Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c07ca04a-c6df-3f06-bdbe-d0fc39e9f675.roa
File:                     c07ca04a-c6df-3f06-bdbe-d0fc39e9f675.roa (raw, json)
Hash identifier:          VKZUKZ/BwAlbICAS9cpEmiE9L4HLwb7HUNh23UlnCv4=
Subject key identifier:   07:BE:4A:63:EC:81:EC:25:0C:C8:38:40:C1:70:AF:6D:0C:94:81:B7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DC157787A091A0D310556E780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c07ca04a-c6df-3f06-bdbe-d0fc39e9f675.roa
Signing time:             Thu 07 May 2026 14:08:50 +0000
ROA not before:           Thu 07 May 2026 14:08:50 +0000
ROA not after:            Wed 05 Aug 2026 14:08:50 +0000
asID:                     16838
IP address blocks:        216.168.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:57:78:7a:09:1a:0d:31:05:56:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 14:08:50 2026 GMT
            Not After : Aug  5 14:08:50 2026 GMT
        Subject: CN=d754a503-303e-46ed-8125-32ef33c6deec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:72:15:6d:70:0e:4a:06:49:2d:69:96:ad:86:
                    25:14:3e:de:36:22:e8:0c:dd:a6:75:2d:28:3e:38:
                    3a:23:ba:40:40:a7:da:f5:1c:dc:81:24:12:2c:f9:
                    30:7d:a2:d6:0a:f4:c6:77:9e:ca:e5:c4:52:c6:bb:
                    5e:37:f2:3c:9b:1e:ba:7d:f6:7c:65:c6:a5:60:6a:
                    c6:b1:3d:c7:82:d7:e3:1d:5a:ec:34:90:3d:ca:85:
                    0d:5e:69:48:9c:5f:84:0e:37:3c:27:90:9c:ac:1a:
                    97:10:f7:3e:cd:60:70:de:de:04:e6:d5:f8:41:df:
                    76:b6:78:ca:70:42:ec:4f:35:ea:14:5e:00:0a:04:
                    02:1e:bd:f9:41:fa:d8:f1:07:bc:0b:c0:82:d0:43:
                    83:d7:96:cb:09:d5:50:84:01:60:37:b5:c1:4b:0d:
                    fa:b0:67:b2:78:41:86:df:0f:a9:bc:11:0d:6e:bc:
                    e7:1b:0a:8d:17:44:9a:26:bd:3f:32:76:fb:43:1c:
                    ad:a0:f5:ed:61:45:02:6f:45:cd:77:49:d2:ce:81:
                    0a:4c:36:77:91:c2:00:f1:3b:75:8c:cd:c4:ae:e3:
                    84:5f:26:c4:37:89:a3:01:4e:fc:14:43:a9:41:b2:
                    68:85:05:38:2a:ea:b2:98:ea:f4:63:2a:8d:3c:de:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BE:4A:63:EC:81:EC:25:0C:C8:38:40:C1:70:AF:6D:0C:94:81:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c07ca04a-c6df-3f06-bdbe-d0fc39e9f675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3d:4e:cb:a8:fe:c6:b8:18:0c:7c:61:8f:37:f1:0e:51:c9:
         ac:3f:2b:04:ac:5a:dd:53:f9:56:b2:c2:b0:f5:ac:19:b1:88:
         ca:a7:ba:d6:31:b6:5e:b9:55:45:a6:86:3c:0f:f6:2c:80:17:
         b3:1c:11:a9:d5:2a:34:cf:6a:75:92:bd:bf:fb:ec:d0:5d:7a:
         10:60:f3:05:59:a3:f5:4c:16:53:1b:17:ed:b6:48:69:be:c2:
         2d:8c:60:b3:7e:8f:44:55:14:11:db:39:51:d3:35:54:b8:a5:
         11:21:4c:45:a6:1b:84:d8:0f:0c:e3:f4:16:0f:84:e3:f4:dd:
         3f:f2:3f:ae:0e:f6:26:93:00:4d:cd:c4:cb:b9:23:ce:ef:11:
         49:ad:63:d6:36:fa:45:61:3b:f3:ae:9d:fd:2f:ee:29:46:ec:
         79:c6:3f:e0:30:0a:17:12:c4:41:e7:3c:1c:00:a2:de:6d:9f:
         b2:ad:fa:60:10:42:c9:65:82:3b:70:88:4e:af:73:9a:b0:e0:
         32:c8:0f:84:05:d0:10:68:aa:cc:a7:e5:b1:7e:b3:b8:70:83:
         ba:91:e9:08:fd:9e:d8:c5:55:b0:de:a7:6b:60:0a:7d:c5:5b:
         b7:c3:19:b9:ed:48:75:60:c7:f5:b5:c8:40:9d:75:78:5a:40:
         e0:6c:07:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:01 2026 by rpki-client