Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd265723-2282-34d9-b18b-3a5dcb7624d8.roa
File:                     bd265723-2282-34d9-b18b-3a5dcb7624d8.roa (raw, json)
Hash identifier:          i4iug0cF8/eNHdy5SDPeESP6w75tCeZz/ybzbGKhO6g=
Subject key identifier:   D9:82:6C:B4:7F:FF:2D:5D:6B:D5:90:9C:C8:33:F2:DB:B2:BA:77:89
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D3F64FCBE419B6BB71C9C2E40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd265723-2282-34d9-b18b-3a5dcb7624d8.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     396576
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:fc:be:41:9b:6b:b7:1c:9c:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=4b27c613-f411-4a14-bd36-908d345f4d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:ea:86:f8:25:2f:f7:25:e3:be:f2:03:fc:
                    fb:6c:0d:df:49:4c:e7:f6:5d:d0:eb:ea:09:59:d9:
                    40:b4:4e:51:bb:79:ff:c6:d6:54:a5:d5:38:97:70:
                    4f:64:b4:e3:9c:2e:d4:10:90:1f:31:f6:b9:0d:2c:
                    23:46:63:0e:f3:78:ab:50:30:97:95:13:d2:95:56:
                    8f:12:11:3e:b0:56:87:fa:c0:96:e4:96:e3:7c:20:
                    9a:85:88:05:42:4b:62:be:e6:d0:9e:94:22:52:9d:
                    c1:47:94:91:53:a1:bd:5c:8a:d6:94:a2:5a:92:54:
                    f8:7f:61:31:61:e0:d2:55:a7:6d:be:3b:1e:ed:35:
                    4f:90:3a:e0:33:d1:e9:ac:25:a6:16:64:b6:49:47:
                    19:fd:ef:62:9d:15:4b:34:79:bc:a2:04:55:e1:0d:
                    d8:dc:35:b0:76:71:1b:0e:41:55:8b:86:d7:ff:77:
                    4e:20:f7:fe:af:fc:f4:5d:f0:ac:38:e7:bf:ec:72:
                    eb:8f:8e:db:e4:81:cb:c5:43:d9:88:fc:3a:02:22:
                    9d:b4:66:8e:3f:b2:1d:99:6f:fd:1f:07:b0:6e:6e:
                    56:ba:c6:8b:21:32:b0:13:1e:32:26:40:f5:75:56:
                    e8:38:52:2c:a3:70:b0:db:d2:48:af:d3:c9:22:37:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:82:6C:B4:7F:FF:2D:5D:6B:D5:90:9C:C8:33:F2:DB:B2:BA:77:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd265723-2282-34d9-b18b-3a5dcb7624d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6b:ff:1f:c4:6f:b5:86:14:5e:8e:bb:a7:97:e2:1d:5f:d8:
         95:30:02:e0:a1:b7:be:99:1a:55:ac:03:c3:43:bb:4f:fd:46:
         70:e1:93:ee:28:8a:74:cd:48:dc:58:17:59:21:b5:8e:dd:f5:
         6e:56:7f:b7:48:1e:2d:73:35:8e:19:cc:c7:f8:23:c7:05:23:
         ae:3f:22:ca:4a:4a:68:7c:45:24:3e:3b:36:21:59:30:2d:24:
         61:b4:f9:85:35:3d:7e:cf:8a:b2:67:1e:1c:da:c1:03:f9:eb:
         84:c4:4f:01:d4:dd:f1:1d:da:e6:9a:8a:b6:0f:56:34:bb:8b:
         0c:af:7f:ff:fa:06:40:eb:49:6c:ae:de:71:67:09:e3:6c:cd:
         c2:32:af:ab:0b:e6:2e:ef:8f:6e:4e:27:f7:b1:01:85:1f:1c:
         10:17:ff:6e:c6:b0:7d:76:fa:bc:cc:1b:4e:27:6f:25:e1:f2:
         f2:d0:49:9f:85:72:0f:40:1c:eb:b9:37:56:fc:8e:10:00:6f:
         2b:6e:c1:14:a2:3a:6c:ff:67:59:2c:43:68:83:b3:79:ab:1f:
         98:e2:6d:d7:0d:48:46:0c:c4:94:a7:d8:1f:f0:94:fe:80:a6:
         84:12:7a:26:48:2a:56:6d:31:3a:b3:d4:c5:cf:c3:a4:ea:df:
         9e:7c:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:35 2026 by rpki-client