82:86:5a:ef:e1:41:d9:7d:d0:51:13:36:29:1d:7f:
         ce:4a:09:d2:0f:d6:bc:21:99:be:a9:14:4c:fe:63:3b:b6:a4:
         0f:0f:0d:12:8b:49:cd:cf:a0:15:48:e0:21:89:19:ce:30:5c:
         a1:57:05:ea:fa:8e:9d:a0:3c:ba:a1:11:da:b4:2b:74:ba:70:
         5a:27:b7:6f:c5:5a:0d:dc:ad:b0:2d:94:15:31:a2:a2:0a:e2:
         fe:31:6a:da:2d:2f:7d:67:cf:af:be:b2:b3:0a:3b:b6:e1:c1:
         dc:e9:b6:fd:92:d8:7a:6b:11:bc:27:16:55:a0:82:22:e2:22:
         09:04:74:c0:c3:21:65:6e:14:a0:4a:d9:8e:53:7f:08:a7:8d:
         20:91:a7:a4:05:a0:e8:10:3f:7a:cb:95:eb:46:fc:78:ac:23:
         fa:01:c3:a6:bd:c8:6d:02:ed:bc:7b:29:b8:11:d7:8e:c9:79:
         2f:0f:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:23 2026 by rpki-client